Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/323830343a366562383a633030303a3a2f33342d3334203d3e20323730363135.roa
File:                     323830343a366562383a633030303a3a2f33342d3334203d3e20323730363135.roa (raw, json)
Hash identifier:          SYTMJAXAOqfA/NH7blzBwEA1+3mOg7yd+YfwxHq2RdU=
Subject key identifier:   F2:78:73:4C:53:89:88:55:D4:DE:F7:08:5D:98:38:30:73:F5:2B:14
Certificate issuer:       /CN=6114284DE6F274DEE8232CD8A210B10F99008FCB
Certificate serial:       7BA32B97661CC9D7F30C1AF0FB0A175BC90B3234
Authority key identifier: 61:14:28:4D:E6:F2:74:DE:E8:23:2C:D8:A2:10:B1:0F:99:00:8F:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6114284DE6F274DEE8232CD8A210B10F99008FCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/323830343a366562383a633030303a3a2f33342d3334203d3e20323730363135.roa
Signing time:             Mon 06 Apr 2026 13:58:33 +0000
ROA not before:           Mon 06 Apr 2026 13:53:33 +0000
ROA not after:            Mon 05 Apr 2027 13:58:33 +0000
asID:                     270615
IP address blocks:        2804:6eb8:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/6114284DE6F274DEE8232CD8A210B10F99008FCB.crl
                          rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/6114284DE6F274DEE8232CD8A210B10F99008FCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6114284DE6F274DEE8232CD8A210B10F99008FCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 04:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a3:2b:97:66:1c:c9:d7:f3:0c:1a:f0:fb:0a:17:5b:c9:0b:32:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6114284DE6F274DEE8232CD8A210B10F99008FCB
        Validity
            Not Before: Apr  6 13:53:33 2026 GMT
            Not After : Apr  5 13:58:33 2027 GMT
        Subject: CN=F278734C53898855D4DEF7085D98383073F52B14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:21:78:1a:ba:12:28:fb:69:52:d4:1e:fc:aa:
                    9c:5e:f2:82:ed:6b:86:5c:a1:90:a6:c6:55:7e:cd:
                    2e:02:5d:d9:fd:26:a1:7e:19:a2:c7:fd:24:f6:9d:
                    50:32:eb:b7:7d:14:95:a2:e3:19:22:39:b7:f9:b5:
                    d8:78:b3:af:5a:c5:e6:7c:54:86:6c:b1:bd:11:29:
                    ff:79:f6:d7:d2:42:c5:d4:b9:14:78:b2:a4:6a:4e:
                    94:0a:14:40:9e:7b:b0:f7:79:5d:34:2e:04:6b:c4:
                    56:ee:7c:ba:9d:7a:ec:af:9d:4c:af:6d:12:7b:47:
                    f3:9e:f1:d5:e2:ad:4a:0b:0e:63:b5:0e:81:30:bf:
                    02:f2:ae:db:22:1d:d4:ec:ca:0c:e1:2f:16:2f:51:
                    80:18:73:4c:d9:08:36:88:93:2d:5a:24:2b:49:f7:
                    10:58:d8:7f:d6:c6:00:f1:26:59:7f:85:cc:d1:c7:
                    88:9b:36:45:7b:7c:03:42:e2:d2:d4:74:12:2c:fa:
                    35:ba:44:90:cb:ee:ed:8b:7f:52:27:30:4a:0d:45:
                    2d:56:b9:c7:f2:a2:52:9b:e5:dc:8c:8e:c4:b5:0f:
                    18:9c:22:b7:98:48:7c:cb:6c:2f:c8:6c:92:b1:0e:
                    86:d9:f3:8a:d5:f5:85:77:6c:9e:99:8f:39:6c:0c:
                    5c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:78:73:4C:53:89:88:55:D4:DE:F7:08:5D:98:38:30:73:F5:2B:14
            X509v3 Authority Key Identifier:
                keyid:61:14:28:4D:E6:F2:74:DE:E8:23:2C:D8:A2:10:B1:0F:99:00:8F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/6114284DE6F274DEE8232CD8A210B10F99008FCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6114284DE6F274DEE8232CD8A210B10F99008FCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/323830343a366562383a633030303a3a2f33342d3334203d3e20323730363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6eb8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         10:bb:03:b5:ed:c9:4c:bd:92:b6:4f:1b:04:25:d9:fb:79:24:
         e6:9d:35:52:1f:77:8d:3c:54:41:20:18:9f:fb:34:e1:5c:74:
         c4:37:ed:4f:7f:5e:74:d6:27:50:ca:d4:35:59:9e:b7:4f:20:
         03:26:d7:10:84:59:93:65:6b:26:3a:29:bb:1f:ff:70:8f:41:
         2e:ca:41:cf:7a:f9:d2:ef:c6:5a:0e:40:cd:ef:3b:cf:7f:aa:
         a7:11:e0:de:1f:d6:74:a2:9f:7c:3e:75:59:dc:0d:3b:33:24:
         c2:b7:59:31:7f:f4:c3:f8:b6:b1:dc:33:79:ae:3e:9b:3e:b6:
         7b:aa:66:74:44:79:50:a8:3c:ec:93:9a:f1:b2:c2:65:b9:eb:
         4a:3b:72:83:31:e8:7a:8e:72:d9:df:a8:71:ad:40:6c:59:e3:
         03:10:c7:3e:c1:9e:b6:57:af:c6:f6:d6:ac:8b:49:6e:c9:64:
         74:3c:57:b4:3f:70:f0:a2:0d:5f:da:95:a0:f9:e2:a3:59:7a:
         83:ad:e5:28:17:8d:00:20:59:17:d4:86:1f:51:39:8c:14:1d:
         53:67:a4:71:9f:3f:5f:78:3a:5b:7a:d8:8c:64:90:da:3a:4f:
         28:e8:5c:3e:5d:3f:97:8e:ea:e8:a6:b4:99:20:9a:61:55:65:
         22:32:38:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:05:22 2026 by rpki-client