Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/323830343a313332343a343030303a3a2f33342d3334203d3e20323633353138.roa
File:                     323830343a313332343a343030303a3a2f33342d3334203d3e20323633353138.roa (raw, json)
Hash identifier:          yM8YN+iD6NfwxwW/5P3JODhKm9y4G8HD3gXtc36Jjac=
Subject key identifier:   16:D9:B5:6D:2F:C6:22:02:78:CD:B2:57:88:AC:B6:E7:4F:F5:8F:A9
Certificate issuer:       /CN=6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC
Certificate serial:       39F5786C7C117FFF563D924318AC2394460D7130
Authority key identifier: 6C:5B:B5:16:1B:41:96:C2:CB:83:2C:B0:DD:99:1A:F8:8A:CB:36:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/323830343a313332343a343030303a3a2f33342d3334203d3e20323633353138.roa
Signing time:             Wed 08 Apr 2026 15:30:50 +0000
ROA not before:           Wed 08 Apr 2026 15:25:50 +0000
ROA not after:            Wed 07 Apr 2027 15:30:50 +0000
asID:                     263518
IP address blocks:        2804:1324:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.crl
                          rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 11:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f5:78:6c:7c:11:7f:ff:56:3d:92:43:18:ac:23:94:46:0d:71:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC
        Validity
            Not Before: Apr  8 15:25:50 2026 GMT
            Not After : Apr  7 15:30:50 2027 GMT
        Subject: CN=16D9B56D2FC6220278CDB25788ACB6E74FF58FA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:91:e0:4f:7d:69:0c:b1:10:66:a8:5d:0a:46:
                    8b:55:2a:59:36:f5:01:94:c7:bb:9d:e3:9d:03:dd:
                    85:9d:bf:6b:97:96:4c:a3:3b:b8:d2:c0:d9:91:fc:
                    13:ee:b3:f2:d5:d7:c8:65:3a:b1:b3:3f:27:0c:24:
                    f4:db:bd:06:24:23:9f:aa:3c:85:0f:ec:7f:89:a4:
                    ac:45:f3:45:ae:60:73:9c:88:7a:99:31:93:c8:52:
                    28:06:63:c8:1d:1a:30:13:50:21:0f:a5:34:5c:72:
                    2d:9d:74:01:88:d2:89:2f:53:2a:88:a7:43:e0:75:
                    db:18:fa:94:6c:1e:b8:61:ba:f5:b2:32:a3:c6:1e:
                    71:cf:3c:63:e8:3e:8f:40:f7:e2:ef:c1:4f:17:5b:
                    af:d5:d1:26:c8:2a:ca:9c:b6:ad:cf:a2:2b:bd:f4:
                    e7:cb:36:11:33:dc:e1:a0:9a:e4:d6:9a:a5:2c:35:
                    9f:ca:88:2d:c5:5d:51:33:25:c4:00:27:bf:45:94:
                    d3:40:e6:5a:87:05:ce:e5:f6:39:43:d6:98:ed:25:
                    6b:fb:a7:02:e8:10:7f:98:d8:03:ca:8a:75:75:d7:
                    89:f1:96:7b:11:1c:76:9f:61:65:7b:e4:b4:32:f3:
                    b3:78:6d:17:73:2f:a7:86:d7:f9:f0:e8:71:eb:41:
                    c1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D9:B5:6D:2F:C6:22:02:78:CD:B2:57:88:AC:B6:E7:4F:F5:8F:A9
            X509v3 Authority Key Identifier:
                keyid:6C:5B:B5:16:1B:41:96:C2:CB:83:2C:B0:DD:99:1A:F8:8A:CB:36:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/323830343a313332343a343030303a3a2f33342d3334203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1324:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         aa:5c:d7:5b:72:9e:a2:9f:cb:db:5f:01:b0:b7:f3:4c:a1:5a:
         cf:09:e7:8b:82:21:58:53:66:03:e5:96:bd:23:22:72:6f:94:
         ba:1b:58:d7:f1:85:61:b6:fc:0f:ae:bb:50:02:92:b3:e2:18:
         44:0a:f8:47:1c:d3:4d:3c:ca:67:1d:ae:c8:4b:75:b0:3b:6f:
         4f:68:79:5a:de:25:d1:1c:48:58:7a:90:f1:cf:a0:00:15:fa:
         3b:2a:12:99:bc:a8:e5:0c:e5:e9:cf:c7:09:87:04:01:e4:ee:
         30:eb:9a:1d:61:0b:0d:5f:89:09:50:fa:43:4f:78:d2:b3:c6:
         d1:ca:9d:fb:b1:0b:97:2c:e3:fc:c2:dd:88:93:44:a9:11:ed:
         bf:54:01:8d:c6:be:2b:7b:b6:33:b7:c4:f1:a0:25:9f:15:83:
         b9:32:1d:0c:14:d4:f1:bd:82:17:e6:3a:5a:02:2b:89:4f:d2:
         f0:b9:bf:36:22:ff:c5:df:45:7a:72:42:86:df:2d:09:31:f0:
         d8:f7:da:cf:a5:bf:c5:87:89:88:8a:ea:b0:6e:33:dc:2c:49:
         30:77:70:58:a7:e9:d8:56:04:8d:91:15:a8:bf:99:12:e7:85:
         b8:08:32:b7:30:ec:a2:dc:0f:55:de:70:a8:e9:31:46:18:c3:
         ae:82:48:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 17:53:01 2026 by rpki-client