Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/323830343a363333383a3a2f33322d3332203d3e20323639333437.roa
File:                     323830343a363333383a3a2f33322d3332203d3e20323639333437.roa (raw, json)
Hash identifier:          WOQbFTAbanJJAq6V2WfdpdNh4Xyev6yFfZJVCTnruq8=
Subject key identifier:   10:DC:A6:1B:69:53:48:54:B0:B9:48:BF:9D:62:E0:8B:66:10:E8:BD
Certificate issuer:       /CN=6DD53C4867079833703A1EDF2B50AADA5DE39710
Certificate serial:       780F41FF8DD47833F5A75B76D7C3D5DA6284CF3D
Authority key identifier: 6D:D5:3C:48:67:07:98:33:70:3A:1E:DF:2B:50:AA:DA:5D:E3:97:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DD53C4867079833703A1EDF2B50AADA5DE39710.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/323830343a363333383a3a2f33322d3332203d3e20323639333437.roa
Signing time:             Sat 24 Jan 2026 19:56:21 +0000
ROA not before:           Sat 24 Jan 2026 19:51:21 +0000
ROA not after:            Sat 23 Jan 2027 19:56:21 +0000
asID:                     269347
IP address blocks:        2804:6338::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/6DD53C4867079833703A1EDF2B50AADA5DE39710.crl
                          rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/6DD53C4867079833703A1EDF2B50AADA5DE39710.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DD53C4867079833703A1EDF2B50AADA5DE39710.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 21:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:0f:41:ff:8d:d4:78:33:f5:a7:5b:76:d7:c3:d5:da:62:84:cf:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DD53C4867079833703A1EDF2B50AADA5DE39710
        Validity
            Not Before: Jan 24 19:51:21 2026 GMT
            Not After : Jan 23 19:56:21 2027 GMT
        Subject: CN=10DCA61B69534854B0B948BF9D62E08B6610E8BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a9:5c:46:ad:0f:21:1d:03:dc:17:32:33:36:
                    73:ab:4d:8e:38:8b:bf:b5:a3:2a:cb:88:4b:bd:22:
                    78:fd:a4:95:ed:78:4f:ec:13:9c:5a:58:c4:b5:12:
                    31:ac:7e:e5:26:b6:57:f5:8c:bd:bf:cc:8c:55:35:
                    19:47:c5:5a:c3:fd:cd:0b:9e:e4:44:e5:7c:37:ce:
                    62:dc:fe:ef:b7:a1:11:23:d9:8c:82:5c:af:af:fa:
                    46:1c:4e:3f:92:8c:de:7e:75:cf:2e:7f:b5:61:eb:
                    d3:65:fb:27:ab:68:f7:d3:f3:00:c4:8d:9c:47:f2:
                    96:49:52:71:40:89:7a:60:51:c7:42:35:9d:e0:4a:
                    83:9c:d8:1a:ec:9d:11:1e:71:94:c6:dd:bc:b4:1a:
                    3f:d2:fb:8c:36:f5:83:f6:e7:e1:9a:7c:59:66:12:
                    6f:a9:6c:d5:40:b5:fc:53:34:b7:05:0c:ea:8d:c4:
                    51:92:b9:f5:f4:c6:ac:b2:f2:fc:6e:4f:c8:41:a5:
                    42:ec:3d:0f:ef:78:ba:04:34:42:1d:fc:63:a5:97:
                    4f:16:c3:5e:c2:40:97:80:e2:cc:41:8f:34:f3:8c:
                    22:96:fb:c8:d8:06:02:a8:da:ed:b3:90:08:f3:05:
                    82:6b:5c:e3:4e:e2:c0:30:a0:9f:81:00:97:2b:34:
                    99:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DC:A6:1B:69:53:48:54:B0:B9:48:BF:9D:62:E0:8B:66:10:E8:BD
            X509v3 Authority Key Identifier:
                keyid:6D:D5:3C:48:67:07:98:33:70:3A:1E:DF:2B:50:AA:DA:5D:E3:97:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/6DD53C4867079833703A1EDF2B50AADA5DE39710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DD53C4867079833703A1EDF2B50AADA5DE39710.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/323830343a363333383a3a2f33322d3332203d3e20323639333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6338::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:ef:97:50:12:a3:dd:7b:b9:e5:a3:26:82:9f:09:14:b1:a8:
         8e:63:05:7b:32:19:50:2c:23:13:60:21:f8:52:9a:67:c3:04:
         9e:c8:95:1d:b9:da:f8:b6:cf:77:e4:c4:31:67:8b:af:7a:0e:
         c0:ae:4b:16:88:87:34:11:a1:8f:9f:3a:06:41:ba:3a:93:b4:
         c1:8a:51:45:a9:3e:f3:f7:33:a2:9c:83:76:6f:21:1f:41:e3:
         92:ae:f7:01:42:28:c8:15:c0:9f:7f:96:f2:fb:60:34:2e:6e:
         8b:86:e6:67:eb:c5:5c:3b:58:2b:73:e1:62:64:67:a0:33:ba:
         f7:22:90:93:00:66:7d:f3:cd:35:21:a4:12:fb:c2:d2:cd:b9:
         a4:9e:e9:1c:b7:51:ea:3b:90:b0:c3:85:c9:54:62:02:ad:87:
         c2:ab:9e:14:8c:bd:95:7a:0a:ab:e1:ed:f2:a8:b8:12:0e:dc:
         7b:8d:15:f2:7e:7c:87:c2:3b:2c:23:ef:a0:64:dd:bc:c1:65:
         37:8f:5b:87:a2:c3:d7:58:1b:70:0a:37:c5:06:6b:81:31:5e:
         d7:c2:db:65:89:31:e4:ca:c3:c6:d7:52:20:80:e7:92:0f:ea:
         ee:4d:07:cc:f7:da:33:e9:33:49:78:da:57:a4:f3:9a:bc:9a:
         1f:92:9e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 07:03:50 2026 by rpki-client