Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/323830343a363130343a3a2f33322d313238203d3e20323639323036.roa
File:                     323830343a363130343a3a2f33322d313238203d3e20323639323036.roa (raw, json)
Hash identifier:          bEftCpYqndMSeBjK9vtzp2T+2+QV2i3EbcDXm3GWkVg=
Subject key identifier:   2F:25:59:64:D2:B2:66:FC:5B:6C:3B:28:B0:58:F4:97:FE:E4:D5:34
Certificate issuer:       /CN=6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E
Certificate serial:       6ED10533F002870EEB953CDEAE06F8242ADF016C
Authority key identifier: 6B:E6:60:36:B7:C7:6E:29:D8:AF:C6:5A:1B:85:B9:D1:5F:CC:97:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/323830343a363130343a3a2f33322d313238203d3e20323639323036.roa
Signing time:             Tue 19 May 2026 17:16:08 +0000
ROA not before:           Tue 19 May 2026 17:11:08 +0000
ROA not after:            Tue 18 May 2027 17:16:08 +0000
asID:                     269206
IP address blocks:        2804:6104::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E.crl
                          rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 09:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d1:05:33:f0:02:87:0e:eb:95:3c:de:ae:06:f8:24:2a:df:01:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E
        Validity
            Not Before: May 19 17:11:08 2026 GMT
            Not After : May 18 17:16:08 2027 GMT
        Subject: CN=2F255964D2B266FC5B6C3B28B058F497FEE4D534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2c:61:a1:6a:99:31:99:72:20:eb:83:58:14:
                    e0:d3:31:59:b1:11:61:0a:6d:6a:c9:35:51:12:4f:
                    b7:3b:0f:f1:54:7f:14:22:a2:db:00:bd:65:b4:90:
                    f5:f4:9b:00:23:1a:7b:ab:15:c9:2c:c0:27:6a:64:
                    fa:64:ee:1e:aa:ea:a9:19:ff:d1:13:d2:6e:ab:5c:
                    cf:dc:13:cb:b9:d1:fa:c6:60:0c:37:80:61:06:d1:
                    a5:ae:49:58:7a:88:17:07:1b:d0:95:e2:d4:15:25:
                    f6:78:71:e2:d8:d0:57:09:e8:e8:3e:cf:dd:87:3f:
                    f2:51:30:66:8d:fd:6f:23:a2:4e:34:3c:10:d1:94:
                    e0:03:af:be:05:32:dc:be:bc:02:e3:7f:0b:e7:e0:
                    d4:dd:fa:3d:a0:1d:df:bb:5e:d0:cf:54:a9:ee:4b:
                    9a:fe:dc:fb:9d:c5:28:4d:88:af:36:ee:6c:a0:41:
                    48:63:50:00:e9:96:09:bc:5b:fe:99:9e:93:e2:d2:
                    8f:29:e1:c5:aa:fc:f8:62:ed:ad:63:7a:17:40:bb:
                    22:60:e2:8e:b0:ec:fc:be:33:24:f4:8d:58:36:30:
                    73:47:15:cf:3a:22:e4:40:cf:6f:d6:3c:a0:35:49:
                    c1:92:0b:92:d3:1d:7e:e8:2e:95:e3:82:fa:20:3b:
                    d1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:25:59:64:D2:B2:66:FC:5B:6C:3B:28:B0:58:F4:97:FE:E4:D5:34
            X509v3 Authority Key Identifier:
                keyid:6B:E6:60:36:B7:C7:6E:29:D8:AF:C6:5A:1B:85:B9:D1:5F:CC:97:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BE66036B7C76E29D8AFC65A1B85B9D15FCC974E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/323830343a363130343a3a2f33322d313238203d3e20323639323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6104::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:65:f8:81:2d:9f:6e:5d:c2:61:6d:e5:58:0a:3e:2d:44:77:
         1c:3a:a1:0c:54:a0:33:4f:1f:32:a2:70:4e:d5:8c:56:f4:12:
         ee:83:d5:78:01:b0:f1:f3:94:53:b5:72:71:b3:15:7b:f2:d9:
         09:52:36:31:ed:5e:c7:bf:5d:73:f9:06:b8:52:3f:b4:4d:be:
         92:2e:1c:62:28:6f:7a:b7:9e:8b:10:13:cb:6d:42:86:6d:10:
         35:ee:75:31:b0:c4:eb:fc:e8:6f:93:37:6c:78:d2:ae:bf:c4:
         79:35:4f:73:e8:c2:c7:74:81:ec:b3:65:fd:d8:6a:72:87:6f:
         ee:3e:c5:9c:2b:a2:05:85:2b:46:71:e4:7f:11:e0:d4:9c:09:
         68:18:ab:16:53:37:5f:09:27:c7:a7:d6:a6:27:46:bf:89:3a:
         16:3a:74:59:f6:8b:34:bc:da:f0:19:d1:7c:08:b0:e2:f2:a4:
         7b:c6:af:92:25:1a:58:8d:63:d9:7e:57:56:5d:99:bc:ab:96:
         e3:38:45:75:00:98:ae:f0:91:62:6a:00:3c:e4:f4:7f:19:1a:
         2d:39:f1:8a:11:3f:d7:95:c4:bf:06:6d:8a:13:ce:70:4e:88:
         a4:86:1a:4f:54:8b:c3:d6:d6:82:38:51:04:6d:80:20:11:80:
         50:6a:b6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:43:44 2026 by rpki-client