Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/323830343a6132633a3a2f33322d313238203d3e20323633303238.roa
File:                     323830343a6132633a3a2f33322d313238203d3e20323633303238.roa (raw, json)
Hash identifier:          cgD7pN+gG6Nj6aYGEtGa1SslOwgvsvlcdn8h7C3771o=
Subject key identifier:   91:01:B6:D3:42:14:F7:AD:7E:56:30:D5:2E:89:7A:0E:EA:80:A2:A6
Certificate issuer:       /CN=BCB67FAEE70CAE205D5105EC24B4E2684D1791FE
Certificate serial:       460BC762F74EA16D5B24954AD6CDB4E0BA9D32D2
Authority key identifier: BC:B6:7F:AE:E7:0C:AE:20:5D:51:05:EC:24:B4:E2:68:4D:17:91:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB67FAEE70CAE205D5105EC24B4E2684D1791FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/323830343a6132633a3a2f33322d313238203d3e20323633303238.roa
Signing time:             Thu 19 Mar 2026 14:00:34 +0000
ROA not before:           Thu 19 Mar 2026 13:55:34 +0000
ROA not after:            Thu 18 Mar 2027 14:00:34 +0000
asID:                     263028
IP address blocks:        2804:a2c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/BCB67FAEE70CAE205D5105EC24B4E2684D1791FE.crl
                          rsync://rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/BCB67FAEE70CAE205D5105EC24B4E2684D1791FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB67FAEE70CAE205D5105EC24B4E2684D1791FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 13:36:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:0b:c7:62:f7:4e:a1:6d:5b:24:95:4a:d6:cd:b4:e0:ba:9d:32:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCB67FAEE70CAE205D5105EC24B4E2684D1791FE
        Validity
            Not Before: Mar 19 13:55:34 2026 GMT
            Not After : Mar 18 14:00:34 2027 GMT
        Subject: CN=9101B6D34214F7AD7E5630D52E897A0EEA80A2A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:45:c8:c2:c3:a2:8c:d5:1a:7a:51:be:f3:5d:
                    3e:16:56:aa:a7:7c:de:16:cc:9a:56:e5:46:55:48:
                    75:b6:fa:d4:42:34:be:3d:2c:af:9c:2a:3b:04:16:
                    98:c5:99:d4:55:50:2e:1f:2c:a4:85:1f:9d:67:de:
                    29:14:c6:87:47:1c:ba:cb:ae:10:9e:d4:22:bf:2c:
                    5c:dd:04:7b:af:3d:3b:52:81:31:22:23:8e:26:64:
                    91:e0:0b:43:48:6c:b5:06:77:71:f4:19:9c:f0:57:
                    eb:d9:73:2b:c5:d8:ed:5f:81:7e:e6:01:d1:3b:ed:
                    7e:6b:30:28:ce:6f:4d:e5:14:26:1e:ee:84:dc:84:
                    00:3e:9b:6e:77:2d:df:02:1d:56:2a:13:96:bf:b3:
                    fe:a6:b4:d8:1a:cf:da:c0:a5:f8:87:06:de:0f:b8:
                    3b:29:70:19:e0:ed:68:5d:8f:27:08:fe:74:dc:32:
                    e9:a4:e2:d7:32:e3:e6:19:9a:6b:12:e2:aa:d4:1a:
                    78:8d:2f:2a:3f:c5:4b:46:be:1e:a8:71:49:65:cd:
                    3e:f1:22:cd:63:25:cf:8a:27:44:14:72:a5:55:34:
                    54:b7:f2:b2:31:7d:eb:e0:6b:2b:d0:a0:2f:ce:dc:
                    c6:92:a6:d3:9e:34:7c:d0:8f:32:9c:b6:0c:22:cd:
                    5b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:01:B6:D3:42:14:F7:AD:7E:56:30:D5:2E:89:7A:0E:EA:80:A2:A6
            X509v3 Authority Key Identifier:
                keyid:BC:B6:7F:AE:E7:0C:AE:20:5D:51:05:EC:24:B4:E2:68:4D:17:91:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/BCB67FAEE70CAE205D5105EC24B4E2684D1791FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB67FAEE70CAE205D5105EC24B4E2684D1791FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/323830343a6132633a3a2f33322d313238203d3e20323633303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:90:bb:cf:43:5a:e8:44:b2:80:02:b1:08:ce:d6:72:d0:a4:
         f9:2f:e8:95:9a:ef:75:57:77:21:df:1b:51:5b:b6:f9:f0:98:
         75:cf:75:d9:70:4f:d5:8a:75:d0:b4:0d:4a:eb:64:0a:33:20:
         b7:c5:6f:fa:72:0b:7d:68:26:8d:1f:53:e9:e0:14:6f:7f:20:
         62:cd:71:ce:3b:3a:7c:77:e1:0d:ec:d6:80:e1:6e:fd:f5:00:
         b6:7c:b7:95:23:bc:17:ee:0a:d3:00:d1:b6:8f:9b:ef:31:d8:
         ce:65:37:91:d7:3a:c2:00:e7:0e:46:dc:cd:60:68:aa:b8:19:
         1b:2e:0b:8e:72:69:5c:52:ad:8c:7d:bc:34:48:37:62:1f:88:
         04:38:df:16:30:2b:c9:0c:12:2a:aa:0e:06:62:3c:9b:2f:08:
         d9:e7:6f:b5:33:44:c2:ca:1d:53:80:0f:e1:a3:ed:63:cd:2d:
         b8:79:75:f5:66:e4:50:00:82:e2:9d:4e:f3:e8:19:2c:e2:43:
         c9:8c:9e:66:d6:9e:b7:5a:34:43:d1:61:da:96:5a:37:a6:65:
         bf:55:a3:44:d3:89:05:39:fe:3a:02:82:4e:c7:d3:e8:55:26:
         f6:fe:da:5f:14:30:1c:e4:74:c9:d8:e9:38:dd:8e:cb:ec:b1:
         cf:92:3e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:55:42 2026 by rpki-client