Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/323830343a366562383a3a2f33332d3333203d3e20323730363135.roa
File:                     323830343a366562383a3a2f33332d3333203d3e20323730363135.roa (raw, json)
Hash identifier:          7f3DzbZ9dOHXILBfVhVn387S5DYCuWEEqLEdZkb0s2g=
Subject key identifier:   BB:E1:40:71:99:A6:4E:63:69:13:35:49:6A:1D:E0:30:93:5E:26:5B
Certificate issuer:       /CN=DB85469981D62F9ABEE701953EC3BE74F4D6E638
Certificate serial:       253206F93BDA4043EEF21DFF20646D1122910A7D
Authority key identifier: DB:85:46:99:81:D6:2F:9A:BE:E7:01:95:3E:C3:BE:74:F4:D6:E6:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB85469981D62F9ABEE701953EC3BE74F4D6E638.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/323830343a366562383a3a2f33332d3333203d3e20323730363135.roa
Signing time:             Tue 21 Jul 2026 23:04:14 +0000
ROA not before:           Tue 21 Jul 2026 22:59:14 +0000
ROA not after:            Tue 20 Jul 2027 23:04:14 +0000
asID:                     270615
IP address blocks:        2804:6eb8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/DB85469981D62F9ABEE701953EC3BE74F4D6E638.crl
                          rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/DB85469981D62F9ABEE701953EC3BE74F4D6E638.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB85469981D62F9ABEE701953EC3BE74F4D6E638.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:32:06:f9:3b:da:40:43:ee:f2:1d:ff:20:64:6d:11:22:91:0a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB85469981D62F9ABEE701953EC3BE74F4D6E638
        Validity
            Not Before: Jul 21 22:59:14 2026 GMT
            Not After : Jul 20 23:04:14 2027 GMT
        Subject: CN=BBE1407199A64E63691335496A1DE030935E265B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b7:c7:7e:ab:b7:d3:d5:c4:92:0e:6a:56:56:
                    de:a0:8e:aa:85:66:8c:d6:ae:e6:78:d6:d1:d9:60:
                    c1:1e:c1:aa:55:1b:9e:12:23:88:53:66:48:9c:c5:
                    d3:3e:d9:64:87:81:da:f3:b6:9a:c3:a5:69:c3:d4:
                    d4:d7:fa:2b:56:ed:5d:47:06:4a:6a:29:2c:78:cb:
                    fe:a9:c3:f6:ec:05:d9:68:ab:7f:67:07:77:1f:3f:
                    2e:5f:7c:4e:dd:55:a7:e7:6e:cc:12:cf:5b:42:0a:
                    39:0a:39:e3:b5:59:27:9b:c8:6d:a2:ac:df:f0:bb:
                    1b:e0:42:d2:a5:9b:b5:92:bd:ad:51:e7:c4:2a:9e:
                    a7:74:47:41:30:e3:e9:58:31:07:8e:4a:c8:ce:26:
                    2b:ad:74:ae:8c:41:51:77:05:3b:fc:03:85:5d:a1:
                    ed:85:27:51:c1:3c:14:d4:61:03:c0:0f:e1:af:a0:
                    13:83:04:19:78:6d:43:3c:1f:d7:47:53:91:d0:08:
                    2d:21:ee:e8:2b:03:a6:16:50:29:6a:84:dd:26:06:
                    18:b0:a2:06:a0:5a:31:32:49:34:2d:a4:3a:2d:c3:
                    11:f2:43:56:1b:78:15:27:fa:f7:77:b5:f4:2d:a5:
                    14:4a:cd:98:05:6a:3b:5d:67:64:8e:d6:5a:80:9c:
                    91:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E1:40:71:99:A6:4E:63:69:13:35:49:6A:1D:E0:30:93:5E:26:5B
            X509v3 Authority Key Identifier:
                keyid:DB:85:46:99:81:D6:2F:9A:BE:E7:01:95:3E:C3:BE:74:F4:D6:E6:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/DB85469981D62F9ABEE701953EC3BE74F4D6E638.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB85469981D62F9ABEE701953EC3BE74F4D6E638.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/323830343a366562383a3a2f33332d3333203d3e20323730363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6eb8::/33

    Signature Algorithm: sha256WithRSAEncryption
         0d:11:d0:3f:fd:44:31:67:52:2d:2a:c7:22:51:c3:3a:09:4f:
         ae:3a:cb:a8:03:8b:d4:73:f5:ac:e6:37:46:36:3a:df:00:27:
         87:1d:56:77:49:82:48:d0:c6:ed:87:e4:fb:62:df:d8:8f:a2:
         82:44:42:5d:e5:57:c0:e8:24:f0:e6:8e:78:12:9d:97:b1:7f:
         df:a9:88:b8:4f:46:b4:68:07:31:32:a3:2d:a1:f6:5d:fe:bf:
         ce:10:2b:47:63:f8:c1:b0:94:a9:7a:ed:a2:a0:b1:d9:b2:51:
         b4:25:df:b2:10:12:9f:12:1d:72:8a:6f:2b:82:14:bb:c5:a3:
         f8:df:52:3a:f2:1e:7b:68:4b:03:a4:96:27:1b:cf:71:51:f9:
         28:a5:8e:48:d1:6b:ea:a6:69:02:7d:91:8d:dc:41:47:ca:ab:
         db:b7:38:33:b4:21:fb:96:1e:4d:a7:81:90:01:cb:0c:56:05:
         9a:85:a8:ce:af:64:fd:5f:15:08:52:7d:46:5b:6b:04:1c:20:
         c6:a5:fe:45:97:66:08:fb:5d:b5:20:6e:b5:81:2b:e3:d7:91:
         bd:f3:13:6e:48:02:91:82:ab:d4:7e:cf:1c:c3:70:cb:33:1d:
         f8:1d:45:59:06:bb:28:97:e5:d9:a8:fa:2b:b2:62:e4:e2:2b:
         4f:6a:88:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:19:11 2026 by rpki-client