Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/323830343a366236343a383030303a3a2f33342d3334203d3e20323730333937.roa
File:                     323830343a366236343a383030303a3a2f33342d3334203d3e20323730333937.roa (raw, json)
Hash identifier:          ugaOSP3Jl2VE37rYclDX4H4WnMvmz5B8S1r48lADeUI=
Subject key identifier:   C1:52:DE:EF:77:B2:F2:B6:44:D1:5B:5D:53:F0:83:4F:F4:11:C9:62
Certificate issuer:       /CN=1673423E2B1CFB67A429872716AC44E11E27EBE3
Certificate serial:       3FFC13F2B27278440AEA09ECD6B2DF060AFD4320
Authority key identifier: 16:73:42:3E:2B:1C:FB:67:A4:29:87:27:16:AC:44:E1:1E:27:EB:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/323830343a366236343a383030303a3a2f33342d3334203d3e20323730333937.roa
Signing time:             Sat 07 Mar 2026 23:35:28 +0000
ROA not before:           Sat 07 Mar 2026 23:30:28 +0000
ROA not after:            Sat 06 Mar 2027 23:35:28 +0000
asID:                     270397
IP address blocks:        2804:6b64:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.crl
                          rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:33:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:fc:13:f2:b2:72:78:44:0a:ea:09:ec:d6:b2:df:06:0a:fd:43:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1673423E2B1CFB67A429872716AC44E11E27EBE3
        Validity
            Not Before: Mar  7 23:30:28 2026 GMT
            Not After : Mar  6 23:35:28 2027 GMT
        Subject: CN=C152DEEF77B2F2B644D15B5D53F0834FF411C962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:32:9a:77:2e:ac:6d:f4:8a:93:1d:6b:ac:f4:
                    da:21:3d:29:70:79:f9:17:16:2c:eb:b3:5f:04:1e:
                    4d:bc:ac:f7:f7:8b:99:ce:1b:4e:57:ef:94:d8:8a:
                    b6:07:38:e2:b1:25:13:20:48:90:ed:e6:c3:e2:18:
                    52:70:1d:e9:0d:e0:a1:7f:4b:52:97:72:81:7e:ec:
                    21:75:3c:2e:0b:a5:79:3e:d3:a6:90:7d:cd:b3:9c:
                    39:fe:ee:23:8d:a4:37:75:40:8a:cd:30:26:37:a6:
                    5c:27:5c:06:98:6e:88:5d:f7:dd:30:a4:7b:9c:d1:
                    66:3b:78:35:6f:d6:9b:1b:ff:43:f9:c1:a2:9b:35:
                    e7:4a:82:e8:ce:9c:bf:04:9d:35:64:86:5a:75:0a:
                    2c:9f:0d:7e:29:cf:03:40:3c:9b:2f:9e:b3:11:f4:
                    ff:6b:bf:4b:c8:b3:b0:7d:f4:d3:ea:16:43:4e:f9:
                    25:da:64:27:b4:f9:f1:bf:8b:52:c2:1d:04:c7:c7:
                    35:ba:08:28:68:d8:78:45:42:56:e1:c3:1b:2b:f0:
                    63:4e:b2:5f:cd:78:4a:04:cc:fc:38:7d:7a:44:80:
                    37:93:c8:0e:0e:d2:51:58:6c:86:88:85:77:1b:84:
                    f7:03:77:8d:9f:20:29:08:3d:e7:cf:8e:6c:bc:9e:
                    bd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:52:DE:EF:77:B2:F2:B6:44:D1:5B:5D:53:F0:83:4F:F4:11:C9:62
            X509v3 Authority Key Identifier:
                keyid:16:73:42:3E:2B:1C:FB:67:A4:29:87:27:16:AC:44:E1:1E:27:EB:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/323830343a366236343a383030303a3a2f33342d3334203d3e20323730333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b64:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         57:a6:f7:f7:e7:3d:a6:6d:52:48:1b:3f:b6:07:3b:55:f9:ae:
         bc:2f:8c:a8:be:81:bb:9d:d7:9c:8c:64:3c:12:e1:56:6b:b0:
         7c:96:a0:4e:7c:a2:9f:da:6a:d9:12:2f:ce:5a:9a:72:c7:29:
         55:04:d1:b1:b2:32:db:c0:06:05:a9:6b:44:35:f4:d9:69:e3:
         6b:c8:2e:a3:d8:38:86:b7:a0:7c:1c:f2:dc:0e:d3:78:43:32:
         3f:7c:f5:3e:7f:78:4c:e0:c6:11:dc:a4:6a:a6:50:1d:56:72:
         32:26:36:08:e4:d2:5a:11:0d:c9:7e:97:3e:db:4d:fa:a4:71:
         cc:63:79:e5:ac:5c:62:cd:27:de:ff:18:ab:15:dc:39:7d:8f:
         9e:ab:45:91:d5:06:c4:8c:4f:75:1d:56:49:21:32:6a:f1:5d:
         64:a1:d4:7b:a3:b3:b4:b8:bc:1e:70:42:2b:4a:90:40:5b:f1:
         88:09:dc:93:09:cb:a0:21:29:87:e2:88:89:5c:f0:0b:3e:0f:
         31:d5:87:3a:4d:69:5b:26:ac:b3:22:da:d7:98:e4:b5:6a:c8:
         4a:6f:05:c8:f4:30:90:01:56:27:e8:27:e7:0c:06:7a:d7:7c:
         0b:bb:bc:52:fe:b9:6f:d3:c3:13:d7:23:f7:b8:b7:a9:ef:8b:
         36:bd:c9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:04:24 2026 by rpki-client