Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/323830343a366236343a383030303a3a2f34302d3430203d3e20323730333937.roa
File:                     323830343a366236343a383030303a3a2f34302d3430203d3e20323730333937.roa (raw, json)
Hash identifier:          W8e6mVE+QIYxNciGolS5YmSdNlL/hgXiAkhOf8FPmAk=
Subject key identifier:   8C:9D:9E:5E:A9:DE:9F:C5:A9:98:54:93:4B:EB:4E:6C:A0:41:00:97
Certificate issuer:       /CN=1673423E2B1CFB67A429872716AC44E11E27EBE3
Certificate serial:       109726010A031530FEE50024FCA75DAB46EDB539
Authority key identifier: 16:73:42:3E:2B:1C:FB:67:A4:29:87:27:16:AC:44:E1:1E:27:EB:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/323830343a366236343a383030303a3a2f34302d3430203d3e20323730333937.roa
Signing time:             Mon 16 Mar 2026 22:03:06 +0000
ROA not before:           Mon 16 Mar 2026 21:58:06 +0000
ROA not after:            Mon 15 Mar 2027 22:03:06 +0000
asID:                     270397
IP address blocks:        2804:6b64:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.crl
                          rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:33:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:97:26:01:0a:03:15:30:fe:e5:00:24:fc:a7:5d:ab:46:ed:b5:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1673423E2B1CFB67A429872716AC44E11E27EBE3
        Validity
            Not Before: Mar 16 21:58:06 2026 GMT
            Not After : Mar 15 22:03:06 2027 GMT
        Subject: CN=8C9D9E5EA9DE9FC5A99854934BEB4E6CA0410097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8f:15:8a:cd:d2:60:81:78:44:39:cb:0c:e5:
                    0e:b6:22:e0:d7:47:f4:39:f4:f4:06:24:76:ca:1e:
                    ce:23:2d:e9:63:05:d6:7e:2f:25:05:76:53:b3:5d:
                    71:53:7e:be:8d:5b:6b:1b:40:83:d5:25:f9:1e:e7:
                    db:16:20:19:03:51:12:ee:c5:71:b8:0d:fd:8a:91:
                    c3:a0:95:9f:d7:46:18:ae:51:7e:93:ad:d1:be:e0:
                    ca:18:64:90:5d:e5:75:4e:80:c6:ed:76:bb:92:0a:
                    04:04:18:e4:61:33:26:7a:79:a2:4b:f0:d9:e2:bb:
                    cb:ed:17:c4:c8:95:c3:cb:b2:7f:18:31:ca:ec:bc:
                    dc:fb:95:37:4d:ba:e9:dd:35:f6:c6:92:53:2f:5f:
                    2f:d7:6f:3a:1b:d3:fa:6c:ec:f1:d1:92:48:21:de:
                    a7:4f:a8:ab:98:f2:4d:21:47:1d:79:23:c0:ea:0a:
                    4c:b3:20:d8:f0:30:47:20:e6:f7:93:4d:a0:29:8d:
                    b8:1a:e5:10:f0:3a:af:9f:15:eb:2b:0f:db:97:e7:
                    c3:28:b2:a1:29:c3:25:a4:1b:74:ea:46:58:6d:ef:
                    d0:75:4d:2c:15:af:2c:21:5d:4a:41:e8:e6:77:70:
                    bf:52:53:c1:b2:81:65:71:bf:d9:ae:43:e4:d6:ff:
                    91:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9D:9E:5E:A9:DE:9F:C5:A9:98:54:93:4B:EB:4E:6C:A0:41:00:97
            X509v3 Authority Key Identifier:
                keyid:16:73:42:3E:2B:1C:FB:67:A4:29:87:27:16:AC:44:E1:1E:27:EB:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/323830343a366236343a383030303a3a2f34302d3430203d3e20323730333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b64:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1b:69:60:b4:1f:67:b9:5b:a7:e1:ec:89:1c:20:6b:3d:72:e3:
         c8:2b:ef:84:e6:18:f1:79:ad:76:ac:4f:1a:ac:b9:d5:97:26:
         68:f5:f2:da:cc:0f:12:6c:bf:86:f5:52:ee:4a:80:74:f9:0e:
         3d:94:17:67:2e:81:f0:8d:72:cf:f1:e1:00:a2:cf:8a:3d:8f:
         9a:f4:a3:26:f8:e8:4d:69:05:8f:f8:9c:32:b3:b2:9b:17:b4:
         20:c9:77:7b:17:fc:4c:40:b9:89:9b:1f:6f:c8:e2:22:23:22:
         52:56:5b:da:e8:d2:d3:cc:e6:a8:fe:58:af:dc:0b:44:0e:50:
         00:6c:de:c8:9a:6d:cf:cb:ac:eb:92:df:57:3d:9f:55:5b:c9:
         b0:47:3d:7c:2b:80:74:cf:93:27:98:dc:e4:c6:a3:b7:bb:b3:
         18:4e:8e:17:30:50:17:2b:85:6f:0e:88:dc:58:e7:12:54:b5:
         f4:0c:1b:ba:05:28:52:cd:de:d6:3a:f1:ab:12:5c:ed:63:5f:
         6a:9a:d5:f1:b5:f7:84:79:b6:e9:fd:19:bd:0e:53:b1:cf:12:
         d2:c7:07:3b:99:17:f2:ac:25:d1:59:42:44:11:c8:f8:28:77:
         86:28:f9:0f:1f:1d:24:d4:b2:bc:81:d3:0f:f6:d0:cf:96:b3:
         16:db:70:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:06:22 2026 by rpki-client