Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/323830343a366236343a3a2f33332d3333203d3e20323730333937.roa
File:                     323830343a366236343a3a2f33332d3333203d3e20323730333937.roa (raw, json)
Hash identifier:          GiOUUQXm6VXxJ5sQLAPxyy1LcdALbtVpi2o3KKhA1J8=
Subject key identifier:   EA:EB:BD:02:BD:F5:71:CC:B6:53:9D:4D:0B:63:F9:C9:85:AC:20:DD
Certificate issuer:       /CN=1673423E2B1CFB67A429872716AC44E11E27EBE3
Certificate serial:       5BF7E9D0925D4646EE0DCD9C6989131B7647E30F
Authority key identifier: 16:73:42:3E:2B:1C:FB:67:A4:29:87:27:16:AC:44:E1:1E:27:EB:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/323830343a366236343a3a2f33332d3333203d3e20323730333937.roa
Signing time:             Sat 07 Mar 2026 23:35:28 +0000
ROA not before:           Sat 07 Mar 2026 23:30:28 +0000
ROA not after:            Sat 06 Mar 2027 23:35:28 +0000
asID:                     270397
IP address blocks:        2804:6b64::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.crl
                          rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:33:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f7:e9:d0:92:5d:46:46:ee:0d:cd:9c:69:89:13:1b:76:47:e3:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1673423E2B1CFB67A429872716AC44E11E27EBE3
        Validity
            Not Before: Mar  7 23:30:28 2026 GMT
            Not After : Mar  6 23:35:28 2027 GMT
        Subject: CN=EAEBBD02BDF571CCB6539D4D0B63F9C985AC20DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:35:23:e5:0f:2f:33:60:c2:e8:d8:6c:9e:36:
                    c8:65:4d:1a:54:b5:4f:f7:03:da:11:54:1f:62:ee:
                    14:5f:ec:76:77:57:d5:74:0c:a6:15:0a:b8:24:dd:
                    bc:b6:84:88:2f:f2:3b:7f:fc:ea:dd:c6:4a:39:1c:
                    ab:d1:53:35:65:16:9c:7a:d0:21:a1:e9:b1:79:09:
                    e1:27:36:b3:43:c4:e3:65:84:bb:e7:5f:0b:27:4a:
                    ca:23:66:03:f5:af:69:5d:96:18:9c:d3:31:d1:c1:
                    b7:af:48:9b:6b:e3:43:f7:f0:55:47:9e:bd:ca:75:
                    be:08:3e:68:fc:48:37:a2:32:d3:8f:8e:75:39:2d:
                    d6:e2:c3:ea:88:39:ad:a8:e8:14:fb:c7:b8:c2:5b:
                    e0:55:38:5e:59:67:e7:ca:17:68:d7:cd:92:18:37:
                    32:c8:95:a6:34:21:86:ce:0d:44:c9:ea:b7:c7:0e:
                    95:59:a9:db:08:15:10:25:c7:6c:68:37:40:02:a3:
                    8f:2d:eb:32:cc:01:39:d3:b7:37:00:e8:5a:a4:62:
                    cd:37:71:b3:0e:d8:7e:e8:64:ff:91:eb:71:10:4d:
                    03:42:24:92:fc:13:4a:88:d7:99:5a:25:f1:02:8e:
                    05:65:65:53:2a:26:a9:4e:3f:63:84:8e:fe:c3:53:
                    56:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EB:BD:02:BD:F5:71:CC:B6:53:9D:4D:0B:63:F9:C9:85:AC:20:DD
            X509v3 Authority Key Identifier:
                keyid:16:73:42:3E:2B:1C:FB:67:A4:29:87:27:16:AC:44:E1:1E:27:EB:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/323830343a366236343a3a2f33332d3333203d3e20323730333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b64::/33

    Signature Algorithm: sha256WithRSAEncryption
         6c:92:20:77:d0:21:5c:0a:49:9e:cf:6b:3d:2b:d9:38:db:8d:
         26:d2:a7:5f:67:88:e5:b3:4e:a7:17:9b:9b:6f:7d:4e:20:a2:
         4b:f1:9c:9b:90:cd:8a:88:15:c7:ff:0b:b4:8c:4a:0c:73:ff:
         53:05:b6:62:19:7c:39:ab:38:5c:f9:aa:bc:81:dd:0c:42:c9:
         c0:2e:62:f7:b2:05:84:16:16:51:f6:d2:6e:7a:87:b9:11:84:
         be:74:2e:76:ff:56:f5:4e:74:18:63:86:8a:39:91:79:4c:be:
         c3:d6:c3:1c:27:69:51:cb:1f:20:08:9f:1e:42:3f:07:9c:33:
         c3:e9:89:4a:d7:ee:54:e9:70:30:f2:1d:fd:80:c9:d1:12:f6:
         a8:66:4c:53:e1:e9:26:fb:8a:cd:e0:98:fe:c4:54:26:04:b5:
         aa:9f:f4:5d:65:34:a8:2f:1b:f1:bf:f2:04:f7:34:c6:d7:d3:
         d8:c7:87:75:63:aa:76:47:5f:f7:b9:92:72:12:34:f9:1d:7d:
         55:23:04:15:61:c9:5e:ba:ed:31:de:9e:bf:a9:76:56:ce:14:
         4a:ee:3d:15:71:8c:16:cc:49:10:5a:d2:a9:55:a9:a9:bf:99:
         2f:d1:3b:15:4a:35:e8:ec:17:44:4f:2e:b4:d3:79:01:ba:68:
         59:47:93:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:04:24 2026 by rpki-client