Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/323830343a346230633a3a2f33322d313238203d3e20323637323830.roa
File:                     323830343a346230633a3a2f33322d313238203d3e20323637323830.roa (raw, json)
Hash identifier:          1gF5mTmQJBy/BDWQwMFWqeIUpDG3Nx41jJVO9T48DpU=
Subject key identifier:   74:A3:2A:E3:B3:C1:84:DB:6F:7C:95:F7:E5:2F:75:7C:3D:7D:D0:4D
Certificate issuer:       /CN=D3E07C6B391140EBC8F71CEC48A013C375254585
Certificate serial:       22BA246AB549522EEC40210AD296128566418680
Authority key identifier: D3:E0:7C:6B:39:11:40:EB:C8:F7:1C:EC:48:A0:13:C3:75:25:45:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3E07C6B391140EBC8F71CEC48A013C375254585.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/323830343a346230633a3a2f33322d313238203d3e20323637323830.roa
Signing time:             Tue 17 Mar 2026 03:07:49 +0000
ROA not before:           Tue 17 Mar 2026 03:02:49 +0000
ROA not after:            Tue 16 Mar 2027 03:07:49 +0000
asID:                     267280
IP address blocks:        2804:4b0c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/D3E07C6B391140EBC8F71CEC48A013C375254585.crl
                          rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/D3E07C6B391140EBC8F71CEC48A013C375254585.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3E07C6B391140EBC8F71CEC48A013C375254585.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 04:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ba:24:6a:b5:49:52:2e:ec:40:21:0a:d2:96:12:85:66:41:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3E07C6B391140EBC8F71CEC48A013C375254585
        Validity
            Not Before: Mar 17 03:02:49 2026 GMT
            Not After : Mar 16 03:07:49 2027 GMT
        Subject: CN=74A32AE3B3C184DB6F7C95F7E52F757C3D7DD04D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c5:07:77:28:b4:17:90:ed:ad:24:85:19:d2:
                    4c:a0:8b:c7:f3:64:be:5d:7d:a0:e2:d9:21:87:c3:
                    93:5c:d1:cb:31:ef:ed:c2:5f:9e:a1:0c:8e:db:0e:
                    26:1e:9a:d7:91:93:cf:29:48:6b:b8:ec:6a:c8:32:
                    01:c9:2c:14:a5:f2:d1:22:f2:2f:52:51:38:5c:37:
                    4b:3a:7f:3b:02:a0:39:42:4f:16:ae:12:89:8b:2d:
                    77:f2:2f:8d:9c:05:9f:2e:5e:82:09:ef:ee:6b:ff:
                    28:8b:f7:2f:67:51:5c:d8:68:2f:84:81:4c:0b:4e:
                    35:8c:ae:2a:92:2d:1b:44:c4:94:1a:78:a3:89:b4:
                    c4:84:b6:07:a0:bf:98:00:71:bf:c0:e2:07:5d:96:
                    56:42:f8:1d:23:03:f0:41:00:80:2e:fb:d3:21:21:
                    9e:fe:78:c9:c0:57:33:77:fb:67:27:d6:b6:2c:eb:
                    32:2b:5f:b9:a7:3f:43:bd:e0:0b:65:14:cd:51:cd:
                    0d:02:f8:a1:71:db:d9:4d:77:49:70:64:78:8f:a9:
                    ed:1d:8b:1a:08:26:66:a7:48:46:a0:fe:d4:53:eb:
                    f8:6d:6f:4e:0d:b8:8a:e1:7a:13:78:03:91:f9:fe:
                    aa:8c:f9:6b:d6:93:ca:c7:44:f8:2a:a8:74:f8:f1:
                    9f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A3:2A:E3:B3:C1:84:DB:6F:7C:95:F7:E5:2F:75:7C:3D:7D:D0:4D
            X509v3 Authority Key Identifier:
                keyid:D3:E0:7C:6B:39:11:40:EB:C8:F7:1C:EC:48:A0:13:C3:75:25:45:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/D3E07C6B391140EBC8F71CEC48A013C375254585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3E07C6B391140EBC8F71CEC48A013C375254585.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/323830343a346230633a3a2f33322d313238203d3e20323637323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:61:f4:fa:44:a0:ad:28:74:da:aa:7a:44:21:9d:1a:db:99:
         f2:e1:cc:ed:7d:44:17:f0:c0:43:d7:2b:6a:f1:8c:79:d5:bd:
         d7:5c:b6:22:4f:44:31:ad:c5:fa:77:02:1e:9f:94:f2:d2:2b:
         f5:d4:3e:f2:6e:ac:06:5b:47:58:ee:03:8b:58:2b:06:57:f1:
         6e:0c:78:52:3c:a6:af:54:b4:96:e4:f0:86:5e:c1:f5:57:d1:
         7d:ca:26:6c:7f:9d:f7:b6:c5:3b:c8:f4:64:09:f9:c8:ce:dc:
         cb:56:e1:5d:5b:2b:4d:fc:2b:a6:9d:fb:50:da:79:38:c5:b8:
         5b:5e:14:76:11:fe:51:5b:e2:2c:c4:67:9c:c5:ef:b4:bb:ed:
         ab:0d:53:38:5a:6b:3a:05:5e:8b:8f:15:7a:0d:81:c2:b4:b1:
         99:40:df:dc:b7:21:92:82:23:99:02:d5:c1:55:57:a9:4a:88:
         2f:de:24:99:74:bc:20:14:90:84:fb:bd:17:ac:8a:9c:49:a4:
         33:f1:16:51:82:c3:67:76:c8:cb:db:35:1b:8f:1f:d9:83:74:
         43:18:0f:53:68:0a:f1:52:b0:fc:47:c7:30:1a:47:ca:b9:17:
         04:63:29:c2:87:9c:5a:c2:b8:47:41:4d:b0:be:7b:61:36:95:
         15:ac:c2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:51:54 2026 by rpki-client