Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/323830343a386432383a3a2f33322d3332203d3e20323733333339.roa
File:                     323830343a386432383a3a2f33322d3332203d3e20323733333339.roa (raw, json)
Hash identifier:          rC5B3rf+7muRo+R8Jh4APCR8PIPmiHQqUllHnjtAUJI=
Subject key identifier:   1D:6D:DF:CE:E7:B6:72:D8:29:B4:67:18:CF:34:05:B9:85:3A:62:AE
Certificate issuer:       /CN=6A7B602B8E0C35D4184AF06448554B53EF2D7250
Certificate serial:       72D09D4FD21A319380042D2EBEF9AF01EC410021
Authority key identifier: 6A:7B:60:2B:8E:0C:35:D4:18:4A:F0:64:48:55:4B:53:EF:2D:72:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A7B602B8E0C35D4184AF06448554B53EF2D7250.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/323830343a386432383a3a2f33322d3332203d3e20323733333339.roa
Signing time:             Mon 23 Mar 2026 14:23:47 +0000
ROA not before:           Mon 23 Mar 2026 14:18:47 +0000
ROA not after:            Mon 22 Mar 2027 14:23:47 +0000
asID:                     273339
IP address blocks:        2804:8d28::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/6A7B602B8E0C35D4184AF06448554B53EF2D7250.crl
                          rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/6A7B602B8E0C35D4184AF06448554B53EF2D7250.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A7B602B8E0C35D4184AF06448554B53EF2D7250.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 20:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d0:9d:4f:d2:1a:31:93:80:04:2d:2e:be:f9:af:01:ec:41:00:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A7B602B8E0C35D4184AF06448554B53EF2D7250
        Validity
            Not Before: Mar 23 14:18:47 2026 GMT
            Not After : Mar 22 14:23:47 2027 GMT
        Subject: CN=1D6DDFCEE7B672D829B46718CF3405B9853A62AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3f:f5:79:a5:27:a0:9a:d7:4b:97:9c:9b:5a:
                    a2:85:90:0f:9d:43:99:ce:89:db:57:96:7e:be:06:
                    9c:6f:82:eb:82:34:0d:7e:34:d0:d1:f8:61:99:8b:
                    44:e8:91:e8:ba:fc:40:76:e0:59:f4:c0:31:8a:17:
                    b8:ae:62:eb:65:4e:3d:d3:39:35:7a:5b:b9:9f:08:
                    2f:6f:eb:13:88:38:1d:a3:5f:75:1b:98:d9:03:06:
                    80:a8:a1:6a:1f:6a:5c:ae:8d:d0:c4:5e:16:2e:9d:
                    11:35:5f:79:8d:23:7c:65:b5:03:f7:bc:69:a2:6e:
                    8e:45:6c:88:06:c6:b2:aa:df:bc:97:ff:3a:b8:ab:
                    66:b1:0e:20:95:14:65:8b:7b:3f:98:7a:f3:01:e0:
                    6f:a7:ad:98:13:50:0b:db:7c:cc:b7:b7:b4:21:71:
                    a9:98:70:9e:14:67:7f:86:bd:2b:08:e2:c0:9a:02:
                    1c:7b:00:ea:0a:2f:6d:7d:67:ce:83:14:0d:c5:dc:
                    79:4c:57:d3:5e:58:1b:db:be:32:9f:e0:e4:1c:6d:
                    23:01:4a:4f:f9:f7:db:bd:49:ea:20:31:fc:5b:3d:
                    d8:2a:a8:6d:26:aa:02:ae:1b:1b:b0:a3:1b:63:ce:
                    80:a5:d5:a9:b9:a9:01:34:23:86:83:0d:f8:34:d7:
                    84:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6D:DF:CE:E7:B6:72:D8:29:B4:67:18:CF:34:05:B9:85:3A:62:AE
            X509v3 Authority Key Identifier:
                keyid:6A:7B:60:2B:8E:0C:35:D4:18:4A:F0:64:48:55:4B:53:EF:2D:72:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/6A7B602B8E0C35D4184AF06448554B53EF2D7250.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A7B602B8E0C35D4184AF06448554B53EF2D7250.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/323830343a386432383a3a2f33322d3332203d3e20323733333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d28::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:d9:c0:5e:d3:23:84:50:3c:a5:92:e6:8e:b8:3a:67:ae:29:
         4c:4c:53:18:a2:d5:9e:ef:58:4d:69:e6:17:6b:6a:11:c9:5a:
         89:17:95:ef:91:ac:b6:de:7e:45:41:de:6c:b0:8e:5e:df:65:
         b0:71:22:b5:49:c2:bd:84:62:fa:ab:d4:47:7a:aa:1b:e0:a8:
         75:65:39:10:9a:7d:ba:bc:c1:4d:69:70:40:36:70:7f:cc:5b:
         10:58:04:f6:5c:3d:5a:06:1f:25:e0:d0:6d:3f:be:0c:4a:e9:
         45:34:6a:ae:2e:2c:c7:73:87:c1:9a:da:a4:21:ae:f0:ff:25:
         32:60:4d:c6:2b:15:5a:c7:d8:ca:21:3f:4c:b3:dd:52:c3:96:
         1d:ef:43:2d:56:2b:f2:49:8f:60:a4:57:4d:77:b5:4f:61:09:
         5b:47:b8:55:b4:f3:43:05:37:f9:4d:94:9e:8b:cb:fd:52:fc:
         cc:7a:6e:6b:31:02:55:ee:c0:c8:84:9d:2b:c3:72:c4:c9:b4:
         0d:89:df:57:26:58:96:de:23:f8:dd:41:af:26:ce:89:d3:a7:
         a0:64:b6:e4:af:1d:11:44:00:59:45:c8:e0:6e:cc:7d:51:09:
         e1:2d:4a:3d:3c:c9:6b:75:7d:80:82:6c:2e:b0:7f:d3:46:a8:
         0d:2e:a6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:32:25 2026 by rpki-client