Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A47562jLkxiUfy2SLRSVaFEsNei8Zj1LjoDXdNtJ1Z3F/0/323830343a336362303a633030303a3a2f33342d3334203d3e20323636323239.roa
File:                     323830343a336362303a633030303a3a2f33342d3334203d3e20323636323239.roa (raw, json)
Hash identifier:          olF57ysZsmyS7QG0FqZoDRxPcuwke/sz04pqNdAlp4Q=
Subject key identifier:   EE:92:BE:98:C3:4A:7B:72:EB:CA:08:0A:AB:58:5F:4A:6B:68:A2:3F
Certificate issuer:       /CN=B6789ACD4DF939B25C41666FED49EE048FEEFAA8
Certificate serial:       6FBDFA6B12FF58F4261088608A8C2E0CCFB178D1
Authority key identifier: B6:78:9A:CD:4D:F9:39:B2:5C:41:66:6F:ED:49:EE:04:8F:EE:FA:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6789ACD4DF939B25C41666FED49EE048FEEFAA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A47562jLkxiUfy2SLRSVaFEsNei8Zj1LjoDXdNtJ1Z3F/0/323830343a336362303a633030303a3a2f33342d3334203d3e20323636323239.roa
Signing time:             Sat 07 Mar 2026 17:34:57 +0000
ROA not before:           Sat 07 Mar 2026 17:29:57 +0000
ROA not after:            Sat 06 Mar 2027 17:34:57 +0000
asID:                     266229
IP address blocks:        2804:3cb0:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A47562jLkxiUfy2SLRSVaFEsNei8Zj1LjoDXdNtJ1Z3F/0/B6789ACD4DF939B25C41666FED49EE048FEEFAA8.crl
                          rsync://rpki-repo.registro.br/repo/A47562jLkxiUfy2SLRSVaFEsNei8Zj1LjoDXdNtJ1Z3F/0/B6789ACD4DF939B25C41666FED49EE048FEEFAA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6789ACD4DF939B25C41666FED49EE048FEEFAA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 08:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:bd:fa:6b:12:ff:58:f4:26:10:88:60:8a:8c:2e:0c:cf:b1:78:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6789ACD4DF939B25C41666FED49EE048FEEFAA8
        Validity
            Not Before: Mar  7 17:29:57 2026 GMT
            Not After : Mar  6 17:34:57 2027 GMT
        Subject: CN=EE92BE98C34A7B72EBCA080AAB585F4A6B68A23F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:12:5f:fd:94:3f:74:8a:08:d4:94:18:1f:f4:
                    30:4a:40:75:e7:89:a2:a6:95:63:20:b1:f7:50:35:
                    a3:66:9a:47:3d:96:72:69:70:fa:7d:f6:cd:e4:40:
                    ae:e5:ff:5f:96:ca:fb:72:77:68:dd:bb:ac:70:91:
                    f3:79:55:1e:5a:ba:db:8b:0d:55:4b:c4:49:54:f1:
                    10:2f:5b:6b:6a:5b:db:e4:e4:66:62:0b:03:cc:c2:
                    cd:4c:d9:8e:14:f9:9c:92:ba:6d:56:1e:df:7e:e6:
                    91:4a:20:b2:74:9a:1b:97:e7:47:cf:8b:a2:68:25:
                    66:44:d3:26:79:0e:d5:cc:fd:6e:d6:bd:1d:06:f2:
                    27:56:64:b1:4e:80:4b:c5:de:3d:18:53:16:ca:e4:
                    85:4f:5c:80:cf:0a:28:38:b5:f6:e5:0c:b3:9b:c0:
                    37:c6:78:f8:62:a0:38:fc:27:f3:10:e4:8e:2f:63:
                    d5:96:d9:ea:5c:17:e4:8a:fc:83:f4:11:22:59:5f:
                    6c:b8:27:5e:3a:4a:45:58:7c:7b:fa:c3:2b:83:b8:
                    47:ee:2c:b6:ec:31:94:d4:a1:9c:e7:e9:1a:94:17:
                    53:e5:ce:43:68:c5:d5:21:23:ad:07:45:c8:a1:1a:
                    a0:33:ec:07:9a:fe:cb:75:6b:c9:d6:6c:47:e7:e2:
                    61:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:92:BE:98:C3:4A:7B:72:EB:CA:08:0A:AB:58:5F:4A:6B:68:A2:3F
            X509v3 Authority Key Identifier:
                keyid:B6:78:9A:CD:4D:F9:39:B2:5C:41:66:6F:ED:49:EE:04:8F:EE:FA:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A47562jLkxiUfy2SLRSVaFEsNei8Zj1LjoDXdNtJ1Z3F/0/B6789ACD4DF939B25C41666FED49EE048FEEFAA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6789ACD4DF939B25C41666FED49EE048FEEFAA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A47562jLkxiUfy2SLRSVaFEsNei8Zj1LjoDXdNtJ1Z3F/0/323830343a336362303a633030303a3a2f33342d3334203d3e20323636323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3cb0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b5:97:5e:db:55:30:e1:35:e3:63:8d:b7:77:93:ab:d2:a9:a9:
         a6:fa:49:3a:78:f3:96:a4:f3:41:44:06:e5:ce:97:cd:22:d5:
         61:6b:43:a4:0f:77:fd:95:dc:22:1a:22:80:f3:6f:fc:27:c0:
         67:ac:93:ef:f0:92:6f:27:93:34:ce:aa:0c:15:25:31:7b:fa:
         ae:bd:ad:0f:9a:14:5f:0f:c0:ed:40:57:00:64:20:07:23:e5:
         31:6b:cd:bd:c5:b2:f7:ae:1e:a5:94:14:22:94:40:2b:be:f3:
         6f:70:f0:30:48:e2:f9:e4:10:6d:25:4e:b8:ba:4e:6f:85:f2:
         9c:71:2e:7b:35:2a:24:8c:af:6f:80:5c:55:30:36:e1:9e:61:
         e3:93:60:57:e6:2e:3d:27:d0:27:a6:24:99:d7:34:67:52:65:
         42:c0:f4:0a:c4:c3:1f:4b:09:df:e1:a9:ff:32:69:8a:94:f3:
         2b:dd:0a:06:35:c1:c3:8f:73:2b:e4:70:9a:37:c4:47:42:50:
         a2:63:30:31:3b:60:99:af:5c:4d:aa:33:ea:c3:69:73:80:3f:
         15:20:00:93:80:56:63:15:82:2c:fb:9c:de:7a:26:3b:db:87:
         22:6c:2e:18:bd:31:79:9a:65:87:91:34:44:58:84:fc:dd:f7:
         07:50:d0:4e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUb736axL/WPQmEIhgiowuDM+xeNEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY3ODlBQ0Q0REY5MzlCMjVDNDE2NjZGRUQ0OUVFMDQ4
RkVFRkFBODAeFw0yNjAzMDcxNzI5NTdaFw0yNzAzMDYxNzM0NTdaMDMxMTAvBgNV
BAMTKEVFOTJCRTk4QzM0QTdCNzJFQkNBMDgwQUFCNTg1RjRBNkI2OEEyM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCEl/9lD90igjUlBgf9DBKQHXn
iaKmlWMgsfdQNaNmmkc9lnJpcPp99s3kQK7l/1+Wyvtyd2jdu6xwkfN5VR5autuL
DVVLxElU8RAvW2tqW9vk5GZiCwPMws1M2Y4U+ZySum1WHt9+5pFKILJ0mhuX50fP
i6JoJWZE0yZ5DtXM/W7WvR0G8idWZLFOgEvF3j0YUxbK5IVPXIDPCig4tfblDLOb
wDfGePhioDj8J/MQ5I4vY9WW2epcF+SK/IP0ESJZX2y4J146SkVYfHv6wyuDuEfu
LLbsMZTUoZzn6RqUF1PlzkNoxdUhI60HRcihGqAz7Aea/st1a8nWbEfn4mGfAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU7pK+mMNKe3LryggKq1hfSmtooj8wHwYDVR0j
BBgwFoAUtniazU35ObJcQWZv7UnuBI/u+qgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTQ3NTYyakxreGlVZnkyU0xSU1ZhRkVzTmVpOFpqMUxqb0RYZE50SjFa
M0YvMC9CNjc4OUFDRDRERjkzOUIyNUM0MTY2NkZFRDQ5RUUwNDhGRUVGQUE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I2Nzg5QUNENERGOTM5QjI1
QzQxNjY2RkVENDlFRTA0OEZFRUZBQTguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E0NzU2MmpMa3hpVWZ5MlNMUlNWYUZFc05laThaajFMam9EWGROdEoxWjNGLzAv
MzIzODMwMzQzYTMzNjM2MjMwM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNjMyMzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEPLDAMA0GCSqGSIb3DQEBCwUA
A4IBAQC1l17bVTDhNeNjjbd3k6vSqamm+kk6ePOWpPNBRAblzpfNItVha0OkD3f9
ldwiGiKA82/8J8BnrJPv8JJvJ5M0zqoMFSUxe/quva0PmhRfD8DtQFcAZCAHI+Ux
a829xbL3rh6llBQilEArvvNvcPAwSOL55BBtJU64uk5vhfKccS57NSokjK9vgFxV
MDbhnmHjk2BX5i49J9AnpiSZ1zRnUmVCwPQKxMMfSwnf4an/MmmKlPMr3QoGNcHD
j3Mr5HCaN8RHQlCiYzAxO2CZr1xNqjPqw2lzgD8VIACTgFZjFYIs+5zeeiY724ci
bC4YvTF5mmWHkTREWIT83fcHUNBO
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:08:07 2026 by rpki-client