Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/323830343a366564383a3a2f34302d3430203d3e20323730363232.roa
File:                     323830343a366564383a3a2f34302d3430203d3e20323730363232.roa (raw, json)
Hash identifier:          6XbwwSQ4bxfUhZ8KSrUOyq/hju9rI6Hr7G0xVI6Xf1o=
Subject key identifier:   C8:93:29:AB:DB:A0:82:A9:03:2F:03:2A:B3:38:3D:4B:21:E7:30:87
Certificate issuer:       /CN=859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D
Certificate serial:       7ACC10A627DA20C80A9612633AA2EC046016C583
Authority key identifier: 85:9D:67:46:CD:7A:AE:BE:ED:E8:FD:74:F7:99:81:0A:9D:BF:A0:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/323830343a366564383a3a2f34302d3430203d3e20323730363232.roa
Signing time:             Wed 18 Mar 2026 13:30:30 +0000
ROA not before:           Wed 18 Mar 2026 13:25:30 +0000
ROA not after:            Wed 17 Mar 2027 13:30:30 +0000
asID:                     270622
IP address blocks:        2804:6ed8::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.crl
                          rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 08:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:cc:10:a6:27:da:20:c8:0a:96:12:63:3a:a2:ec:04:60:16:c5:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D
        Validity
            Not Before: Mar 18 13:25:30 2026 GMT
            Not After : Mar 17 13:30:30 2027 GMT
        Subject: CN=C89329ABDBA082A9032F032AB3383D4B21E73087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:86:11:01:1c:0d:6f:e3:8d:f8:e4:4b:0e:00:
                    58:f1:33:3c:2c:15:6a:5f:42:74:61:6f:1a:84:6e:
                    fb:72:6f:6f:ff:75:21:81:2e:59:b9:67:13:c6:33:
                    ca:05:2b:21:c8:3e:7b:45:5d:2f:12:3d:f6:81:49:
                    4a:53:b4:6d:62:c5:30:66:a0:45:20:fa:18:f4:6c:
                    6c:30:5f:5a:0e:ad:80:6c:89:6f:d2:7a:c9:5f:9f:
                    18:01:32:99:48:bb:3a:01:c8:ab:5c:05:bd:ab:ba:
                    ad:3c:3a:56:66:c4:99:79:52:36:2c:c6:3e:f1:23:
                    37:4c:5c:52:a4:94:7c:47:60:a1:87:aa:42:28:fc:
                    f6:69:16:28:48:08:2c:18:02:c1:60:ac:ae:53:e5:
                    98:2b:fc:92:e6:e1:4e:2a:a5:bc:dd:0d:37:57:d5:
                    db:cb:2a:cd:c2:7f:75:49:b6:27:97:00:aa:09:08:
                    f2:01:fc:ad:6d:90:0f:e8:4b:01:82:d0:d4:49:47:
                    4c:2c:23:5a:8a:f0:86:99:29:f4:e8:ac:87:b3:74:
                    11:ed:7c:8b:4e:b1:d8:47:c5:88:67:67:44:b3:0f:
                    0d:53:95:a2:fa:1f:e0:bd:4a:a4:83:a8:a6:5a:91:
                    56:91:0b:9a:46:8c:55:aa:46:42:4b:95:9e:f1:f2:
                    cd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:93:29:AB:DB:A0:82:A9:03:2F:03:2A:B3:38:3D:4B:21:E7:30:87
            X509v3 Authority Key Identifier:
                keyid:85:9D:67:46:CD:7A:AE:BE:ED:E8:FD:74:F7:99:81:0A:9D:BF:A0:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/323830343a366564383a3a2f34302d3430203d3e20323730363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ed8::/40

    Signature Algorithm: sha256WithRSAEncryption
         ba:1b:94:b3:42:d5:94:f1:d6:46:42:d6:67:33:1a:e4:39:b6:
         fe:00:52:09:53:68:52:72:97:b1:82:a0:36:0e:8a:58:16:5e:
         18:f5:63:55:14:35:71:af:40:05:6c:a4:84:73:7e:8c:a6:de:
         d9:77:97:46:ac:39:93:51:06:bf:33:a0:ed:58:cb:96:db:0d:
         cc:bd:22:40:23:86:ea:b0:3d:53:71:15:8b:f7:1b:92:fd:8c:
         ba:a6:9a:f0:2e:dd:1d:13:3f:50:3d:04:86:8c:d6:5d:50:29:
         d2:66:5a:72:d9:3b:92:d8:16:d1:c9:cd:b8:16:ef:08:b8:ca:
         1e:35:c3:78:5d:11:dc:de:d2:63:b4:28:9e:4c:39:97:c9:9f:
         01:d5:88:9f:e5:53:01:13:01:e7:54:45:9a:63:29:d3:f7:4e:
         4e:11:8c:24:6c:63:85:d3:23:40:6d:1d:d2:01:f0:46:6c:d0:
         40:69:24:2c:d5:cb:c7:9f:05:f4:02:8e:f4:8d:ab:07:cc:d5:
         bf:62:f5:15:62:08:e0:f6:5d:44:1b:49:e3:2d:ba:2f:2e:da:
         02:e4:bf:e6:32:78:25:0e:3b:77:80:a0:67:93:fa:4d:cb:fe:
         29:9b:60:fc:e3:c5:9b:d4:23:90:12:79:dc:f3:5e:02:50:c8:
         35:0c:16:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:39:11 2026 by rpki-client