Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/323830343a3863303a3a2f33322d3438203d3e20323632333931.roa
File:                     323830343a3863303a3a2f33322d3438203d3e20323632333931.roa (raw, json)
Hash identifier:          jyR6WFHzsFNxr7FEsKAaZ/6cNjjIlV+2eq14L5hhvro=
Subject key identifier:   6C:6A:B0:1F:66:6E:0D:09:AD:8C:DC:C8:40:7B:DD:97:F9:54:E6:30
Certificate issuer:       /CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
Certificate serial:       4AF207E4F43902B2CAD8CE0E4A0D4BA644FFA03C
Authority key identifier: 10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/323830343a3863303a3a2f33322d3438203d3e20323632333931.roa
Signing time:             Mon 02 Mar 2026 20:36:27 +0000
ROA not before:           Mon 02 Mar 2026 20:31:27 +0000
ROA not after:            Mon 01 Mar 2027 20:36:27 +0000
asID:                     262391
IP address blocks:        2804:8c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 12:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f2:07:e4:f4:39:02:b2:ca:d8:ce:0e:4a:0d:4b:a6:44:ff:a0:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
        Validity
            Not Before: Mar  2 20:31:27 2026 GMT
            Not After : Mar  1 20:36:27 2027 GMT
        Subject: CN=6C6AB01F666E0D09AD8CDCC8407BDD97F954E630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0e:16:7a:d2:a4:d1:ab:aa:51:96:fa:9e:56:
                    3b:fc:51:c8:26:d7:1f:f1:e2:eb:a5:4d:7d:d6:31:
                    e1:63:ba:78:cf:ed:54:93:79:f2:c8:6f:ba:79:54:
                    e8:17:00:22:2a:18:bf:bd:28:ff:2b:44:4c:02:69:
                    82:a3:72:10:ce:ad:89:8f:4e:e0:e7:f6:34:ed:85:
                    35:92:66:88:82:65:55:a9:9f:e2:61:22:a3:38:32:
                    5b:5c:12:0d:5c:38:01:7c:c2:b0:aa:91:49:ff:e3:
                    dc:1d:55:f6:80:a0:32:6a:b6:e7:50:f0:0f:6d:bc:
                    8b:63:43:94:36:0b:ec:0c:f3:8b:f7:96:fc:c4:29:
                    bb:80:ea:33:aa:27:93:56:4e:bc:e2:b8:c4:4d:d4:
                    46:69:d5:1a:98:90:f5:18:ca:76:e7:80:4c:e5:c1:
                    86:2b:ca:81:a1:2c:45:fe:f2:ef:63:4b:a4:ee:3e:
                    3c:99:82:1e:76:5f:4c:b3:3a:9e:78:1d:f0:92:35:
                    9f:41:e7:5f:f9:70:2a:72:72:7a:21:70:ea:2d:a2:
                    90:12:c1:c1:d9:75:96:2d:bb:08:19:84:72:c4:b0:
                    5f:94:99:df:69:8d:1f:ca:a4:b4:bc:cb:12:fc:4f:
                    14:ea:13:fa:58:ce:f4:88:7d:a7:c7:94:03:f2:ae:
                    f4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6A:B0:1F:66:6E:0D:09:AD:8C:DC:C8:40:7B:DD:97:F9:54:E6:30
            X509v3 Authority Key Identifier:
                keyid:10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/323830343a3863303a3a2f33322d3438203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:c5:b7:4f:cc:e6:f8:ea:65:d0:09:61:4f:53:4c:fb:3e:0a:
         2f:d7:b6:39:9b:b7:78:a0:86:7d:a5:43:a1:ad:27:37:13:ab:
         b0:1c:d3:54:0f:c8:3d:6f:00:ac:1f:67:bd:b6:34:b2:91:41:
         f4:82:c3:46:fa:36:68:0d:d1:90:74:9f:c2:d4:bf:fe:9f:25:
         ee:36:28:51:17:85:c4:2b:cb:39:33:2a:98:6a:7b:42:a8:eb:
         8f:59:de:f2:c7:b8:1f:e8:b9:0e:e5:cf:2f:7c:b8:5e:48:f4:
         7c:bd:ec:d3:b2:db:95:8f:4b:f2:6e:a4:db:f7:b1:84:27:26:
         d4:ed:6f:da:b0:fa:d2:4b:af:4a:dd:27:e1:7f:71:03:9e:9d:
         08:9e:64:57:48:91:96:cd:9b:d1:ae:51:f9:cf:1b:e1:71:a6:
         08:41:ba:ea:87:72:07:e1:e9:eb:93:15:63:76:50:a5:28:ce:
         2b:14:62:b6:a1:19:d8:6e:fb:5b:0f:35:6b:fd:3e:04:5f:71:
         0c:59:31:4b:5a:c0:56:ee:9f:e0:87:c0:a4:d3:e1:1b:e8:64:
         07:77:50:c1:c0:89:c1:68:d1:b6:97:b5:03:eb:2a:36:73:eb:
         55:d0:74:62:bd:a0:37:e6:d9:45:4e:02:55:12:10:f2:d3:d0:
         1e:0a:6d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:18:03 2026 by rpki-client