Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/323830343a3335383a3a2f33322d313237203d3e203533323436.roa
File:                     323830343a3335383a3a2f33322d313237203d3e203533323436.roa (raw, json)
Hash identifier:          ox+vs5I+Tyv5+1AKpP5W/abmNt3IrIPgmMybQKgGEkw=
Subject key identifier:   5A:C6:D3:AD:AE:AF:5B:34:96:72:4B:A2:DC:48:52:D7:39:E7:76:00
Certificate issuer:       /CN=30FE93C29B2D9E965F52FCED04760810A240E9E1
Certificate serial:       631291E29E67271C7DDDEF47E188FBAEE7DF4278
Authority key identifier: 30:FE:93:C2:9B:2D:9E:96:5F:52:FC:ED:04:76:08:10:A2:40:E9:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/323830343a3335383a3a2f33322d313237203d3e203533323436.roa
Signing time:             Thu 05 Feb 2026 19:14:02 +0000
ROA not before:           Thu 05 Feb 2026 19:09:02 +0000
ROA not after:            Thu 04 Feb 2027 19:14:02 +0000
asID:                     53246
IP address blocks:        2804:358::/32 maxlen: 127
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.crl
                          rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:54:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:12:91:e2:9e:67:27:1c:7d:dd:ef:47:e1:88:fb:ae:e7:df:42:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30FE93C29B2D9E965F52FCED04760810A240E9E1
        Validity
            Not Before: Feb  5 19:09:02 2026 GMT
            Not After : Feb  4 19:14:02 2027 GMT
        Subject: CN=5AC6D3ADAEAF5B3496724BA2DC4852D739E77600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:30:fa:0a:92:57:5d:f3:d7:d0:82:4e:9e:58:
                    63:09:69:98:f8:4f:8c:b0:24:67:0b:07:7c:a2:26:
                    61:af:fa:df:e0:02:bb:51:1c:85:bd:1e:6d:58:16:
                    ae:33:fb:d2:a0:57:df:df:9f:37:6e:5d:f9:f2:d3:
                    a9:ae:96:c9:2f:ee:d5:33:59:cd:c4:1d:ec:3e:74:
                    0c:f2:61:17:82:9f:2f:1b:fc:fa:ac:76:c0:1a:82:
                    cd:26:0f:c4:8b:a7:10:72:10:ed:d7:96:0a:d3:cc:
                    bd:fd:be:b1:49:cf:2a:3c:c6:9d:f0:ae:77:5e:0f:
                    bf:a4:d2:1d:f3:f7:57:7a:4d:90:d6:62:ab:d1:91:
                    7e:19:78:df:26:ee:39:b6:6c:2f:40:5f:cf:4a:d9:
                    20:34:a5:58:52:40:16:b8:5c:e3:e2:fa:00:0f:45:
                    04:32:97:2c:c2:57:6d:00:67:3c:1b:ad:5c:f2:fe:
                    b9:6c:5e:31:6b:c2:52:5b:5b:8b:37:d5:50:5c:80:
                    89:9d:ea:56:56:9d:e5:be:8d:b1:03:81:cd:82:a7:
                    d3:23:ac:d7:8c:ab:7b:2b:a2:e2:0c:cd:5b:10:25:
                    55:1f:9b:5b:f0:17:b1:f7:ae:2d:ed:f9:56:3b:f4:
                    c5:a9:20:b1:2a:64:62:88:f2:d8:a1:8d:a7:3c:90:
                    ad:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C6:D3:AD:AE:AF:5B:34:96:72:4B:A2:DC:48:52:D7:39:E7:76:00
            X509v3 Authority Key Identifier:
                keyid:30:FE:93:C2:9B:2D:9E:96:5F:52:FC:ED:04:76:08:10:A2:40:E9:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/323830343a3335383a3a2f33322d313237203d3e203533323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:358::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:f8:28:5a:b5:a7:d3:c1:8e:19:20:49:e9:e3:e4:db:67:02:
         75:3a:a9:ad:e8:35:b1:f4:3c:52:9f:d2:f7:ef:e0:72:f7:2f:
         77:ab:fe:7e:3f:d9:98:6e:00:1d:c8:31:25:87:c0:e2:0f:e2:
         e4:3a:57:95:62:ff:64:07:a4:ec:2e:65:c5:74:c2:60:2c:21:
         e7:c8:b6:75:c2:6f:3c:b2:02:8e:d5:f4:1a:fc:e6:fd:81:52:
         66:01:61:e2:90:5d:1c:f9:52:d7:9a:6e:8b:f5:e3:ac:da:ef:
         54:ff:ba:4b:43:d7:bb:0b:dd:1e:22:03:38:55:31:e1:1b:f0:
         27:1d:76:0a:66:cd:7c:c0:c3:d2:6d:43:fe:77:da:c9:c0:e2:
         66:46:a9:8a:77:8d:82:2f:be:e7:7c:fa:bf:89:83:ee:f7:88:
         46:07:f0:80:65:6c:38:cf:25:9b:e3:a5:c4:59:ae:19:be:13:
         1a:a2:c3:ee:4b:df:5b:eb:b2:72:07:f7:c8:80:e5:c1:38:85:
         fd:38:b1:7f:21:7d:5e:4a:ae:f8:c5:9e:a2:21:67:b7:53:07:
         68:d0:0e:c4:80:e6:70:a7:e4:8d:37:23:e2:28:9b:de:a9:b1:
         00:9f:a6:4f:63:4a:4b:e3:6c:d0:5e:91:4f:8d:db:05:bb:91:
         a6:74:9f:56
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUYxKR4p5nJxx93e9H4Yj7ruffQngwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBGRTkzQzI5QjJEOUU5NjVGNTJGQ0VEMDQ3NjA4MTBB
MjQwRTlFMTAeFw0yNjAyMDUxOTA5MDJaFw0yNzAyMDQxOTE0MDJaMDMxMTAvBgNV
BAMTKDVBQzZEM0FEQUVBRjVCMzQ5NjcyNEJBMkRDNDg1MkQ3MzlFNzc2MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEMPoKkldd89fQgk6eWGMJaZj4
T4ywJGcLB3yiJmGv+t/gArtRHIW9Hm1YFq4z+9KgV9/fnzduXfny06mulskv7tUz
Wc3EHew+dAzyYReCny8b/PqsdsAags0mD8SLpxByEO3XlgrTzL39vrFJzyo8xp3w
rndeD7+k0h3z91d6TZDWYqvRkX4ZeN8m7jm2bC9AX89K2SA0pVhSQBa4XOPi+gAP
RQQylyzCV20AZzwbrVzy/rlsXjFrwlJbW4s31VBcgImd6lZWneW+jbEDgc2Cp9Mj
rNeMq3srouIMzVsQJVUfm1vwF7H3ri3t+VY79MWpILEqZGKI8tihjac8kK1PAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUWsbTra6vWzSWckui3EhS1znndgAwHwYDVR0j
BBgwFoAUMP6TwpstnpZfUvztBHYIEKJA6eEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlJ2UW5tTmVRcWlVZERxRjRxZ1hSQkJOM29DUGtNRVBmZEhZOGkzSlZQ
eDEvMS8zMEZFOTNDMjlCMkQ5RTk2NUY1MkZDRUQwNDc2MDgxMEEyNDBFOUUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwRkU5M0MyOUIyRDlFOTY1
RjUyRkNFRDA0NzYwODEwQTI0MEU5RTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJSdlFubU5lUXFpVWREcUY0cWdYUkJCTjNvQ1BrTUVQZmRIWThpM0pWUHgxLzEv
MzIzODMwMzQzYTMzMzUzODNhM2EyZjMzMzIyZDMxMzIzNzIwM2QzZTIwMzUzMzMy
MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEA1gwDQYJKoZIhvcNAQELBQADggEBAM34KFq1p9PB
jhkgSenj5NtnAnU6qa3oNbH0PFKf0vfv4HL3L3er/n4/2ZhuAB3IMSWHwOIP4uQ6
V5Vi/2QHpOwuZcV0wmAsIefItnXCbzyyAo7V9Br85v2BUmYBYeKQXRz5Uteabov1
46za71T/uktD17sL3R4iAzhVMeEb8CcddgpmzXzAw9JtQ/532snA4mZGqYp3jYIv
vud8+r+Jg+73iEYH8IBlbDjPJZvjpcRZrhm+Exqiw+5L31vrsnIH98iA5cE4hf04
sX8hfV5KrvjFnqIhZ7dTB2jQDsSA5nCn5I03I+Iom96psQCfpk9jSkvjbNBekU+N
2wW7kaZ0n1Y=
-----END CERTIFICATE-----
Generated at Thu Feb 19 06:13:41 2026 by rpki-client