Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a3a2f33322d3332203d3e20323731343636.roa
File:                     323830343a376266383a3a2f33322d3332203d3e20323731343636.roa (raw, json)
Hash identifier:          sUH9GNwaPyvIsOilhzYgjxyFMl3kgfE0HxRLhmXM1Ec=
Subject key identifier:   9D:91:C6:47:A5:06:45:57:11:CA:A1:5D:8E:45:A2:1F:03:CF:03:E8
Certificate issuer:       /CN=A9AD322E02D9AC8B620D17958647B5EB72C644A2
Certificate serial:       46B95D87270A1C6D688F0174006CBC2189A8198E
Authority key identifier: A9:AD:32:2E:02:D9:AC:8B:62:0D:17:95:86:47:B5:EB:72:C6:44:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a3a2f33322d3332203d3e20323731343636.roa
Signing time:             Wed 14 Jan 2026 00:38:35 +0000
ROA not before:           Wed 14 Jan 2026 00:33:35 +0000
ROA not after:            Wed 13 Jan 2027 00:38:35 +0000
asID:                     271466
IP address blocks:        2804:7bf8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.crl
                          rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b9:5d:87:27:0a:1c:6d:68:8f:01:74:00:6c:bc:21:89:a8:19:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9AD322E02D9AC8B620D17958647B5EB72C644A2
        Validity
            Not Before: Jan 14 00:33:35 2026 GMT
            Not After : Jan 13 00:38:35 2027 GMT
        Subject: CN=9D91C647A506455711CAA15D8E45A21F03CF03E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2d:11:c0:57:21:24:72:07:6a:ab:02:60:29:
                    50:44:c3:f6:14:34:2f:35:fc:c1:82:93:2b:82:bb:
                    fe:05:52:ad:31:22:52:eb:28:1c:82:71:4d:39:d6:
                    63:0b:95:ec:5d:07:68:a3:dd:be:8f:86:51:ec:4d:
                    c8:e4:1a:6f:33:5d:a9:58:59:b3:09:d7:46:d3:fd:
                    e8:a0:55:52:fc:83:8c:08:8b:fe:38:2d:55:98:aa:
                    c6:17:52:f5:fb:9c:82:91:30:4e:46:e5:e9:22:22:
                    f4:43:c1:23:74:1f:e3:05:1c:82:9f:6c:9f:cd:f1:
                    29:a0:77:db:76:57:4d:1b:72:a9:e2:90:44:99:4e:
                    9c:7b:b9:e4:d3:65:fb:05:cf:07:67:68:5d:22:ed:
                    61:1b:e6:b7:61:5c:47:aa:67:7e:71:64:26:56:1b:
                    ac:9f:5f:1d:e3:8b:f7:4e:77:7e:43:b4:ce:46:d8:
                    8f:78:f2:75:cb:07:0f:ac:c7:e4:d4:49:5b:1a:3c:
                    9c:e8:72:f6:ab:1f:b4:60:4c:9e:70:ef:d6:35:48:
                    21:76:41:a4:b0:f5:f3:6c:4f:88:c6:dd:3c:95:65:
                    85:3a:b0:0a:d3:31:30:63:ca:f1:df:5a:f1:69:d8:
                    9f:62:c7:51:d8:40:da:c2:87:b0:23:4d:29:47:c2:
                    f9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:91:C6:47:A5:06:45:57:11:CA:A1:5D:8E:45:A2:1F:03:CF:03:E8
            X509v3 Authority Key Identifier:
                keyid:A9:AD:32:2E:02:D9:AC:8B:62:0D:17:95:86:47:B5:EB:72:C6:44:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a3a2f33322d3332203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bf8::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:26:97:2d:7e:e9:01:73:43:6f:59:da:1f:b7:3f:e3:95:24:
         84:a4:88:bb:d6:53:bb:46:50:22:4f:67:d1:b2:d3:d4:89:45:
         a9:97:43:4f:ac:d3:de:fe:ca:e1:89:3c:2a:7a:a5:1e:07:99:
         a5:56:f3:15:f5:5c:39:f4:73:b9:26:4a:d2:51:94:15:84:89:
         21:b9:53:0f:8c:3b:c4:b2:a3:c6:06:3c:2b:f4:7e:21:2f:79:
         f2:89:1b:d6:17:fa:32:04:ea:fb:2b:df:d7:b7:7b:e4:b6:0b:
         a6:70:3f:a5:a1:d9:da:fb:1a:3e:ee:75:95:99:e9:62:eb:fe:
         1d:a2:79:15:9a:eb:66:71:8e:43:5a:bd:17:c3:c7:81:c7:51:
         5b:06:f5:10:07:e4:15:53:b0:a5:7e:32:62:b5:ff:62:2b:55:
         f4:c1:44:91:3d:1e:fd:15:8f:db:ba:8c:40:f0:18:8c:b0:d1:
         04:55:c0:5a:58:79:fd:21:db:14:6f:c6:b1:26:95:a1:de:71:
         17:39:39:cc:a5:f4:02:72:d9:2e:98:be:b2:62:b7:3f:57:3a:
         0e:58:b7:0d:0c:61:e6:8a:4d:3b:fe:0e:ab:7d:63:6c:09:0a:
         44:30:66:1e:10:9d:2f:78:24:e9:4e:51:b2:97:cb:8f:69:db:
         7b:0b:c5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:24:29 2026 by rpki-client