Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a3a2f33342d3334203d3e20323731343636.roa
File:                     323830343a376266383a3a2f33342d3334203d3e20323731343636.roa (raw, json)
Hash identifier:          BiWsQrXamtYMbgKKWTBWb5GJ8qXvMMU/db9pYI89Q3E=
Subject key identifier:   87:5A:CC:7A:25:E5:6F:B6:2B:CF:49:5E:B3:92:AB:1D:B4:B5:91:AE
Certificate issuer:       /CN=A9AD322E02D9AC8B620D17958647B5EB72C644A2
Certificate serial:       0A273A9A8DF9A6F24F56AC3F4A8392426723BBE7
Authority key identifier: A9:AD:32:2E:02:D9:AC:8B:62:0D:17:95:86:47:B5:EB:72:C6:44:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a3a2f33342d3334203d3e20323731343636.roa
Signing time:             Wed 14 Jan 2026 00:38:36 +0000
ROA not before:           Wed 14 Jan 2026 00:33:36 +0000
ROA not after:            Wed 13 Jan 2027 00:38:36 +0000
asID:                     271466
IP address blocks:        2804:7bf8::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.crl
                          rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:27:3a:9a:8d:f9:a6:f2:4f:56:ac:3f:4a:83:92:42:67:23:bb:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9AD322E02D9AC8B620D17958647B5EB72C644A2
        Validity
            Not Before: Jan 14 00:33:36 2026 GMT
            Not After : Jan 13 00:38:36 2027 GMT
        Subject: CN=875ACC7A25E56FB62BCF495EB392AB1DB4B591AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:49:2e:a8:a7:ed:14:f5:df:81:32:2f:2f:
                    e0:4f:3f:c3:29:94:79:92:6d:2e:b4:7b:2a:6c:6f:
                    89:a9:63:be:de:21:6e:02:7a:95:cf:ba:8a:3a:ab:
                    18:dd:9a:f4:4d:0f:46:c8:1f:8a:7e:70:cc:d5:94:
                    89:6e:3a:4e:a6:b8:6b:53:08:da:f8:bc:62:88:53:
                    6d:11:2f:d3:74:e9:03:22:dc:54:bd:1b:14:c2:54:
                    81:bf:88:8b:24:e4:37:59:11:77:25:4d:69:04:ba:
                    17:9c:74:74:15:56:7b:e5:00:c6:47:34:f0:cf:8b:
                    7b:45:89:9e:a4:96:3e:4d:b8:c1:0f:14:77:bc:ab:
                    95:69:e4:53:92:68:e3:49:ea:c6:33:4b:97:de:7f:
                    07:91:ff:7c:c6:c5:b3:5f:90:23:34:f2:1a:3f:24:
                    2e:af:e6:af:fd:e4:f5:f6:34:a0:aa:e3:5f:dd:41:
                    d9:b5:28:45:05:97:1d:42:6d:d4:d2:06:8c:eb:dd:
                    77:5e:e8:8c:c6:9d:1a:a5:bb:cf:0a:b8:ca:5b:ec:
                    cc:95:60:06:e9:f9:bc:5e:da:79:f1:7d:a2:29:58:
                    b3:51:75:4e:59:c6:b1:01:3d:28:67:25:4f:bc:77:
                    96:6d:e1:49:f1:79:f5:5a:ee:69:b1:ee:2c:ed:07:
                    5d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5A:CC:7A:25:E5:6F:B6:2B:CF:49:5E:B3:92:AB:1D:B4:B5:91:AE
            X509v3 Authority Key Identifier:
                keyid:A9:AD:32:2E:02:D9:AC:8B:62:0D:17:95:86:47:B5:EB:72:C6:44:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a3a2f33342d3334203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bf8::/34

    Signature Algorithm: sha256WithRSAEncryption
         8c:e8:08:99:59:74:10:19:30:e8:28:80:0e:4d:3a:f2:82:f2:
         e5:7c:85:e7:c7:4b:0a:21:4a:55:f8:35:ed:b2:36:0c:06:f5:
         33:b4:d1:7e:22:9b:10:f6:19:57:09:65:c0:b9:36:f4:c6:f1:
         e2:fa:28:07:9f:16:02:88:42:83:18:8b:f3:27:c8:ca:d3:20:
         4b:21:59:f9:c9:44:46:84:19:27:19:94:1c:b0:62:9e:b6:9b:
         86:44:7a:ec:bb:b5:63:aa:1d:29:75:c1:33:0d:27:24:4e:d1:
         c1:f7:1b:36:1d:de:39:9c:cb:bf:7d:dd:3f:c3:b3:38:01:f4:
         54:d5:57:f9:e7:88:bf:9e:63:93:d9:82:54:dd:80:c9:c8:27:
         54:f4:80:de:9d:70:55:5d:82:fc:32:01:95:06:dc:11:60:2a:
         63:d9:39:dc:92:7e:35:f5:96:9f:18:80:dc:03:2e:50:34:9b:
         9a:77:a8:ae:c3:6c:1c:c5:c6:35:64:2a:c7:18:9b:3a:5e:13:
         73:80:40:d5:16:f7:5f:53:b1:85:dd:59:ac:0b:47:a8:d8:cc:
         42:98:a8:ed:03:58:bf:7d:3f:9c:b7:a7:60:11:55:2f:41:83:
         da:c2:0e:f8:34:28:5d:63:2b:fb:1e:5f:47:70:bf:ae:b5:43:
         9e:fa:5d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:11:23 2026 by rpki-client