Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a3a2f33322d3332203d3e20323638303638.roa
File:                     323830343a353737633a3a2f33322d3332203d3e20323638303638.roa (raw, json)
Hash identifier:          WUcRwTMyrT0RscExY6yoDZULAYo6FWD65uZhIGZyfZY=
Subject key identifier:   2D:9B:56:A5:A0:09:B2:1E:C3:12:3B:F9:A7:E7:93:D7:AD:18:22:70
Certificate issuer:       /CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
Certificate serial:       073597000849BF725B35681F035AC4E75389E63E
Authority key identifier: 21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a3a2f33322d3332203d3e20323638303638.roa
Signing time:             Thu 05 Feb 2026 06:29:21 +0000
ROA not before:           Thu 05 Feb 2026 06:24:21 +0000
ROA not after:            Thu 04 Feb 2027 06:29:21 +0000
asID:                     268068
IP address blocks:        2804:577c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl
                          rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:39:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:35:97:00:08:49:bf:72:5b:35:68:1f:03:5a:c4:e7:53:89:e6:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
        Validity
            Not Before: Feb  5 06:24:21 2026 GMT
            Not After : Feb  4 06:29:21 2027 GMT
        Subject: CN=2D9B56A5A009B21EC3123BF9A7E793D7AD182270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8b:b7:fe:94:81:7e:ad:ff:2f:e8:f9:8e:76:
                    b6:8b:95:35:e1:25:e4:c6:fd:b0:02:b7:fd:a8:05:
                    49:83:18:4b:d0:da:ac:9b:ee:f1:bb:23:98:28:cb:
                    36:2d:8d:bf:f5:a0:bf:68:2e:ca:3a:4d:9e:96:9d:
                    3c:3b:b0:a2:50:68:f3:25:a5:96:2e:b3:73:2b:a1:
                    ef:16:49:eb:5c:1a:30:0d:ff:ea:66:2a:63:c7:45:
                    c8:2c:04:fa:45:8a:a7:8d:72:f7:45:42:fc:31:c7:
                    4f:55:90:3e:a9:80:f2:00:ad:00:df:7e:4b:52:75:
                    55:d4:5b:fa:07:37:f5:56:6d:1c:b8:79:af:84:ef:
                    45:45:e1:fb:eb:11:d2:90:b1:05:12:11:27:d2:48:
                    b3:6f:cb:fe:3c:73:6c:d1:30:17:06:e7:be:69:9e:
                    5c:71:97:ab:9e:fd:40:21:da:d3:71:2e:bf:e8:32:
                    a2:25:b8:6b:36:13:f5:45:64:3e:e9:eb:d4:91:7a:
                    21:24:4a:89:86:2b:9c:45:6c:65:80:32:51:64:55:
                    e0:49:9d:e7:5a:56:7e:7d:86:dc:e9:3e:d1:3c:80:
                    c8:ef:d6:6f:88:97:89:6d:2c:cf:a9:e1:f8:bc:f6:
                    fa:51:0e:39:79:5d:7e:d1:8e:7b:bd:2b:31:91:81:
                    dc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9B:56:A5:A0:09:B2:1E:C3:12:3B:F9:A7:E7:93:D7:AD:18:22:70
            X509v3 Authority Key Identifier:
                keyid:21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a3a2f33322d3332203d3e20323638303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:577c::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:ce:26:f9:c0:cd:09:ee:e7:9f:b2:08:5e:c9:6c:8e:a1:1e:
         01:1b:eb:3e:a9:a9:6d:a8:60:ea:52:77:dd:46:05:38:c1:cb:
         d3:a0:8f:1a:96:fe:67:3d:3b:6e:d3:b4:ff:a4:37:f1:10:bc:
         ca:6f:de:50:5e:c3:09:46:ae:c0:d8:f6:fa:b5:12:9b:46:85:
         c0:0c:79:e9:7a:f3:cb:34:05:bb:2e:97:c6:4a:fe:b1:e6:fd:
         f6:20:06:79:e6:3e:4e:0a:91:cf:ef:b6:e0:3b:2c:00:59:b3:
         e4:11:e1:49:2d:aa:39:c4:9a:37:f4:62:a4:23:1b:4b:21:94:
         70:52:aa:37:d3:76:5e:5a:70:8a:a8:40:02:fa:e9:d5:bb:d1:
         74:9d:ee:36:d1:b2:6e:98:42:4f:3f:e8:1b:6b:f3:9c:a3:30:
         26:ed:04:b0:5c:d3:da:d5:aa:54:ba:49:85:e2:ee:99:80:53:
         f6:1d:4d:a3:10:f6:50:06:f9:0d:24:1e:43:3e:2d:c1:b3:30:
         51:e2:c1:c2:41:7a:2c:25:4d:d0:a4:c5:f1:c2:7c:a3:6a:fa:
         ca:b2:4a:c1:76:01:81:e7:03:8f:c4:8c:e9:c1:68:23:6d:fd:
         b1:72:88:c3:4d:49:cd:5b:f7:67:81:0d:da:1b:67:9e:a2:ee:
         73:cd:12:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:20:07 2026 by rpki-client