Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a316136383a3230303a3a2f34302d3430203d3e20323637343834.roa
File:                     323830343a316136383a3230303a3a2f34302d3430203d3e20323637343834.roa (raw, json)
Hash identifier:          6tf4aCjCbEyTqpbLe3ywxBsu13esBUpChGBrdMwdGcQ=
Subject key identifier:   BB:27:47:38:95:CF:E9:47:26:D5:F9:B7:F3:5B:53:92:51:53:C0:3F
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       50659A6BDD79C4717B319FCB5DB5218E0DA2AEB0
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a316136383a3230303a3a2f34302d3430203d3e20323637343834.roa
Signing time:             Mon 12 Jan 2026 15:22:13 +0000
ROA not before:           Mon 12 Jan 2026 15:17:13 +0000
ROA not after:            Mon 11 Jan 2027 15:22:13 +0000
asID:                     267484
IP address blocks:        2804:1a68:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:65:9a:6b:dd:79:c4:71:7b:31:9f:cb:5d:b5:21:8e:0d:a2:ae:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Jan 12 15:17:13 2026 GMT
            Not After : Jan 11 15:22:13 2027 GMT
        Subject: CN=BB27473895CFE94726D5F9B7F35B53925153C03F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:94:45:19:3c:8d:be:25:3f:49:ab:eb:8e:
                    71:24:fa:52:76:74:e3:22:2a:ab:62:52:12:02:43:
                    11:9e:b1:f6:d7:3b:77:08:14:1a:4e:18:e6:39:89:
                    f8:a2:1e:bc:85:e5:05:26:8d:aa:6e:dd:95:76:ee:
                    9b:98:4c:89:dc:7b:2c:8d:8f:d4:e6:07:18:09:bc:
                    3e:7f:78:40:c5:91:06:1a:a9:19:73:a8:05:29:2c:
                    77:d3:89:8d:45:17:4c:4b:14:65:f6:ce:9e:d3:78:
                    a7:a5:e3:72:00:2e:4a:29:45:03:b7:15:1b:27:76:
                    cb:7e:6e:b1:4b:27:b4:3d:3b:29:bc:1a:03:6e:05:
                    ad:b5:86:9e:f7:fa:c0:00:50:d4:0f:26:d8:03:27:
                    96:71:44:86:1a:85:52:6b:88:3f:d1:fb:73:3e:21:
                    86:fb:a4:cb:dd:73:ed:0c:02:b7:8c:37:3d:4e:24:
                    26:84:4c:15:08:70:85:37:12:39:75:07:8c:91:ba:
                    6e:a8:96:ed:3d:55:65:40:fe:9a:4e:84:b1:86:bc:
                    4a:71:c9:5c:fd:03:68:e7:be:50:93:44:3a:db:e8:
                    6c:40:2f:02:4e:03:42:f2:74:43:8e:b8:37:c8:26:
                    2f:33:ce:be:ba:45:f0:f4:b5:e5:7b:a5:55:ad:dd:
                    ce:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:27:47:38:95:CF:E9:47:26:D5:F9:B7:F3:5B:53:92:51:53:C0:3F
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a316136383a3230303a3a2f34302d3430203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a68:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         a7:9f:d1:72:dd:10:fc:b3:4d:65:a8:1e:c0:36:9e:5d:f2:83:
         68:c5:f1:7c:54:ff:66:19:2c:63:20:d5:b5:8d:4d:0e:09:19:
         8d:d1:c7:62:1a:9a:c1:3a:55:1e:a9:89:b3:ca:db:58:03:75:
         9d:48:00:52:b4:7a:ea:f4:06:d2:74:3d:f1:73:a2:8c:b7:d4:
         a1:3f:7b:05:ac:b4:92:81:12:2c:89:d4:1a:ae:8c:45:ff:d1:
         bb:4b:5d:e4:04:19:4f:ac:93:7c:13:b9:a8:0f:88:78:8f:65:
         68:58:0d:b2:a4:87:e8:58:75:0c:f0:0a:90:56:f3:0c:0b:fb:
         36:fe:9a:a6:75:e3:d6:d8:2a:e7:32:71:ef:4f:dd:61:37:64:
         50:54:90:36:d6:a7:fc:bd:95:41:48:9d:e7:e8:bc:ef:33:7b:
         1f:c8:2b:13:95:c8:6d:61:f0:cd:da:29:67:a4:09:bc:9a:c1:
         24:41:9c:8e:9e:57:32:55:51:1d:e2:7c:ca:18:97:7f:a6:b6:
         ef:83:8e:ed:c4:2a:40:1a:d7:82:9b:8b:6b:65:8c:43:0c:40:
         e5:4f:b9:08:8d:d2:87:0f:f2:5b:8f:5c:db:b7:64:cf:25:45:
         9e:f2:3a:2c:28:0f:fe:1f:6f:47:07:85:10:b6:fa:dc:fa:9f:
         74:4f:c2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:18:13 2026 by rpki-client