Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a6535303a3a2f33322d3438203d3e203533303637.roa
File:                     323830343a6535303a3a2f33322d3438203d3e203533303637.roa (raw, json)
Hash identifier:          MmWiveT7w1QzYVA2l3o+zlEVeqjt2zvDtDLL1tD0csE=
Subject key identifier:   35:F1:1A:09:E4:8C:80:6E:17:6D:CD:1A:DA:7E:AD:01:DA:5B:25:91
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       7BEEFEFEA159DEBC536D99DB9641000454AE7891
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a6535303a3a2f33322d3438203d3e203533303637.roa
Signing time:             Mon 12 Jan 2026 15:22:15 +0000
ROA not before:           Mon 12 Jan 2026 15:17:15 +0000
ROA not after:            Mon 11 Jan 2027 15:22:15 +0000
asID:                     53067
IP address blocks:        2804:e50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 14:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ee:fe:fe:a1:59:de:bc:53:6d:99:db:96:41:00:04:54:ae:78:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Jan 12 15:17:15 2026 GMT
            Not After : Jan 11 15:22:15 2027 GMT
        Subject: CN=35F11A09E48C806E176DCD1ADA7EAD01DA5B2591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:14:70:51:3a:c9:90:af:19:4a:c4:7d:8b:ba:
                    5d:77:ec:32:60:d8:24:17:33:76:9d:45:28:f5:7d:
                    5c:3b:2b:71:4b:06:64:89:7e:66:87:20:6e:f6:11:
                    03:b2:76:eb:0f:93:46:64:25:74:bb:08:0d:1b:d3:
                    cc:79:fd:57:4a:e9:cc:df:0d:9a:2a:b7:4b:52:86:
                    08:64:a1:3b:8f:d0:22:fd:c8:8c:25:c1:f6:a5:db:
                    5f:69:19:09:90:c2:48:2a:43:d9:d9:95:53:29:1b:
                    2f:e9:b6:c5:f1:e6:8c:c9:c4:24:76:db:e9:e1:60:
                    32:a5:55:c8:10:19:7c:a8:13:26:92:6d:09:80:30:
                    00:c2:87:b2:be:e5:07:62:2b:1a:22:12:6c:67:5a:
                    3f:05:a7:a1:68:6d:de:67:46:59:bd:22:a5:89:06:
                    19:36:48:f9:c8:48:b9:81:04:e5:98:cb:de:b1:6d:
                    a3:b9:1f:73:b9:76:a5:b2:46:33:f8:8f:33:5a:32:
                    1f:b6:45:18:5f:5a:2f:33:90:25:df:69:79:e0:07:
                    29:fc:cc:bb:ac:0e:97:53:18:b3:c1:9f:96:e5:fd:
                    0b:b8:21:b9:ed:95:31:be:26:fe:4c:64:9c:f3:21:
                    35:16:6e:5e:be:e8:94:25:36:80:64:17:47:0d:1c:
                    73:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F1:1A:09:E4:8C:80:6E:17:6D:CD:1A:DA:7E:AD:01:DA:5B:25:91
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a6535303a3a2f33322d3438203d3e203533303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e50::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:b7:37:0f:1a:ab:64:52:d5:22:9e:ca:37:72:96:8c:dd:b0:
         3d:cc:69:71:3d:21:3f:10:e6:ed:c0:fa:74:c8:66:1b:4a:7b:
         e3:f9:81:aa:83:7d:9c:85:88:1b:f0:25:3b:71:df:64:1f:07:
         dc:07:56:68:42:41:3d:93:b1:85:da:6f:e6:c8:67:41:a7:61:
         68:8f:81:89:f5:7c:ed:db:19:53:eb:4c:19:65:e7:bd:ae:1a:
         ec:e6:11:12:e0:53:03:db:ac:d6:95:4e:66:ce:b8:a1:1d:e1:
         e7:89:22:85:e0:3a:e1:d2:32:3c:dc:28:c3:6b:05:bf:fe:c7:
         bf:5a:bf:78:b2:f1:c7:19:bd:77:a1:a9:ce:5e:74:f3:7a:8c:
         06:18:17:47:34:00:51:ef:8a:70:5c:c6:20:b3:0e:91:03:ff:
         c8:16:e6:62:c5:1a:fc:86:18:ff:34:06:d9:f7:dd:58:0b:c0:
         ac:a0:83:0e:a5:f2:22:28:5f:3c:bc:f0:3a:3c:24:89:a3:b7:
         86:41:f0:4d:07:5a:4d:6c:c4:1a:3a:97:29:e3:89:f1:a8:ee:
         55:36:71:d3:f7:99:b1:04:43:6c:51:1d:de:10:90:db:33:10:
         aa:8d:71:c3:a0:4b:34:20:25:77:66:14:cd:2c:b8:5f:fe:98:
         3d:b5:16:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:24:42 2026 by rpki-client