Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/323830343a376437343a3a2f33332d3333203d3e20323731353632.roa
File:                     323830343a376437343a3a2f33332d3333203d3e20323731353632.roa (raw, json)
Hash identifier:          cTfgVq7I7BqWPauDhzYCy7lVN90NnQCVLOULn8iTJZo=
Subject key identifier:   E6:57:68:8C:50:5D:91:95:45:89:9B:78:85:DE:C9:91:78:8E:F2:36
Certificate issuer:       /CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
Certificate serial:       58F5EBCADAFEA27AAB62A2D1A17E97126513CCD3
Authority key identifier: 28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/323830343a376437343a3a2f33332d3333203d3e20323731353632.roa
Signing time:             Wed 04 Feb 2026 20:40:15 +0000
ROA not before:           Wed 04 Feb 2026 20:35:15 +0000
ROA not after:            Wed 03 Feb 2027 20:40:15 +0000
asID:                     271562
IP address blocks:        2804:7d74::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl
                          rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 11:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f5:eb:ca:da:fe:a2:7a:ab:62:a2:d1:a1:7e:97:12:65:13:cc:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
        Validity
            Not Before: Feb  4 20:35:15 2026 GMT
            Not After : Feb  3 20:40:15 2027 GMT
        Subject: CN=E657688C505D919545899B7885DEC991788EF236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ed:77:1a:fb:5c:18:a0:78:42:4f:c5:26:c3:
                    3c:7e:09:36:30:69:6b:80:d9:16:7a:1f:0c:ab:e9:
                    d8:ec:98:fd:45:1a:28:28:a4:96:b4:68:b9:f3:46:
                    b4:68:bf:ab:ba:90:b0:5a:d5:aa:ec:33:e2:91:40:
                    0d:e9:a2:9b:ba:80:ff:2d:9c:c7:2c:f2:72:22:64:
                    fe:dd:86:8a:67:a4:b8:ba:45:57:ff:36:6d:81:8e:
                    18:c6:f0:d4:c4:6c:79:44:0b:60:63:91:19:b7:66:
                    4a:18:cb:0a:08:66:35:34:b7:78:61:a6:58:34:9a:
                    03:10:49:46:fc:eb:91:e8:dc:91:4a:28:a0:3e:b1:
                    a2:bf:77:68:9e:3a:66:97:55:8d:a7:e2:23:86:c1:
                    77:dd:49:5e:15:8b:94:dd:87:53:5e:ad:f1:64:c8:
                    69:87:9c:66:1e:90:8a:31:3f:a0:b9:13:28:b6:03:
                    f2:ea:af:60:8b:5e:b7:3b:57:13:1d:62:a3:ba:4a:
                    aa:74:22:3d:77:5c:68:76:e8:25:32:a0:46:b9:d5:
                    6e:b7:d1:91:c8:06:04:60:1d:c3:67:26:22:a6:56:
                    fe:6e:9a:e7:77:9b:9c:f1:52:c6:3b:e2:d6:88:09:
                    9c:92:b4:d9:da:17:6f:5d:fe:2a:c9:a0:f6:04:97:
                    32:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:57:68:8C:50:5D:91:95:45:89:9B:78:85:DE:C9:91:78:8E:F2:36
            X509v3 Authority Key Identifier:
                keyid:28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/323830343a376437343a3a2f33332d3333203d3e20323731353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d74::/33

    Signature Algorithm: sha256WithRSAEncryption
         06:c4:89:cd:71:3c:9f:25:85:47:d1:1f:71:91:bb:85:93:69:
         d2:bf:a1:77:49:af:12:f4:e2:11:b8:b6:b0:77:73:3b:a4:c3:
         c5:c8:fc:ce:b8:19:26:e2:7a:6b:c0:53:4a:77:3e:58:3f:4b:
         29:75:c3:43:7d:16:dd:bb:c8:6f:21:2b:fd:64:9d:e3:c6:2e:
         01:40:61:cd:35:74:ee:ce:79:02:f6:d9:35:eb:74:65:d0:b0:
         ad:19:1a:9e:e7:2a:bb:93:af:86:a4:04:6a:15:17:39:ab:52:
         55:16:85:de:fe:fb:f0:39:e1:ae:fc:cb:0b:12:59:42:d5:6d:
         30:33:00:a1:95:a7:8c:35:18:f6:2b:04:b9:11:93:3c:68:e4:
         88:ed:0e:cf:bc:ba:f3:09:da:41:59:fd:f5:1e:d6:09:14:97:
         e2:46:56:ef:b3:cb:42:d5:cf:ee:50:3f:12:be:39:e1:a9:35:
         71:00:45:48:9c:93:a2:de:f8:03:cd:32:0d:1f:1a:b4:55:f8:
         39:a7:ac:1c:53:71:f0:99:64:41:cf:df:3a:a1:58:a0:54:84:
         7e:92:cd:50:6e:3f:86:4f:91:c7:da:7f:a8:f9:08:8d:70:c9:
         5e:27:c4:05:e3:48:b4:c3:b2:cd:f6:ca:36:c4:3b:bd:23:ad:
         14:6a:bc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:28 2026 by rpki-client