Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a383030303a3a2f33332d3333203d3e20323634333131.roa
File:                     323830343a323566303a383030303a3a2f33332d3333203d3e20323634333131.roa (raw, json)
Hash identifier:          /jd8/dB+RdtIPNPnCM0bqCDPAcBEiG/cO2xfBUFEDCs=
Subject key identifier:   25:6A:9C:F8:C8:2D:1F:B6:20:4A:7E:57:68:B8:25:8B:79:4B:BA:E1
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       1BB6766ABFC4BCF64C1437D4EBB0002AF08CD90A
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a383030303a3a2f33332d3333203d3e20323634333131.roa
Signing time:             Wed 04 Feb 2026 20:00:02 +0000
ROA not before:           Wed 04 Feb 2026 19:55:02 +0000
ROA not after:            Wed 03 Feb 2027 20:00:02 +0000
asID:                     264311
IP address blocks:        2804:25f0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl
                          rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b6:76:6a:bf:c4:bc:f6:4c:14:37:d4:eb:b0:00:2a:f0:8c:d9:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Feb  4 19:55:02 2026 GMT
            Not After : Feb  3 20:00:02 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ad:80:0d:47:6c:01:ee:d4:47:5e:b9:ff:c2:
                    72:58:d4:f6:30:8d:32:4d:67:fd:75:c8:4f:84:7e:
                    22:cc:87:05:76:93:4e:23:c6:12:06:0d:40:6d:1a:
                    2d:03:11:b3:f1:11:18:24:c9:58:ff:ce:9d:92:ed:
                    30:47:e4:12:bd:2e:f3:ca:a2:e7:fe:40:50:9c:4a:
                    5a:f7:b5:9b:45:c4:9f:ea:b9:a6:47:d5:fa:8d:78:
                    62:2f:16:bc:98:cc:e2:43:37:f6:05:c6:e9:c8:39:
                    b6:01:96:45:de:a2:7c:fc:25:a7:cf:a6:93:05:99:
                    77:fb:67:fe:d5:8c:ae:45:be:de:9b:2c:80:cb:2c:
                    f3:9c:d5:08:c3:0c:b4:6f:a3:0b:3b:9b:5a:d9:72:
                    c1:85:3f:b2:8c:b7:fc:52:1d:cf:1d:74:b9:81:fa:
                    81:a3:49:c2:31:37:44:f9:c5:80:30:f2:1d:d0:22:
                    b5:d2:be:44:82:70:fc:77:e6:3e:f7:cf:22:7b:5b:
                    db:71:02:9f:82:b3:f8:fe:ba:6e:46:61:a8:e5:38:
                    0f:74:0c:6a:b8:dd:8c:a9:03:0d:27:90:d3:34:f5:
                    60:4a:43:95:7b:57:1c:1f:1e:0b:86:aa:a6:8c:2b:
                    df:8f:55:c8:02:55:d5:eb:58:e9:1a:6b:5a:fb:bd:
                    d2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6A:9C:F8:C8:2D:1F:B6:20:4A:7E:57:68:B8:25:8B:79:4B:BA:E1
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a383030303a3a2f33332d3333203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25f0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         4c:bf:5c:0b:a7:30:66:43:a5:33:de:c3:3e:e0:4d:42:0d:36:
         41:a3:c0:f3:ce:55:ba:9a:49:2b:00:84:29:53:76:78:dd:82:
         a1:f1:3d:eb:e8:7a:7b:cd:41:ff:75:57:45:83:bc:33:86:02:
         6f:de:f5:1f:59:d8:74:d5:a1:f3:dd:e7:09:06:b5:aa:16:90:
         e9:c8:41:92:e5:a2:e0:64:05:ff:c2:a4:59:60:24:5a:73:61:
         31:2d:7a:0a:57:89:68:7a:0f:c1:8c:3b:7d:0f:de:14:de:fc:
         47:c6:e8:42:83:06:0b:92:b0:24:53:2d:8b:3e:53:fd:7d:34:
         cd:0e:eb:8d:05:a0:d8:f3:b4:d3:bc:67:44:16:9f:03:83:56:
         ab:f5:be:8e:7b:cf:c6:b5:b8:b5:37:13:0e:b8:6d:f2:71:4e:
         86:21:a5:63:f4:ce:5b:f0:8d:84:71:61:e1:ca:46:58:2b:91:
         9e:bb:e0:81:9e:eb:03:ee:e0:c8:3c:c6:f9:7a:7a:a1:3a:33:
         0d:cd:15:80:dc:f0:64:9f:9b:b2:6c:d5:ef:43:9a:89:a4:aa:
         47:66:92:c1:8a:f0:f4:9f:ba:16:32:fb:1d:94:e4:68:a4:44:
         13:f3:92:98:ab:34:dc:ec:74:25:b1:a6:1b:2e:e4:23:4c:e2:
         10:15:2e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:56:54 2026 by rpki-client