Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a3a2f33332d3333203d3e20323634333131.roa
File:                     323830343a323566303a3a2f33332d3333203d3e20323634333131.roa (raw, json)
Hash identifier:          ztfMhB4HK/SiGaEf1YiOm/upbJAPIpPaapZR8J7pQ+I=
Subject key identifier:   97:C1:F9:38:17:73:9A:59:29:FF:89:4E:77:37:08:79:C5:3F:B5:CE
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       76DE52C84A9266C943FB98AD721718E471C4B259
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a3a2f33332d3333203d3e20323634333131.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     264311
IP address blocks:        2804:25f0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl
                          rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:de:52:c8:4a:92:66:c9:43:fb:98:ad:72:17:18:e4:71:c4:b2:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9f:aa:80:b3:6a:e8:94:e6:84:aa:e1:84:67:
                    34:03:d2:55:92:0c:e6:3c:34:de:65:2d:66:b1:52:
                    9a:35:b9:e9:95:dc:df:09:ac:ee:a9:d7:d4:f7:36:
                    38:6f:62:d9:ad:9b:b2:f7:a5:1a:a8:a9:b8:12:ae:
                    93:44:b9:69:27:df:ff:62:0b:b5:18:4a:55:27:57:
                    77:2c:d1:5c:41:db:b2:36:b4:73:5f:a5:7f:fb:db:
                    60:02:55:47:2c:11:e6:df:f8:78:65:d4:4c:53:f5:
                    9d:7b:69:94:23:06:d8:db:8b:20:d0:77:b0:08:6c:
                    fe:05:99:3c:cd:09:30:e0:1e:7c:fa:7e:0c:be:54:
                    88:62:5b:15:be:5f:ae:06:fe:09:74:c9:bc:93:be:
                    e8:91:05:0e:26:43:ae:8a:77:ea:89:7f:89:7e:fb:
                    71:19:f0:e0:30:9d:e8:8d:c8:1f:af:12:bd:aa:01:
                    02:dc:a5:f9:83:33:2e:eb:17:f1:94:68:c5:37:74:
                    3b:cf:11:a7:aa:46:87:df:e4:8d:af:d5:98:cd:3c:
                    45:73:4a:29:9c:22:b2:20:3a:44:b6:b4:80:6d:55:
                    5c:7f:c9:75:94:cc:f1:02:ce:37:96:a1:40:52:46:
                    1c:56:b0:33:b2:da:d5:98:c4:6c:97:91:2c:46:9f:
                    07:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C1:F9:38:17:73:9A:59:29:FF:89:4E:77:37:08:79:C5:3F:B5:CE
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a3a2f33332d3333203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25f0::/33

    Signature Algorithm: sha256WithRSAEncryption
         9a:f1:cb:c1:66:03:8d:dc:b6:65:3d:4c:85:37:bf:4f:1d:a7:
         5b:5d:e4:04:0e:97:14:0b:85:3d:65:f8:9c:f4:36:0c:34:7a:
         02:31:38:58:7a:68:e5:3c:b0:be:83:fc:b6:ad:85:1c:20:a1:
         9b:55:60:56:53:55:b5:e4:60:1d:1f:cf:8c:67:ce:e9:27:f6:
         4d:e1:80:b1:2e:b3:3f:ee:0e:0e:c5:33:47:d2:0f:a7:e7:16:
         f1:5f:5c:a2:48:e2:b9:9c:78:65:31:ae:6a:81:36:f1:b0:29:
         ed:d1:64:ab:21:36:a0:dc:cf:81:0a:23:95:83:a5:bb:76:32:
         be:13:19:96:c4:8d:23:ab:f5:18:2a:5d:7b:c3:c7:30:b4:6d:
         8d:c0:c0:c6:6c:fb:32:d6:04:33:1c:b0:61:c6:d7:95:b7:5d:
         37:30:d4:4d:4d:22:78:ed:20:c3:32:7b:93:fc:ed:18:1c:07:
         38:01:a0:99:21:79:99:81:99:78:d4:fe:b7:ae:48:8f:08:6a:
         77:9a:2b:0a:36:70:15:44:b8:e8:e7:fa:8c:8d:98:44:b8:d0:
         6e:ed:f1:ac:cf:1d:64:b0:ad:f8:a8:8d:ee:87:33:9a:31:54:
         db:c1:57:52:75:dd:7d:a4:71:86:f1:61:e8:71:42:0d:46:ab:
         e5:0a:19:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:20:57 2026 by rpki-client