Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/323830343a356362633a3a2f33322d3438203d3e20323638393237.roa
File:                     323830343a356362633a3a2f33322d3438203d3e20323638393237.roa (raw, json)
Hash identifier:          0Ka5P3EnMyvAIX4mfypO/04OvYkbiI/CDw79HbACahc=
Subject key identifier:   29:94:27:65:0D:F1:38:2B:DB:B6:AA:09:CD:E5:27:26:94:9F:3A:F1
Certificate issuer:       /CN=9518DB67401F3F6D7340D8F2FF17FBE92644F4BC
Certificate serial:       41C765B0746A74C43D37623953635C7859CA3F73
Authority key identifier: 95:18:DB:67:40:1F:3F:6D:73:40:D8:F2:FF:17:FB:E9:26:44:F4:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9518DB67401F3F6D7340D8F2FF17FBE92644F4BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/323830343a356362633a3a2f33322d3438203d3e20323638393237.roa
Signing time:             Tue 06 Jan 2026 14:31:44 +0000
ROA not before:           Tue 06 Jan 2026 14:26:44 +0000
ROA not after:            Tue 05 Jan 2027 14:31:44 +0000
asID:                     268927
IP address blocks:        2804:5cbc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/9518DB67401F3F6D7340D8F2FF17FBE92644F4BC.crl
                          rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/9518DB67401F3F6D7340D8F2FF17FBE92644F4BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9518DB67401F3F6D7340D8F2FF17FBE92644F4BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c7:65:b0:74:6a:74:c4:3d:37:62:39:53:63:5c:78:59:ca:3f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9518DB67401F3F6D7340D8F2FF17FBE92644F4BC
        Validity
            Not Before: Jan  6 14:26:44 2026 GMT
            Not After : Jan  5 14:31:44 2027 GMT
        Subject: CN=299427650DF1382BDBB6AA09CDE52726949F3AF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d5:8b:c0:89:4c:6a:98:92:d9:9b:9e:89:cf:
                    90:cf:2e:d5:3c:38:12:ad:3b:1b:1f:f2:8b:18:a4:
                    01:13:c2:63:bd:ac:90:e3:9b:dc:48:54:4d:b7:12:
                    39:74:f8:96:a7:9e:bc:fc:27:fa:76:d4:e0:c4:60:
                    91:0c:56:ea:33:ea:5f:17:dd:9d:32:4f:3f:cc:cc:
                    7d:63:bf:1e:80:67:e8:d6:99:9b:7e:fc:57:fc:df:
                    e4:98:9b:7b:a5:85:56:8f:c8:f3:5a:91:2c:70:f6:
                    86:88:f9:e5:c4:ea:1e:db:db:a8:0c:7b:eb:db:b9:
                    d4:8b:6b:71:9a:9c:c3:ac:1d:0d:4d:b2:bf:8a:a9:
                    ff:18:51:0f:f5:cd:36:67:52:9f:69:72:a7:f2:34:
                    d3:1a:64:e1:d4:bc:43:cd:f3:2b:8c:31:41:3e:3b:
                    e1:cb:7f:3e:05:d3:35:1f:54:96:5a:ae:a7:a6:fd:
                    67:1c:64:ad:59:12:56:3a:de:a8:21:b6:f5:95:1b:
                    e5:36:ba:4e:d3:6f:ff:83:c4:cc:7e:27:8b:26:1a:
                    7c:b8:b7:85:01:68:bc:c9:42:df:fd:03:c2:78:63:
                    e1:ab:2f:b3:ba:b8:5c:2e:01:5a:da:2b:7b:c7:91:
                    17:e0:67:9d:0f:9b:32:6f:5d:4c:fa:ed:78:1f:d0:
                    a2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:94:27:65:0D:F1:38:2B:DB:B6:AA:09:CD:E5:27:26:94:9F:3A:F1
            X509v3 Authority Key Identifier:
                keyid:95:18:DB:67:40:1F:3F:6D:73:40:D8:F2:FF:17:FB:E9:26:44:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/9518DB67401F3F6D7340D8F2FF17FBE92644F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9518DB67401F3F6D7340D8F2FF17FBE92644F4BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/323830343a356362633a3a2f33322d3438203d3e20323638393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5cbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:5e:ed:c2:ce:db:14:bf:f7:d7:a8:c0:b7:90:be:35:3c:59:
         31:51:b8:20:13:ef:ef:c1:34:44:8b:bb:13:7f:eb:b1:f5:8d:
         12:d8:8c:bb:78:fe:13:dd:47:70:06:22:7c:2f:9c:ef:8f:c1:
         c6:6f:b8:11:d8:c7:81:67:2a:39:b2:9a:d7:10:3f:5e:5c:a8:
         fc:be:e6:32:85:ed:c6:a5:07:b5:a2:9a:31:7b:01:ea:33:3e:
         cf:50:65:a2:df:69:7a:48:ab:93:45:21:ca:f8:52:ca:2c:46:
         30:d4:d0:ac:a1:dc:52:ff:29:e6:79:31:b1:d4:53:71:cf:96:
         4e:7f:0d:47:a6:d7:02:a2:fe:f4:7b:99:03:eb:32:f2:3e:f2:
         d1:e2:b9:43:fa:97:da:35:f3:8f:80:58:15:6a:80:c3:ca:b3:
         c1:6d:75:1e:dd:6a:f0:90:d0:cd:50:e7:1c:4b:2c:81:38:94:
         4b:54:ce:c0:c4:71:2c:a4:52:bc:36:a8:91:5e:53:15:8b:67:
         53:4d:45:27:ed:52:e2:56:d8:bd:bb:06:81:a0:ef:9e:6f:00:
         80:02:0b:d3:d6:37:2f:b9:3d:60:58:34:08:12:28:1e:12:af:
         1a:7d:9a:e0:87:32:2f:5a:d1:e2:12:d2:e3:72:54:31:c2:c3:
         9c:75:fe:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:52:12 2026 by rpki-client