Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/323830343a383630343a383030303a3a2f33332d3333203d3e20323732363134.roa
File:                     323830343a383630343a383030303a3a2f33332d3333203d3e20323732363134.roa (raw, json)
Hash identifier:          udfpslgXWllHlVhUhwYULsf1Bac3lsTLTBZvpUx96iA=
Subject key identifier:   44:60:BB:D0:EA:9C:3B:30:39:D9:5B:59:41:7F:A7:45:AF:DF:23:50
Certificate issuer:       /CN=8AD497903AB3566443C9C794694A61EFE427FA7A
Certificate serial:       73D94A519EF4228ACD0F06BEEE4E9132413E9A06
Authority key identifier: 8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/323830343a383630343a383030303a3a2f33332d3333203d3e20323732363134.roa
Signing time:             Thu 29 Jan 2026 20:28:46 +0000
ROA not before:           Thu 29 Jan 2026 20:23:46 +0000
ROA not after:            Thu 28 Jan 2027 20:28:46 +0000
asID:                     272614
IP address blocks:        2804:8604:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl
                          rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 21:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d9:4a:51:9e:f4:22:8a:cd:0f:06:be:ee:4e:91:32:41:3e:9a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AD497903AB3566443C9C794694A61EFE427FA7A
        Validity
            Not Before: Jan 29 20:23:46 2026 GMT
            Not After : Jan 28 20:28:46 2027 GMT
        Subject: CN=4460BBD0EA9C3B3039D95B59417FA745AFDF2350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2c:34:7b:f3:9e:50:f3:1c:10:e3:18:68:48:
                    3e:49:e8:3a:5b:58:a5:0f:7c:61:0e:9a:54:af:a6:
                    73:90:82:22:64:b9:b6:18:5a:4b:7e:73:e4:00:7b:
                    1a:ad:42:da:4b:e9:56:11:bd:79:e9:ac:8e:ec:bc:
                    79:a2:07:30:5c:b0:49:aa:ac:4a:eb:08:10:20:6c:
                    22:3d:3f:d4:e8:cf:52:06:02:68:34:a7:ea:2a:70:
                    9e:bc:07:a6:5f:75:54:69:78:f7:c0:74:14:4f:0f:
                    58:5f:1e:de:84:87:6c:75:87:f5:b5:19:ad:67:17:
                    ef:8f:db:12:c9:17:93:fc:8b:a6:9b:a3:f7:8b:80:
                    47:1f:e9:ca:cd:8f:e0:56:3a:a8:39:69:67:6f:4e:
                    1e:e5:ed:fa:b3:cb:40:46:77:18:dd:39:34:4b:f3:
                    c9:97:17:a3:ef:c1:61:9a:d8:fa:b0:38:9b:24:32:
                    e0:4f:32:9c:ef:a1:1b:16:2d:5e:cc:d7:e3:c4:3e:
                    48:a2:42:ef:0d:6f:f7:b1:61:0a:50:1c:6a:3f:10:
                    7c:1f:99:b3:c6:d8:01:8e:48:c6:10:be:a1:17:53:
                    04:78:77:2e:05:db:12:cf:f0:91:ff:a6:64:43:c7:
                    5b:88:95:44:d3:e8:21:75:96:0e:96:51:8e:8b:91:
                    86:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:60:BB:D0:EA:9C:3B:30:39:D9:5B:59:41:7F:A7:45:AF:DF:23:50
            X509v3 Authority Key Identifier:
                keyid:8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/323830343a383630343a383030303a3a2f33332d3333203d3e20323732363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8604:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         2a:95:67:da:c1:95:80:01:fc:c4:3f:b9:c4:69:ec:02:d6:a2:
         ba:be:cd:aa:18:e9:72:ed:fe:10:c0:ec:33:77:1c:64:e3:56:
         0f:96:6f:1a:fb:87:81:c3:2c:2f:b1:2c:f3:78:41:43:6f:08:
         a6:32:18:99:c1:31:45:91:e6:db:e5:8d:63:2e:17:8f:77:61:
         65:d3:9c:41:b7:45:47:20:f5:76:1a:a6:a8:68:6b:00:ab:ef:
         b6:d1:d8:b4:29:1b:d4:a1:57:47:15:c7:43:6f:79:dd:af:7b:
         4d:9e:c7:0d:7d:65:76:14:97:67:41:21:c9:69:dd:e0:ec:9f:
         fb:fc:9e:b7:fc:37:56:57:ee:a7:99:2d:49:7f:5e:79:6e:d4:
         bb:c9:75:a8:8a:06:7e:c4:6a:94:1a:36:1b:41:65:05:44:be:
         57:60:a3:b7:c0:e5:47:05:4a:10:1f:e5:fe:ca:f5:db:64:07:
         0d:8a:a2:c1:fa:41:f3:50:dd:a3:c2:ca:81:14:50:c1:07:68:
         6c:5f:c1:16:35:3e:03:7d:52:b2:ba:a1:8c:72:42:b1:ad:95:
         2d:67:e9:6f:86:09:d8:c5:97:30:e1:51:9d:4b:af:55:53:52:
         d9:0c:d5:26:9e:59:44:0a:67:e1:99:31:75:df:bb:88:d3:69:
         03:54:83:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:07:44 2026 by rpki-client