Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/323830343a383630343a3a2f33332d3333203d3e20323732363134.roa
File:                     323830343a383630343a3a2f33332d3333203d3e20323732363134.roa (raw, json)
Hash identifier:          xAJr0E9r4TKMxFOmg5cmoGsA01fiIOH+qeMsQLuKev4=
Subject key identifier:   53:99:D8:07:8D:87:57:67:06:4E:C3:50:26:7B:64:34:C7:06:A2:F0
Certificate issuer:       /CN=8AD497903AB3566443C9C794694A61EFE427FA7A
Certificate serial:       422A2DD924CA3E06460F57209A0027157500130A
Authority key identifier: 8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/323830343a383630343a3a2f33332d3333203d3e20323732363134.roa
Signing time:             Thu 29 Jan 2026 20:28:46 +0000
ROA not before:           Thu 29 Jan 2026 20:23:46 +0000
ROA not after:            Thu 28 Jan 2027 20:28:46 +0000
asID:                     272614
IP address blocks:        2804:8604::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl
                          rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2a:2d:d9:24:ca:3e:06:46:0f:57:20:9a:00:27:15:75:00:13:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AD497903AB3566443C9C794694A61EFE427FA7A
        Validity
            Not Before: Jan 29 20:23:46 2026 GMT
            Not After : Jan 28 20:28:46 2027 GMT
        Subject: CN=5399D8078D875767064EC350267B6434C706A2F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f9:d6:86:53:05:26:9d:13:40:67:09:71:a5:
                    c7:8a:fc:2e:b0:45:3e:8e:27:46:4f:a1:8f:0d:b6:
                    53:3f:32:d3:61:3d:81:26:dd:be:de:6b:98:48:0d:
                    82:da:5a:f8:bd:c6:69:00:f9:41:67:49:28:14:f3:
                    d9:68:11:64:9c:3b:87:11:81:8e:91:5f:48:a0:7c:
                    74:d9:cc:20:0f:7c:d7:26:c5:1b:df:76:6c:c1:c5:
                    53:1f:f3:fe:f6:47:4f:bd:3c:73:80:81:83:11:96:
                    3a:2a:e4:49:7b:ec:0f:bd:b8:88:84:a9:f9:92:3a:
                    19:ce:0e:f9:08:54:c2:90:bb:b9:f1:9d:c5:a8:ca:
                    5c:93:3e:f4:88:b5:3e:11:7c:a4:28:6c:07:a8:88:
                    a1:76:40:60:fc:fc:5b:7b:5e:d9:3c:99:ee:fa:5a:
                    6b:30:97:c7:b4:db:b5:48:d7:6f:98:b4:11:53:02:
                    f9:b8:8f:b3:39:e8:7b:c8:67:bc:22:30:1b:80:f2:
                    03:f1:d6:ce:7c:b7:7b:fa:a3:80:7f:d1:d3:df:15:
                    8b:73:2e:4d:91:02:e9:78:9c:8f:d9:75:09:23:38:
                    8e:b0:83:88:26:d6:20:64:d6:79:c8:82:c7:08:8e:
                    c3:bc:2f:78:7f:62:d9:55:7d:ce:a3:7a:ae:b0:77:
                    9f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:99:D8:07:8D:87:57:67:06:4E:C3:50:26:7B:64:34:C7:06:A2:F0
            X509v3 Authority Key Identifier:
                keyid:8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/323830343a383630343a3a2f33332d3333203d3e20323732363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8604::/33

    Signature Algorithm: sha256WithRSAEncryption
         50:18:d6:57:53:1a:25:6e:ca:2f:56:48:0c:74:bc:02:5f:5e:
         dd:4e:ef:d3:b1:66:dd:d5:7e:d6:ca:86:eb:ba:90:95:80:1b:
         e5:c1:82:e2:4f:6c:b7:c0:30:0a:4b:ca:d5:3e:4f:60:b6:cf:
         b1:e0:4e:af:f1:d9:a0:9d:ad:47:eb:35:7b:a4:cd:f2:dd:9b:
         f7:f2:32:15:b0:d9:2d:1a:b5:bc:8b:44:6b:a2:c6:dc:d6:ff:
         9d:fa:79:a1:6a:32:52:65:d7:33:35:8c:b1:1f:58:c9:2e:d6:
         4d:c8:e4:1a:b4:0d:55:41:03:77:03:2d:75:da:37:23:b9:8c:
         1d:1e:4c:97:a3:32:7e:d8:3d:bf:dd:1c:00:0e:5c:01:b7:bd:
         c7:c4:a1:15:ab:a6:27:0a:8b:c5:ec:ab:c0:5c:28:ac:df:f2:
         b3:10:c7:bb:03:f7:3c:23:19:51:30:1e:e3:a3:7b:69:85:13:
         e6:0b:27:8e:b5:82:4a:b4:7a:a8:59:cd:7b:44:70:e8:25:80:
         0c:0e:15:3a:e8:42:8c:99:a9:a1:e5:46:5e:f1:3e:80:bc:f9:
         7a:99:d2:63:0e:45:69:aa:6f:d2:1d:b4:b5:a2:1d:a4:49:65:
         9a:fb:62:f4:18:2e:05:9f:9f:9e:7f:50:93:79:e9:84:1b:45:
         ec:2a:5b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:07:56 2026 by rpki-client