Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/323830343a356633343a3a2f33322d313238203d3e20323639303833.roa
File:                     323830343a356633343a3a2f33322d313238203d3e20323639303833.roa (raw, json)
Hash identifier:          hJuNDCt5+1NFNZ7kjST1xetG4VTM1LwAOx4POm04cB8=
Subject key identifier:   CE:B3:5C:C0:21:13:85:A1:95:02:B6:F5:EF:92:AE:C5:29:6A:7A:4E
Certificate issuer:       /CN=008000470935F66EDA9DDD0F074AF51CB753E2E5
Certificate serial:       2C4579578B4552081F4A71D4907B47C6103A8731
Authority key identifier: 00:80:00:47:09:35:F6:6E:DA:9D:DD:0F:07:4A:F5:1C:B7:53:E2:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/008000470935F66EDA9DDD0F074AF51CB753E2E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/323830343a356633343a3a2f33322d313238203d3e20323639303833.roa
Signing time:             Thu 05 Feb 2026 13:35:44 +0000
ROA not before:           Thu 05 Feb 2026 13:30:44 +0000
ROA not after:            Thu 04 Feb 2027 13:35:44 +0000
asID:                     269083
IP address blocks:        2804:5f34::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/008000470935F66EDA9DDD0F074AF51CB753E2E5.crl
                          rsync://rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/008000470935F66EDA9DDD0F074AF51CB753E2E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/008000470935F66EDA9DDD0F074AF51CB753E2E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 01:13:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:45:79:57:8b:45:52:08:1f:4a:71:d4:90:7b:47:c6:10:3a:87:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=008000470935F66EDA9DDD0F074AF51CB753E2E5
        Validity
            Not Before: Feb  5 13:30:44 2026 GMT
            Not After : Feb  4 13:35:44 2027 GMT
        Subject: CN=CEB35CC0211385A19502B6F5EF92AEC5296A7A4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ba:90:af:33:f8:71:d5:cd:88:68:dd:7d:37:
                    73:d2:71:1d:94:b1:b5:e1:1d:26:04:91:e5:aa:25:
                    03:a0:65:dd:44:21:76:69:b7:4f:29:1d:b1:83:95:
                    9e:48:69:71:05:f2:38:e9:ef:7c:4d:f6:ea:54:6b:
                    da:06:6e:ad:38:1e:32:a3:80:4e:06:d9:b7:e3:56:
                    41:bc:bc:67:8e:90:f6:f6:a2:aa:12:b1:dd:e5:2a:
                    e0:8e:a5:84:65:d1:a8:a4:bc:50:48:45:83:a9:1d:
                    f3:85:1c:8c:d7:4d:94:fe:fd:05:da:0a:d8:93:2d:
                    ba:d5:f6:1a:96:0c:8f:15:80:68:0e:60:c0:84:6c:
                    71:ef:21:f2:b5:45:89:9f:81:28:39:6e:40:e2:1f:
                    0c:1a:15:84:e8:a0:1d:07:83:a2:93:32:b5:a5:0b:
                    2e:b4:60:01:6f:54:bc:a7:7a:0f:0d:da:8e:3c:2d:
                    ec:f9:8c:83:c4:77:e6:1d:17:23:43:43:be:fd:23:
                    44:67:06:8d:d5:9f:08:7f:a6:0f:b8:0e:5c:a7:69:
                    b6:db:85:0f:0c:17:40:36:a9:b5:b4:3f:d6:93:cb:
                    c8:07:a4:7d:77:f2:6d:3d:a0:f0:1d:e6:2b:e9:5b:
                    ca:64:36:2e:74:e4:64:f4:75:f3:21:d0:06:cd:54:
                    a1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B3:5C:C0:21:13:85:A1:95:02:B6:F5:EF:92:AE:C5:29:6A:7A:4E
            X509v3 Authority Key Identifier:
                keyid:00:80:00:47:09:35:F6:6E:DA:9D:DD:0F:07:4A:F5:1C:B7:53:E2:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/008000470935F66EDA9DDD0F074AF51CB753E2E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/008000470935F66EDA9DDD0F074AF51CB753E2E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/323830343a356633343a3a2f33322d313238203d3e20323639303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f34::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:76:11:b1:73:d2:fd:5f:db:3f:74:3a:82:37:b4:1e:c3:6c:
         2e:fa:5d:5b:ff:c5:1c:20:d8:89:7e:5a:d3:54:bb:8e:15:71:
         50:ed:42:b6:68:f6:f8:7e:47:be:00:e1:c0:89:8f:2d:f5:ee:
         31:46:2b:47:34:a0:37:95:04:1c:27:5c:eb:df:c0:c6:ab:cd:
         88:c6:43:87:c4:3c:44:48:7b:73:0f:62:ce:e6:af:8e:09:37:
         2f:77:a6:25:18:0f:50:a5:52:9b:57:57:55:43:fb:2d:bf:25:
         e9:64:21:eb:d5:c0:e1:dc:a4:80:21:a7:06:a1:0e:a1:74:09:
         30:e4:26:ee:4d:76:dc:5d:b8:7b:dd:c6:59:aa:3a:0f:f0:90:
         1e:b5:23:16:31:a8:9a:8c:59:4c:9b:b9:41:19:e5:ef:28:95:
         88:5f:11:5d:7c:f7:fc:06:58:d9:1c:d1:2a:57:0c:c2:8d:11:
         36:38:06:05:93:2b:4f:a3:a2:ff:98:35:b7:51:c8:e5:8e:73:
         5c:74:ac:46:ed:e1:e5:45:77:dc:40:f8:86:d6:ad:bc:fe:b0:
         5c:d3:d8:11:d4:82:44:7b:e6:a5:85:b1:79:4e:e3:db:2d:b1:
         7d:37:37:e1:b4:17:ec:d3:92:87:f7:36:fc:44:c9:53:91:e5:
         15:6d:22:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 07:01:09 2026 by rpki-client