Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/323830343a3666383a3a2f34382d3438203d3e203532383438.roa
File:                     323830343a3666383a3a2f34382d3438203d3e203532383438.roa (raw, json)
Hash identifier:          i77Gv8bP4XzAl68VBbXTd2D72xu544Wgq7xuONii0XI=
Subject key identifier:   F6:AE:8B:4F:C6:48:D2:ED:70:0D:39:A4:FC:6B:98:BD:9B:CF:8A:24
Certificate issuer:       /CN=99143CBAF11D170944D719FD796009BC38F9F201
Certificate serial:       40FA6616180B6E78316D8993FC67A377A4AED36E
Authority key identifier: 99:14:3C:BA:F1:1D:17:09:44:D7:19:FD:79:60:09:BC:38:F9:F2:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/323830343a3666383a3a2f34382d3438203d3e203532383438.roa
Signing time:             Fri 23 Jan 2026 13:49:01 +0000
ROA not before:           Fri 23 Jan 2026 13:44:01 +0000
ROA not after:            Fri 22 Jan 2027 13:49:01 +0000
asID:                     52848
IP address blocks:        2804:6f8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.crl
                          rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:fa:66:16:18:0b:6e:78:31:6d:89:93:fc:67:a3:77:a4:ae:d3:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99143CBAF11D170944D719FD796009BC38F9F201
        Validity
            Not Before: Jan 23 13:44:01 2026 GMT
            Not After : Jan 22 13:49:01 2027 GMT
        Subject: CN=F6AE8B4FC648D2ED700D39A4FC6B98BD9BCF8A24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9f:30:e4:eb:4c:0b:c5:f5:97:ad:d4:e4:dc:
                    f9:3b:e2:37:10:ad:3c:d5:37:07:f3:99:83:68:89:
                    d8:a3:ff:11:51:f5:77:10:59:be:09:82:f4:94:f1:
                    b1:03:60:b6:d6:06:37:db:35:87:dd:a2:fc:75:19:
                    c0:89:3c:17:60:d4:8b:20:8b:88:19:0f:b7:c6:1c:
                    ce:21:54:3c:48:52:ed:6d:81:de:eb:7d:e2:3e:75:
                    51:2a:ef:2c:af:1a:d2:ff:df:11:96:9c:70:11:d6:
                    aa:87:e2:81:0a:5c:ec:d4:bd:ed:48:21:e4:1e:31:
                    cd:ac:cf:5e:eb:d1:92:4a:92:31:f3:97:ac:6a:7c:
                    d4:73:92:e8:d1:49:89:ca:80:33:cf:d9:30:34:a3:
                    1f:ee:f6:e6:01:20:97:88:ca:04:17:56:88:96:9f:
                    f4:8c:ed:a3:b8:49:29:58:38:5a:50:a6:83:a9:85:
                    60:23:df:a5:1c:17:ed:09:f9:02:40:52:36:6f:1d:
                    10:37:ff:0d:90:02:48:ca:03:cc:47:b9:f2:40:56:
                    e0:41:e4:58:41:c7:b2:e2:61:65:3b:5d:a1:89:39:
                    a5:72:dd:9b:cf:fb:85:ef:11:0b:9f:1e:84:4f:44:
                    33:c3:7b:4c:67:38:15:ed:87:46:d0:a5:0b:fa:ab:
                    84:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AE:8B:4F:C6:48:D2:ED:70:0D:39:A4:FC:6B:98:BD:9B:CF:8A:24
            X509v3 Authority Key Identifier:
                keyid:99:14:3C:BA:F1:1D:17:09:44:D7:19:FD:79:60:09:BC:38:F9:F2:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/323830343a3666383a3a2f34382d3438203d3e203532383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f8::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:5c:24:ce:d9:07:3f:2f:2f:87:42:e3:80:4a:85:3c:54:1a:
         26:c0:c8:16:a5:f2:d1:48:63:f6:bb:46:78:7f:a2:e7:ca:35:
         05:42:4b:ea:30:ca:06:30:c5:4f:59:64:ae:29:f3:07:2f:b1:
         8c:f1:8b:90:53:f3:7b:ba:0c:c7:c0:45:69:71:2a:20:ff:37:
         12:f4:e5:bf:98:54:b2:5b:43:5f:79:c6:aa:7b:ee:89:ed:48:
         e3:e5:aa:eb:42:c4:b9:cc:b7:89:8a:b5:03:7c:d0:f8:6d:81:
         30:fb:ce:ca:bf:67:1e:26:e2:07:4d:0c:e4:22:19:07:ff:ce:
         5d:f2:ab:b6:7a:97:70:57:54:73:a3:f1:bc:cd:e1:4b:d4:95:
         11:9d:f8:3e:7c:fc:52:4f:0d:1d:29:80:2f:69:9b:f0:10:f6:
         19:87:d3:72:39:49:36:a4:05:ff:87:e6:b9:6a:3d:41:92:2d:
         2b:a9:06:9f:74:7f:01:c8:fa:89:39:b3:98:fd:78:c6:ff:1a:
         87:d6:79:91:6e:b8:83:d2:98:a8:f9:47:3d:86:42:2c:48:e6:
         b1:43:10:2f:93:d2:ea:bd:93:c4:57:21:a9:ae:dd:d8:ed:a5:
         ce:7b:af:3f:6c:7f:e9:34:9a:29:de:ef:e4:a8:8d:8c:86:ef:
         2d:ce:0f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 06:44:48 2026 by rpki-client