Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44MMLc72wqrwpXvXoKqtTRGi5DENJhNkVY1QpQS59Dm8/0/323830343a343961383a3a2f33322d3438203d3e20323637313935.roa
File:                     323830343a343961383a3a2f33322d3438203d3e20323637313935.roa (raw, json)
Hash identifier:          tC4519PpDTeQw+2cPUfvyEwWWIgnIILsp8Q6hTohJsQ=
Subject key identifier:   0C:61:37:5A:24:3A:66:1B:79:00:62:6A:F2:F6:0B:F3:B4:77:F8:85
Certificate issuer:       /CN=2B941ABA681825685BFCF79733311D0750F53807
Certificate serial:       217B78F4604B7F5C7ABF1BCA273DEC439E2523FC
Authority key identifier: 2B:94:1A:BA:68:18:25:68:5B:FC:F7:97:33:31:1D:07:50:F5:38:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B941ABA681825685BFCF79733311D0750F53807.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44MMLc72wqrwpXvXoKqtTRGi5DENJhNkVY1QpQS59Dm8/0/323830343a343961383a3a2f33322d3438203d3e20323637313935.roa
Signing time:             Mon 02 Feb 2026 12:52:05 +0000
ROA not before:           Mon 02 Feb 2026 12:47:05 +0000
ROA not after:            Mon 01 Feb 2027 12:52:05 +0000
asID:                     267195
IP address blocks:        2804:49a8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44MMLc72wqrwpXvXoKqtTRGi5DENJhNkVY1QpQS59Dm8/0/2B941ABA681825685BFCF79733311D0750F53807.crl
                          rsync://rpki-repo.registro.br/repo/44MMLc72wqrwpXvXoKqtTRGi5DENJhNkVY1QpQS59Dm8/0/2B941ABA681825685BFCF79733311D0750F53807.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B941ABA681825685BFCF79733311D0750F53807.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 12:30:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:7b:78:f4:60:4b:7f:5c:7a:bf:1b:ca:27:3d:ec:43:9e:25:23:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B941ABA681825685BFCF79733311D0750F53807
        Validity
            Not Before: Feb  2 12:47:05 2026 GMT
            Not After : Feb  1 12:52:05 2027 GMT
        Subject: CN=0C61375A243A661B7900626AF2F60BF3B477F885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:18:06:9b:a5:8e:ac:a6:e5:ed:74:d9:ba:04:
                    d7:fe:7f:20:9c:27:32:79:98:21:ea:e2:67:ef:1d:
                    1b:c0:ac:2e:83:ca:a0:e3:a9:71:7c:56:fc:36:79:
                    45:db:02:d1:da:11:cb:42:0b:98:d2:66:ef:7e:7e:
                    29:c4:8a:09:8a:e1:60:29:c2:5d:66:82:be:50:fc:
                    1b:81:9a:ef:92:e4:8d:d2:0e:5b:7e:c8:99:0b:4c:
                    ee:32:7c:41:7c:a9:02:5e:a8:ee:c4:0b:4f:2e:3c:
                    42:68:c8:04:6b:e7:5c:c1:0e:24:98:30:3c:db:f8:
                    a5:05:51:b2:24:bf:88:b4:61:4e:f9:0e:b0:3d:b0:
                    ef:7e:a4:98:0a:23:00:3b:60:72:f2:e3:a8:68:de:
                    75:48:69:41:66:0f:3d:fd:62:8f:28:ba:22:86:20:
                    ba:61:0e:91:eb:a5:cf:a7:da:c8:4d:bb:1e:e8:f6:
                    8a:40:a6:89:c9:46:a5:6d:33:d7:f5:8c:16:f5:a6:
                    43:6f:bb:b2:9f:14:4e:9f:cf:b8:03:1b:8c:19:ab:
                    1f:15:97:9c:d9:7d:1f:5b:d4:7e:7a:06:08:6e:6d:
                    dc:56:bc:44:9b:67:44:27:7e:d1:88:ed:98:c4:74:
                    2d:43:b9:48:0d:29:f7:ee:49:6c:7a:f9:a2:7b:8b:
                    62:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:61:37:5A:24:3A:66:1B:79:00:62:6A:F2:F6:0B:F3:B4:77:F8:85
            X509v3 Authority Key Identifier:
                keyid:2B:94:1A:BA:68:18:25:68:5B:FC:F7:97:33:31:1D:07:50:F5:38:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44MMLc72wqrwpXvXoKqtTRGi5DENJhNkVY1QpQS59Dm8/0/2B941ABA681825685BFCF79733311D0750F53807.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B941ABA681825685BFCF79733311D0750F53807.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44MMLc72wqrwpXvXoKqtTRGi5DENJhNkVY1QpQS59Dm8/0/323830343a343961383a3a2f33322d3438203d3e20323637313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:49a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:74:56:88:db:f1:ee:41:04:d3:94:1f:1e:2f:c3:5b:21:4b:
         13:91:15:e1:50:ee:e0:26:4c:16:b3:4a:e7:75:4f:19:ad:d8:
         5d:70:47:ff:2c:ba:dc:d2:18:a5:3a:36:67:aa:fc:e6:87:05:
         5c:4b:13:ad:bf:5e:04:3b:d9:96:e7:2d:4c:34:c7:43:e8:0c:
         d2:60:bb:87:17:13:17:c3:b4:3c:04:2a:c9:76:5b:b5:69:aa:
         a4:b2:08:ee:54:43:d7:87:55:7a:96:11:36:1e:d6:aa:76:51:
         f4:d1:79:78:d9:ea:bc:ac:ad:4d:8a:b0:52:e2:d2:b5:69:14:
         a2:fe:3a:2b:63:2a:66:ea:74:e8:68:f1:31:41:43:0f:70:a6:
         2f:da:78:7b:5b:39:05:dc:85:94:39:b1:b6:72:25:e8:04:06:
         e8:08:ba:1e:a4:0a:7f:89:19:05:17:43:81:cd:31:dd:5a:d8:
         d1:55:07:65:e4:c0:95:c2:a5:94:af:e0:a8:49:9e:d1:52:a2:
         11:a3:6f:6f:78:11:86:fa:a3:c6:93:9b:36:d7:44:af:d0:1b:
         c2:81:34:b9:ae:2e:97:38:e0:88:72:4b:fa:a0:d5:1a:db:cd:
         2e:b9:a9:30:d3:5f:90:11:21:9f:42:b3:76:a1:4c:5a:c8:95:
         7e:bb:75:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:54:26 2026 by rpki-client