Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bb5fQn357dTVzpvZez21A1upNcYx7TzcZcmhZtGAnRx/0/323830343a333334383a3a2f33322d3438203d3e20323635333836.roa
File:                     323830343a333334383a3a2f33322d3438203d3e20323635333836.roa (raw, json)
Hash identifier:          aviAE1icuj9QttaM2cXK27AReGpqzk1ChZmN0xVLaC4=
Subject key identifier:   E0:63:61:8A:7F:CD:2B:85:70:56:E0:8E:4A:1A:45:EA:9D:89:B3:4D
Certificate issuer:       /CN=5E6D0E754E37EEDCCF1F7ECA2A37E93CFDE4387A
Certificate serial:       2B6CAD5695E45A896F63525B7E6BE2FD357370C8
Authority key identifier: 5E:6D:0E:75:4E:37:EE:DC:CF:1F:7E:CA:2A:37:E9:3C:FD:E4:38:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E6D0E754E37EEDCCF1F7ECA2A37E93CFDE4387A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bb5fQn357dTVzpvZez21A1upNcYx7TzcZcmhZtGAnRx/0/323830343a333334383a3a2f33322d3438203d3e20323635333836.roa
Signing time:             Tue 03 Feb 2026 20:36:11 +0000
ROA not before:           Tue 03 Feb 2026 20:31:11 +0000
ROA not after:            Tue 02 Feb 2027 20:36:11 +0000
asID:                     265386
IP address blocks:        2804:3348::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bb5fQn357dTVzpvZez21A1upNcYx7TzcZcmhZtGAnRx/0/5E6D0E754E37EEDCCF1F7ECA2A37E93CFDE4387A.crl
                          rsync://rpki-repo.registro.br/repo/7bb5fQn357dTVzpvZez21A1upNcYx7TzcZcmhZtGAnRx/0/5E6D0E754E37EEDCCF1F7ECA2A37E93CFDE4387A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E6D0E754E37EEDCCF1F7ECA2A37E93CFDE4387A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 11:51:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:6c:ad:56:95:e4:5a:89:6f:63:52:5b:7e:6b:e2:fd:35:73:70:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E6D0E754E37EEDCCF1F7ECA2A37E93CFDE4387A
        Validity
            Not Before: Feb  3 20:31:11 2026 GMT
            Not After : Feb  2 20:36:11 2027 GMT
        Subject: CN=E063618A7FCD2B857056E08E4A1A45EA9D89B34D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:24:d7:21:5f:85:60:7c:1e:c6:f9:69:d3:fa:
                    da:5c:28:f9:d4:e8:32:8f:af:30:32:a0:3e:ee:47:
                    b1:ec:a3:e8:83:03:6e:58:88:9e:1a:62:aa:39:7d:
                    31:1d:4d:af:5f:8d:0e:91:37:48:85:29:20:86:ba:
                    31:b1:0c:3f:38:89:d2:8f:95:46:6d:04:c0:93:b3:
                    c0:05:c7:a9:96:a6:35:1f:79:36:c7:03:bc:4f:47:
                    99:f3:d6:fd:4b:26:15:96:63:8c:87:56:6f:9f:ab:
                    e3:38:0f:47:46:98:ea:8c:b6:68:5f:49:69:14:2c:
                    d8:dc:37:3b:08:4f:ba:bf:3a:b5:db:dd:d5:2c:ac:
                    4f:04:ef:79:05:fc:de:e8:3b:0b:79:7e:6b:aa:f2:
                    21:1e:06:1d:6b:2f:23:80:1f:eb:44:02:43:14:dc:
                    a7:6c:2a:fc:cd:90:81:e2:96:ae:98:be:f4:1a:51:
                    56:35:82:80:e9:d9:c7:1c:f7:75:64:19:a1:0e:d2:
                    b1:39:73:35:4c:3c:3a:62:d9:dd:0e:45:08:1b:d2:
                    de:ab:90:36:63:3d:fb:ff:cd:ea:fc:75:e1:4e:c4:
                    0a:69:87:37:d4:82:ca:39:9a:9c:59:01:29:7a:21:
                    87:15:37:0a:da:37:18:21:b1:3c:20:51:60:f1:18:
                    2d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:63:61:8A:7F:CD:2B:85:70:56:E0:8E:4A:1A:45:EA:9D:89:B3:4D
            X509v3 Authority Key Identifier:
                keyid:5E:6D:0E:75:4E:37:EE:DC:CF:1F:7E:CA:2A:37:E9:3C:FD:E4:38:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bb5fQn357dTVzpvZez21A1upNcYx7TzcZcmhZtGAnRx/0/5E6D0E754E37EEDCCF1F7ECA2A37E93CFDE4387A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E6D0E754E37EEDCCF1F7ECA2A37E93CFDE4387A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bb5fQn357dTVzpvZez21A1upNcYx7TzcZcmhZtGAnRx/0/323830343a333334383a3a2f33322d3438203d3e20323635333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3348::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:8b:2a:d6:33:28:1f:c3:ca:d9:d6:18:ee:49:91:83:cd:ee:
         e3:98:34:37:da:2f:de:ea:46:fa:96:db:d8:35:15:67:6f:e5:
         99:c2:2b:cd:f7:be:67:89:a0:4c:5b:5f:43:0e:3b:ed:37:6d:
         f3:67:c4:67:b9:52:1a:19:af:eb:48:8b:13:fe:33:08:c0:15:
         90:b2:34:a2:06:d5:b3:12:9f:dc:2e:2a:2e:ca:5f:e1:27:58:
         78:91:2e:cb:91:30:c5:19:80:10:6c:25:aa:96:83:65:e6:24:
         ac:91:b5:9b:f0:bc:40:68:9e:3a:f0:7c:5e:86:9f:6b:91:00:
         f6:93:88:0f:b6:5c:80:fe:6a:b5:15:2c:4c:8b:92:c3:0f:54:
         6c:00:e3:82:f5:80:74:c0:9b:fd:4d:65:e7:f5:b2:2a:a2:ef:
         9e:a8:3d:2b:78:1c:15:f1:18:00:64:05:3a:e1:3f:c2:bd:01:
         49:20:72:c0:c5:8f:66:13:20:33:1a:ca:b3:b1:fa:1e:62:d1:
         69:cd:2b:6b:83:15:c4:ac:b8:33:9e:bf:4d:5e:b7:70:52:d7:
         3b:38:5b:1b:f2:ac:24:84:7d:1c:ac:3e:7a:9f:50:2b:7f:6d:
         93:1c:2d:69:a0:5e:24:64:92:5d:82:d0:35:d4:0c:1f:5c:d2:
         40:85:05:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:31:35 2026 by rpki-client