Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/323830343a313266633a3a2f33362d3336203d3e20323633353038.roa
File:                     323830343a313266633a3a2f33362d3336203d3e20323633353038.roa (raw, json)
Hash identifier:          Ackms7fkyV4Bwff/EQHSZqu8lvygSTTnsyYWCYLX3/g=
Subject key identifier:   3A:D6:21:B1:AA:84:12:5A:49:DB:F0:C3:6B:77:71:9D:F2:DC:DD:58
Certificate issuer:       /CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
Certificate serial:       24448387454419F07804D73A193E24801A84EE0F
Authority key identifier: 02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/323830343a313266633a3a2f33362d3336203d3e20323633353038.roa
Signing time:             Thu 29 Jan 2026 16:18:12 +0000
ROA not before:           Thu 29 Jan 2026 16:13:12 +0000
ROA not after:            Thu 28 Jan 2027 16:18:12 +0000
asID:                     263508
IP address blocks:        2804:12fc::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl
                          rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 03:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:44:83:87:45:44:19:f0:78:04:d7:3a:19:3e:24:80:1a:84:ee:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
        Validity
            Not Before: Jan 29 16:13:12 2026 GMT
            Not After : Jan 28 16:18:12 2027 GMT
        Subject: CN=3AD621B1AA84125A49DBF0C36B77719DF2DCDD58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c7:f1:05:40:0e:e0:5a:18:e3:95:22:b2:71:
                    c2:7a:fd:c1:f5:75:c2:4c:bc:85:99:3e:31:6b:2d:
                    aa:74:29:a0:15:00:03:2e:21:b2:c2:bb:b3:e8:d8:
                    be:b1:01:f5:a6:09:3c:c5:2f:54:a6:7d:f8:16:27:
                    ad:f8:b2:21:35:4e:1d:c4:4a:ca:eb:96:a6:05:f1:
                    f9:ab:87:c4:64:14:64:43:50:76:ae:2d:09:68:e8:
                    f4:13:fd:d7:32:b6:a2:6f:3b:3e:4e:37:d0:1a:6e:
                    69:74:b6:ec:27:d3:18:2d:24:6f:9f:e4:67:b2:ca:
                    64:2b:d2:75:68:37:51:cd:dc:80:c0:21:19:f9:92:
                    3a:a5:30:24:c7:31:08:ed:f9:6c:8c:dd:07:b2:45:
                    43:11:2f:50:c4:78:08:5b:ff:29:5f:17:ac:e1:37:
                    c5:b3:73:b5:cf:4e:ff:1f:ec:1b:b6:33:e6:8e:34:
                    5a:ff:48:db:d3:09:28:73:fc:0b:da:10:ec:4f:a3:
                    e5:f5:85:69:7e:07:56:30:7a:65:3c:b7:c8:1b:1d:
                    fb:b9:4c:9e:48:fd:4f:a9:4a:d4:cc:87:f3:33:43:
                    7d:88:a3:b1:48:bc:c0:09:c8:d9:57:31:c2:1e:84:
                    cd:5c:c3:4b:ff:eb:85:9f:d3:66:2b:31:72:4f:ca:
                    03:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D6:21:B1:AA:84:12:5A:49:DB:F0:C3:6B:77:71:9D:F2:DC:DD:58
            X509v3 Authority Key Identifier:
                keyid:02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/323830343a313266633a3a2f33362d3336203d3e20323633353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12fc::/36

    Signature Algorithm: sha256WithRSAEncryption
         1f:a6:5c:fd:fd:5f:a9:67:3c:4e:63:13:a3:03:9f:14:f7:b7:
         e1:2e:f5:1c:e4:97:63:f1:33:f1:f8:1a:1a:44:3e:19:eb:50:
         f6:50:23:e0:d0:63:42:f8:03:2c:26:c3:e2:6b:df:ff:3f:97:
         75:51:22:58:cc:b0:3e:4b:bb:dd:55:84:24:6b:d7:4e:62:c2:
         7c:d3:f1:5d:30:76:64:a2:99:02:ab:b9:dd:72:fe:f0:3a:ac:
         04:3b:06:19:13:2d:2c:e9:14:4e:41:b4:d5:b3:76:32:1b:e9:
         71:4d:7f:75:e0:5a:cb:8c:b8:2a:5d:12:38:23:21:37:65:18:
         dc:a4:93:2b:c4:0b:b2:6d:17:21:e7:dc:01:b4:26:bc:b1:79:
         51:fb:39:49:8b:da:47:41:ae:de:08:2b:44:82:33:65:da:ae:
         bc:18:7d:82:93:7c:d8:72:6c:4d:78:b8:7d:72:18:34:b3:98:
         38:b5:b3:83:08:6c:0d:7d:75:e5:aa:d6:07:77:f7:b0:5a:cf:
         82:20:bf:7b:de:83:ec:ed:f0:23:2e:43:54:9a:d8:0d:52:57:
         2f:67:9d:b5:7b:a0:fe:26:d3:14:78:db:93:f7:99:1a:81:4f:
         7d:2f:78:da:fd:b3:52:18:30:a6:b6:3b:3f:64:c4:f7:44:6b:
         eb:3b:32:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:23:03 2026 by rpki-client