Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/323830343a316162343a3a2f33322d3332203d3e203631383737.roa
File:                     323830343a316162343a3a2f33322d3332203d3e203631383737.roa (raw, json)
Hash identifier:          t2fw7c1MXHLioPfFH+JU4hybSec8QllN6122QD16Lvk=
Subject key identifier:   6C:EE:0D:F7:22:FA:B0:AF:4E:6E:AC:BD:49:A2:3F:EC:13:AB:69:2D
Certificate issuer:       /CN=2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586
Certificate serial:       702973685BE36AD20CE37FEDD89C33A1CC996CAF
Authority key identifier: 2C:B0:A4:F9:7E:58:54:FF:26:43:BF:14:74:C7:0D:B5:C3:FB:B5:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/323830343a316162343a3a2f33322d3332203d3e203631383737.roa
Signing time:             Fri 06 Feb 2026 15:46:40 +0000
ROA not before:           Fri 06 Feb 2026 15:41:40 +0000
ROA not after:            Fri 05 Feb 2027 15:46:40 +0000
asID:                     61877
IP address blocks:        2804:1ab4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.crl
                          rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:29:73:68:5b:e3:6a:d2:0c:e3:7f:ed:d8:9c:33:a1:cc:99:6c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586
        Validity
            Not Before: Feb  6 15:41:40 2026 GMT
            Not After : Feb  5 15:46:40 2027 GMT
        Subject: CN=6CEE0DF722FAB0AF4E6EACBD49A23FEC13AB692D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:dc:29:a9:4a:f6:73:f8:d9:54:82:3a:46:c6:
                    2f:21:e7:15:90:2f:a3:86:9e:4b:b3:53:ad:0a:be:
                    bb:59:07:f3:4b:8c:30:c9:ca:33:da:fd:28:cc:26:
                    47:d3:6f:67:c1:50:dd:6b:fa:0b:a3:f1:a2:1c:70:
                    51:20:10:af:6c:d4:e0:a4:ef:aa:18:a6:27:83:c6:
                    b9:9e:08:be:53:91:fb:26:77:22:9e:e0:ee:79:d1:
                    57:17:7c:8b:6a:cb:39:2a:59:99:b8:35:9f:79:cb:
                    9f:b9:a4:0e:2f:3c:7b:4b:cd:66:b4:f6:eb:9e:df:
                    b4:3b:fb:71:7d:62:2c:01:3d:d7:3b:ba:b6:4d:b8:
                    bf:c9:e2:ed:bb:5d:25:e9:06:5a:e1:e0:ab:e8:cd:
                    9a:49:ae:cc:ef:3d:1c:ef:33:be:5b:77:93:07:c0:
                    0a:ec:b6:bc:ae:73:ce:b7:77:21:02:fd:f6:92:6e:
                    d3:3b:a3:b7:50:0e:20:d4:25:f2:a8:35:22:aa:5b:
                    19:4c:bc:c2:89:d8:8a:fa:7e:37:a9:ca:16:b9:e8:
                    ed:35:7b:7f:6d:d8:33:89:2e:f5:e4:52:78:f6:47:
                    93:72:48:ab:24:80:a8:4b:71:52:b0:8f:a5:1c:cb:
                    bf:17:e9:a4:8a:59:64:8f:33:64:e2:96:02:c5:0e:
                    b1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:EE:0D:F7:22:FA:B0:AF:4E:6E:AC:BD:49:A2:3F:EC:13:AB:69:2D
            X509v3 Authority Key Identifier:
                keyid:2C:B0:A4:F9:7E:58:54:FF:26:43:BF:14:74:C7:0D:B5:C3:FB:B5:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/323830343a316162343a3a2f33322d3332203d3e203631383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ab4::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:83:e0:5b:c2:79:c9:d9:2d:09:5f:95:f8:b3:ad:28:60:22:
         73:c5:d6:8d:bf:b0:4f:ba:bc:d3:e5:bc:aa:d0:49:75:5d:e9:
         32:be:45:47:00:90:43:eb:18:dd:ca:fe:14:71:6e:48:9c:de:
         30:e5:28:04:99:84:d4:d9:6a:5c:d4:df:ec:7a:79:de:0b:f1:
         66:87:18:e8:c5:86:1d:32:cc:f5:ca:d4:6f:86:87:a4:a5:4e:
         97:84:92:91:0a:28:0f:7c:70:8c:43:28:09:ca:2d:f0:47:14:
         45:7c:b0:d0:0a:18:5b:c1:94:42:48:73:e0:ab:9c:ea:7f:6b:
         77:85:27:2c:c5:8a:8e:02:a9:40:70:f6:f5:c3:60:01:96:12:
         08:c7:53:6d:6b:6b:e8:b5:73:4c:c7:72:67:b8:41:a8:34:3d:
         a6:fe:8a:38:9a:c0:a0:c8:99:1a:cb:9a:ed:e0:df:78:66:ba:
         e5:27:1d:9e:6a:46:f0:45:3b:f8:27:cc:59:70:6f:3e:74:ed:
         15:a6:7e:9a:98:95:5d:63:86:39:e6:5c:f3:a0:14:c0:0f:d7:
         97:fa:77:75:eb:e1:6a:f4:93:c7:d4:28:aa:d0:24:0a:22:56:
         f4:d0:29:b6:10:20:57:29:12:29:c8:87:e9:d7:5f:5b:59:67:
         c5:b4:bd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:36:39 2026 by rpki-client