Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9FZNsT1triUi8b8LBJCcrekFegnzHBvmm7ECn6V1vpjD/0/323830343a316262343a3a2f33322d3438203d3e203631373434.roa
File:                     323830343a316262343a3a2f33322d3438203d3e203631373434.roa (raw, json)
Hash identifier:          jNJmkXrPoDo50itTtrBbZ89CyV7SRcrkHLO+N8v6UDc=
Subject key identifier:   E5:2F:33:4F:A4:54:6F:64:69:90:33:9C:45:B5:A2:DC:79:C3:F7:0D
Certificate issuer:       /CN=B946CFF8BBCE38B4E926F35027B766151DC7E4C1
Certificate serial:       324E25DE89FB28D59C133A6DF2D36F813141E312
Authority key identifier: B9:46:CF:F8:BB:CE:38:B4:E9:26:F3:50:27:B7:66:15:1D:C7:E4:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B946CFF8BBCE38B4E926F35027B766151DC7E4C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9FZNsT1triUi8b8LBJCcrekFegnzHBvmm7ECn6V1vpjD/0/323830343a316262343a3a2f33322d3438203d3e203631373434.roa
Signing time:             Thu 29 Jan 2026 19:17:13 +0000
ROA not before:           Thu 29 Jan 2026 19:12:13 +0000
ROA not after:            Thu 28 Jan 2027 19:17:13 +0000
asID:                     61744
IP address blocks:        2804:1bb4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9FZNsT1triUi8b8LBJCcrekFegnzHBvmm7ECn6V1vpjD/0/B946CFF8BBCE38B4E926F35027B766151DC7E4C1.crl
                          rsync://rpki-repo.registro.br/repo/9FZNsT1triUi8b8LBJCcrekFegnzHBvmm7ECn6V1vpjD/0/B946CFF8BBCE38B4E926F35027B766151DC7E4C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B946CFF8BBCE38B4E926F35027B766151DC7E4C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:4e:25:de:89:fb:28:d5:9c:13:3a:6d:f2:d3:6f:81:31:41:e3:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B946CFF8BBCE38B4E926F35027B766151DC7E4C1
        Validity
            Not Before: Jan 29 19:12:13 2026 GMT
            Not After : Jan 28 19:17:13 2027 GMT
        Subject: CN=E52F334FA4546F646990339C45B5A2DC79C3F70D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:23:09:a2:12:d0:9e:ae:38:01:d6:a4:8d:15:
                    fc:e7:8e:d0:cf:ab:f0:1e:6b:10:8a:cb:c4:ef:69:
                    49:97:81:dd:74:9a:cb:95:f2:c8:b0:cb:3e:9e:47:
                    82:39:49:af:8c:75:21:ea:6a:5e:e8:f5:26:9a:88:
                    e9:10:e2:d9:d5:83:cc:d6:9a:ba:98:8b:c5:55:55:
                    f3:17:91:27:3b:c2:22:e4:a0:3c:d7:52:89:53:3c:
                    46:2d:6c:9f:7d:65:c8:73:3e:38:0c:6e:82:9b:71:
                    77:06:72:02:e0:18:ec:5f:ed:d5:31:41:37:39:bf:
                    07:e0:d1:22:d0:fa:17:3c:e9:92:11:4a:0d:e6:fc:
                    e2:5a:bd:57:fa:f8:4d:f0:bd:23:c9:f1:8a:49:0e:
                    1e:66:41:c9:57:11:5e:5e:9b:6e:7c:ab:e8:43:c4:
                    fc:50:5e:71:87:5c:b9:88:80:d9:5e:12:54:c6:82:
                    4b:c5:e1:a7:65:09:aa:78:9f:84:f8:80:fc:93:da:
                    92:c4:53:e4:6b:12:c8:a6:57:eb:0a:34:85:5a:3f:
                    0b:a5:80:20:43:f6:e3:56:37:b2:07:b2:28:cc:d1:
                    88:ef:24:04:97:a9:40:37:6a:03:83:fe:23:de:33:
                    a2:d8:d1:9a:97:6a:75:94:a8:c6:d4:78:0f:00:65:
                    41:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2F:33:4F:A4:54:6F:64:69:90:33:9C:45:B5:A2:DC:79:C3:F7:0D
            X509v3 Authority Key Identifier:
                keyid:B9:46:CF:F8:BB:CE:38:B4:E9:26:F3:50:27:B7:66:15:1D:C7:E4:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9FZNsT1triUi8b8LBJCcrekFegnzHBvmm7ECn6V1vpjD/0/B946CFF8BBCE38B4E926F35027B766151DC7E4C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B946CFF8BBCE38B4E926F35027B766151DC7E4C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9FZNsT1triUi8b8LBJCcrekFegnzHBvmm7ECn6V1vpjD/0/323830343a316262343a3a2f33322d3438203d3e203631373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1bb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         d2:3f:93:6d:2d:f9:3d:00:91:4b:13:77:a1:b6:3a:75:d5:2a:
         ca:b2:43:cd:c6:ce:3b:ba:70:8e:62:ba:f0:96:26:f9:64:d4:
         ee:fe:59:01:04:e0:68:e3:b4:0d:43:c0:a8:63:86:0b:6b:64:
         33:9d:2d:40:64:1d:b4:a7:a5:fe:0e:71:a6:e7:63:07:ca:45:
         b1:8d:3d:d0:56:16:44:43:a3:70:49:fe:cc:c6:94:2d:65:6f:
         90:86:9b:6c:e2:22:24:fc:48:f6:08:7a:b2:54:bc:70:f8:b2:
         24:07:54:cc:1b:1c:47:1c:6a:39:98:c9:5c:a0:62:40:a6:a1:
         c1:95:3e:37:85:1e:55:d6:5e:73:6c:c4:f7:c0:c4:bf:68:a2:
         65:84:86:11:99:da:37:a5:17:3c:fd:46:25:f4:a7:80:7b:4f:
         65:0d:5b:12:6a:d3:72:99:17:4e:68:15:34:ac:f0:e9:0c:a2:
         dd:1a:12:a6:4d:6c:01:29:bc:fb:54:6a:b6:51:60:04:64:a1:
         f9:4b:3a:57:c3:e4:70:78:24:c8:bc:c5:37:38:ab:82:5a:62:
         a4:13:3d:15:f0:69:6a:2c:1c:33:32:9c:1f:8d:62:b8:64:7f:
         b5:04:1f:51:9c:21:5e:ba:59:85:35:e1:69:13:0c:00:a7:6f:
         bb:02:cb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:51:39 2026 by rpki-client