Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/323830343a3538343a3a2f33322d3335203d3e203533303732.roa
File:                     323830343a3538343a3a2f33322d3335203d3e203533303732.roa (raw, json)
Hash identifier:          fxjgEX5iy9YO1AcF+RgrHcQQJmCAEbx0ZcJuEt4WXsQ=
Subject key identifier:   C0:07:2B:8B:41:5D:D2:6C:7C:D6:AC:16:4F:C4:C8:99:C9:77:7A:42
Certificate issuer:       /CN=EE8233F1CB1F21F30C90968BCE1B449A4776B768
Certificate serial:       609C8C8FEF182B932149C028803B1C1478CF2E10
Authority key identifier: EE:82:33:F1:CB:1F:21:F3:0C:90:96:8B:CE:1B:44:9A:47:76:B7:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8233F1CB1F21F30C90968BCE1B449A4776B768.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/323830343a3538343a3a2f33322d3335203d3e203533303732.roa
Signing time:             Mon 16 Feb 2026 19:21:26 +0000
ROA not before:           Mon 16 Feb 2026 19:16:26 +0000
ROA not after:            Mon 15 Feb 2027 19:21:26 +0000
asID:                     53072
IP address blocks:        2804:584::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/EE8233F1CB1F21F30C90968BCE1B449A4776B768.crl
                          rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/EE8233F1CB1F21F30C90968BCE1B449A4776B768.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8233F1CB1F21F30C90968BCE1B449A4776B768.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 23:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:9c:8c:8f:ef:18:2b:93:21:49:c0:28:80:3b:1c:14:78:cf:2e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE8233F1CB1F21F30C90968BCE1B449A4776B768
        Validity
            Not Before: Feb 16 19:16:26 2026 GMT
            Not After : Feb 15 19:21:26 2027 GMT
        Subject: CN=C0072B8B415DD26C7CD6AC164FC4C899C9777A42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b8:dd:c8:61:b9:08:2f:6c:49:05:75:77:c9:
                    d2:26:7c:f6:99:76:7c:87:d3:81:b9:26:34:7c:f4:
                    79:2f:f2:aa:0a:ef:c3:dd:a9:fd:da:bd:ee:fb:cd:
                    7c:5d:f6:92:35:8b:6f:6c:81:0a:62:ad:0b:50:5a:
                    44:e7:ab:91:55:9b:0a:17:45:58:5c:c9:e3:bb:38:
                    7a:0b:8b:c2:da:2a:fe:03:23:54:05:0a:58:ea:e6:
                    df:4d:60:4b:c5:cb:0d:eb:bc:69:48:45:20:66:99:
                    c4:71:4a:5b:bc:4e:8b:69:24:10:1a:00:55:00:59:
                    57:c3:53:49:9c:65:f8:0d:59:9e:6d:f4:e9:e2:ac:
                    66:a9:89:c2:8b:2e:9c:05:e2:f4:ee:f3:5b:58:7a:
                    c7:e1:3c:fc:71:65:a9:b3:cb:82:0c:84:ba:ef:ca:
                    62:1b:b9:88:b4:da:9e:68:69:01:70:e4:4b:35:c2:
                    c1:ac:5d:b8:bb:b6:89:f6:49:8f:02:67:c6:f8:f6:
                    d9:fb:c8:49:16:15:e7:1f:00:f1:b0:a5:98:43:94:
                    b7:98:91:81:5c:78:c4:5b:1c:63:e3:94:9c:10:4d:
                    f2:7c:51:31:93:19:c8:8d:b6:b5:c4:0c:3d:1b:23:
                    7e:df:e5:2f:8d:63:eb:52:2e:f7:cf:ae:7c:b5:1b:
                    02:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:07:2B:8B:41:5D:D2:6C:7C:D6:AC:16:4F:C4:C8:99:C9:77:7A:42
            X509v3 Authority Key Identifier:
                keyid:EE:82:33:F1:CB:1F:21:F3:0C:90:96:8B:CE:1B:44:9A:47:76:B7:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/EE8233F1CB1F21F30C90968BCE1B449A4776B768.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8233F1CB1F21F30C90968BCE1B449A4776B768.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/323830343a3538343a3a2f33322d3335203d3e203533303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:584::/32

    Signature Algorithm: sha256WithRSAEncryption
         dd:23:23:ce:ae:5d:bd:df:2a:20:bd:de:90:a4:6e:ae:8c:2e:
         9b:84:3d:a0:bc:9f:3a:9b:30:53:ef:d8:26:6f:4b:e4:b4:3d:
         8c:e3:08:d5:df:2d:7d:4c:df:b8:20:aa:73:09:d8:aa:24:c7:
         7b:aa:1d:14:f8:e7:d1:30:44:44:3c:4a:f4:04:cb:66:74:77:
         79:7d:73:4a:ad:87:52:8e:08:0c:40:da:d7:0f:1e:35:a3:ec:
         d0:ab:0b:47:7f:d6:35:86:88:46:11:e1:3e:e6:39:bb:f5:e0:
         76:74:95:79:5c:81:de:03:cc:ec:a4:f2:b8:53:98:d0:10:98:
         ec:36:b3:8f:3d:40:7a:6e:6d:ce:6e:db:a7:81:13:f7:35:4e:
         e5:f6:9b:dd:b8:2e:30:9d:65:65:d2:10:04:37:32:86:f3:9b:
         7c:fb:8e:b8:62:92:a5:1e:5d:5c:a0:46:eb:17:38:a1:50:04:
         1b:af:75:a1:51:ba:96:db:1b:b3:53:a7:93:7f:2c:e8:55:cd:
         61:bb:41:f7:10:1e:f9:e4:c3:53:3d:96:c4:32:d6:ee:5a:e3:
         f7:c1:19:55:b7:a2:11:a9:b1:9e:59:53:0e:89:27:72:c4:f9:
         81:ee:0e:1f:3a:b5:ad:b4:06:d5:ae:06:7e:73:ed:95:bf:b8:
         d6:9e:16:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 06:50:05 2026 by rpki-client