Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/323830343a333539633a323430303a3a2f33382d3338203d3e20323636323936.roa
File:                     323830343a333539633a323430303a3a2f33382d3338203d3e20323636323936.roa (raw, json)
Hash identifier:          4ziw+UwW/UCfhLk+7dkR9VArkkQt8PD+RKBQlUJIPJg=
Subject key identifier:   1A:AB:44:EE:30:B7:50:C9:4B:86:51:DE:D4:04:76:D2:D7:BC:0A:03
Certificate issuer:       /CN=578D34CF76BA5E5EEFCC4F2B657185989703AE74
Certificate serial:       778D32C3744BCCD62CF240C04D0ED5D11E0B1386
Authority key identifier: 57:8D:34:CF:76:BA:5E:5E:EF:CC:4F:2B:65:71:85:98:97:03:AE:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/323830343a333539633a323430303a3a2f33382d3338203d3e20323636323936.roa
Signing time:             Thu 05 Feb 2026 06:46:15 +0000
ROA not before:           Thu 05 Feb 2026 06:41:15 +0000
ROA not after:            Thu 04 Feb 2027 06:46:15 +0000
asID:                     266296
IP address blocks:        2804:359c:2400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.crl
                          rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 15:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:8d:32:c3:74:4b:cc:d6:2c:f2:40:c0:4d:0e:d5:d1:1e:0b:13:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578D34CF76BA5E5EEFCC4F2B657185989703AE74
        Validity
            Not Before: Feb  5 06:41:15 2026 GMT
            Not After : Feb  4 06:46:15 2027 GMT
        Subject: CN=1AAB44EE30B750C94B8651DED40476D2D7BC0A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:00:f4:f9:28:c2:27:c3:b7:5e:30:cf:e8:21:
                    93:2d:ce:84:1f:67:df:f9:85:42:d9:d0:09:90:da:
                    54:21:bc:45:95:ea:93:11:4b:99:be:98:51:1d:af:
                    00:15:a4:5c:90:3a:48:be:2a:d8:86:93:60:12:6a:
                    67:d0:91:cd:c3:9a:8a:a4:99:3b:30:4a:46:21:ae:
                    fb:80:18:de:ed:90:d6:9b:01:57:ff:ed:2e:88:ad:
                    c8:9f:3a:e1:53:a6:7c:3b:cf:31:72:f0:5f:73:74:
                    c8:b6:07:7b:26:77:90:da:bf:10:63:ae:36:94:a3:
                    60:da:c3:9e:fa:3f:1b:41:46:24:ae:7a:76:83:12:
                    ec:fc:a6:ba:cd:6a:41:2b:d2:4f:00:ee:71:55:07:
                    16:fb:02:63:f6:a6:5d:9a:5a:f9:ba:6d:5a:65:b2:
                    62:b2:3c:dd:60:82:83:a4:9e:c2:0f:68:47:78:a4:
                    fd:08:24:fe:a7:67:6e:ea:5a:82:ba:f1:b1:0f:e8:
                    fa:3f:5e:86:02:d3:30:57:05:5b:9d:55:c9:04:1a:
                    ff:af:4e:66:ee:6f:bc:35:11:42:00:13:8b:9c:da:
                    4d:1c:80:09:af:98:db:55:41:d1:d4:b5:5f:fe:62:
                    e8:fc:de:fd:cc:a6:19:d3:03:0f:83:a5:9d:13:f6:
                    ea:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AB:44:EE:30:B7:50:C9:4B:86:51:DE:D4:04:76:D2:D7:BC:0A:03
            X509v3 Authority Key Identifier:
                keyid:57:8D:34:CF:76:BA:5E:5E:EF:CC:4F:2B:65:71:85:98:97:03:AE:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/323830343a333539633a323430303a3a2f33382d3338203d3e20323636323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:359c:2400::/38

    Signature Algorithm: sha256WithRSAEncryption
         72:b9:1a:12:bc:1e:59:e6:29:28:20:7f:f9:01:f0:42:39:38:
         18:9a:87:38:b4:b2:80:cc:f1:23:ce:fc:12:c4:a7:95:de:95:
         6f:6a:53:ce:20:89:e7:0f:ef:38:d7:49:22:8f:eb:61:9e:0e:
         d5:b8:d1:7f:c1:6a:0c:b0:0e:aa:5c:17:01:7a:27:c9:b3:1b:
         e9:ae:46:95:03:d0:25:0e:20:3d:ea:48:99:6a:80:a6:42:c4:
         6e:b6:6c:07:b3:78:9b:db:b7:55:52:76:21:a8:ad:09:6d:d5:
         c3:16:27:b0:10:02:ed:bb:85:55:14:74:8c:5a:89:1a:4a:97:
         24:04:ca:b3:3c:44:e0:c4:fe:f1:f4:03:21:73:f6:94:26:c8:
         6a:2c:eb:6b:bd:eb:ec:9a:d3:aa:53:b3:d5:af:d5:ba:c0:58:
         54:55:3a:6e:74:26:01:e2:07:12:44:fa:85:70:86:9f:58:8e:
         08:5a:f8:dd:de:de:8a:cf:59:77:fc:16:10:96:ea:90:04:73:
         5c:c8:9f:08:f9:90:87:c7:3d:e5:75:17:a8:91:98:3a:49:0d:
         47:1c:cc:77:8e:d5:49:a7:88:24:8e:2f:d5:6b:5a:67:c4:61:
         e1:d7:9a:29:9a:d9:17:69:fe:07:26:c6:50:44:8a:3a:6b:9f:
         8e:10:d5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:38:32 2026 by rpki-client