Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bduq5698C1B9mPWByU7jZkwtZbJvHrUyQ23SJB1wrBoA/0/323830343a333233633a3a2f33322d3332203d3e20323632333637.roa
File:                     323830343a333233633a3a2f33322d3332203d3e20323632333637.roa (raw, json)
Hash identifier:          OA/nYKflQYtvF1sC4+hlVMrJVroSOwgsYbORwL4/2j4=
Subject key identifier:   A3:38:C3:DD:D5:06:F6:6C:F0:70:DD:0A:7D:F1:A1:06:87:4E:44:05
Certificate issuer:       /CN=89CE62B4143CBF1BEB8F3D89AA75A6FE618038A0
Certificate serial:       26213203C51B94059606B1E13BDF32C94ED91049
Authority key identifier: 89:CE:62:B4:14:3C:BF:1B:EB:8F:3D:89:AA:75:A6:FE:61:80:38:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89CE62B4143CBF1BEB8F3D89AA75A6FE618038A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bduq5698C1B9mPWByU7jZkwtZbJvHrUyQ23SJB1wrBoA/0/323830343a333233633a3a2f33322d3332203d3e20323632333637.roa
Signing time:             Wed 04 Feb 2026 13:34:56 +0000
ROA not before:           Wed 04 Feb 2026 13:29:56 +0000
ROA not after:            Wed 03 Feb 2027 13:34:56 +0000
asID:                     262367
IP address blocks:        2804:323c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bduq5698C1B9mPWByU7jZkwtZbJvHrUyQ23SJB1wrBoA/0/89CE62B4143CBF1BEB8F3D89AA75A6FE618038A0.crl
                          rsync://rpki-repo.registro.br/repo/Bduq5698C1B9mPWByU7jZkwtZbJvHrUyQ23SJB1wrBoA/0/89CE62B4143CBF1BEB8F3D89AA75A6FE618038A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89CE62B4143CBF1BEB8F3D89AA75A6FE618038A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 02:23:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:21:32:03:c5:1b:94:05:96:06:b1:e1:3b:df:32:c9:4e:d9:10:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CE62B4143CBF1BEB8F3D89AA75A6FE618038A0
        Validity
            Not Before: Feb  4 13:29:56 2026 GMT
            Not After : Feb  3 13:34:56 2027 GMT
        Subject: CN=A338C3DDD506F66CF070DD0A7DF1A106874E4405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c4:9f:c7:e8:c8:b9:60:0b:a4:49:73:1d:76:
                    6f:f0:a6:71:16:b9:9c:e3:fe:e3:ed:69:b4:c0:29:
                    a1:2d:99:de:b7:56:43:94:c2:50:86:62:71:bc:25:
                    46:d4:e4:69:4b:f3:fd:fd:e1:d5:21:96:89:ea:f3:
                    7c:5e:47:1c:f9:30:2b:9e:66:5b:e2:ca:8d:42:f4:
                    da:07:cc:1d:de:66:7d:76:9b:2c:e4:1d:8b:e8:16:
                    ae:40:86:58:2e:b5:e0:8f:8d:c3:68:97:fc:c6:1d:
                    4c:ca:df:10:59:5c:f5:31:99:a5:fe:24:16:a5:80:
                    fb:c7:07:00:bc:34:9d:71:05:c9:77:8a:f6:11:96:
                    99:1d:5b:92:2a:a9:c2:6c:e6:5d:b4:3e:6b:84:2e:
                    60:56:dd:2c:2a:3d:7b:85:6f:b3:d8:fc:aa:be:1d:
                    e5:3a:16:8b:95:da:4e:83:79:8c:b7:c5:fa:a1:30:
                    10:b2:41:57:51:41:42:68:07:53:e6:e9:eb:83:50:
                    5e:12:39:81:ca:53:ce:d2:67:4b:52:a3:86:b5:75:
                    6d:d9:47:a9:21:5d:62:1f:37:bd:3f:f6:1c:e5:84:
                    b9:5f:86:e3:fb:af:ef:94:7a:c0:47:99:6d:c3:b6:
                    bc:59:6a:b2:0c:3b:1e:4e:81:ce:f9:e9:e6:94:61:
                    39:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:38:C3:DD:D5:06:F6:6C:F0:70:DD:0A:7D:F1:A1:06:87:4E:44:05
            X509v3 Authority Key Identifier:
                keyid:89:CE:62:B4:14:3C:BF:1B:EB:8F:3D:89:AA:75:A6:FE:61:80:38:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bduq5698C1B9mPWByU7jZkwtZbJvHrUyQ23SJB1wrBoA/0/89CE62B4143CBF1BEB8F3D89AA75A6FE618038A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89CE62B4143CBF1BEB8F3D89AA75A6FE618038A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bduq5698C1B9mPWByU7jZkwtZbJvHrUyQ23SJB1wrBoA/0/323830343a333233633a3a2f33322d3332203d3e20323632333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:323c::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:0f:da:43:89:a5:07:64:5f:19:42:b7:65:72:40:30:b6:5b:
         fe:84:a1:84:79:d3:23:bd:9d:e2:01:c6:01:cd:68:8f:dc:15:
         85:f6:52:60:4f:9e:60:43:3c:6a:87:dd:80:00:b9:7d:07:35:
         1b:e4:07:37:69:c5:2d:f7:5c:39:d1:d7:46:7b:49:f6:43:8b:
         7f:63:34:1b:29:80:04:f4:71:78:c1:3b:38:05:6e:8d:b3:ab:
         0b:fd:d4:6a:04:b6:6c:ec:0b:e5:75:28:38:ac:3b:5f:c4:c0:
         2c:f5:c4:97:b8:9a:3a:8a:58:3d:76:ab:f6:a1:0e:6a:0d:67:
         03:8e:c6:be:34:c5:ee:06:6a:11:d2:70:74:fa:f2:d9:7a:ec:
         8a:55:d2:16:8c:66:ae:5d:27:7f:7c:7b:4d:cf:b7:02:ac:0c:
         6c:6c:ce:48:f7:61:c7:41:d2:b5:85:90:87:67:8c:dd:10:66:
         2f:cd:d8:bd:b4:da:74:e4:28:d4:ef:ad:c4:9d:36:50:44:f8:
         84:9f:e0:72:ca:1c:6d:f5:02:79:84:de:69:d9:d3:1f:78:c5:
         e0:f2:aa:2f:3c:19:b8:a0:b9:c6:15:b2:67:18:4b:e3:a5:83:
         97:f6:c6:1a:88:10:50:b1:b4:30:31:d1:d8:76:92:33:ee:6d:
         6f:21:f4:25
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJiEyA8UblAWWBrHhO98yyU7ZEEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlDRTYyQjQxNDNDQkYxQkVCOEYzRDg5QUE3NUE2RkU2
MTgwMzhBMDAeFw0yNjAyMDQxMzI5NTZaFw0yNzAyMDMxMzM0NTZaMDMxMTAvBgNV
BAMTKEEzMzhDM0RERDUwNkY2NkNGMDcwREQwQTdERjFBMTA2ODc0RTQ0MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqxJ/H6Mi5YAukSXMddm/wpnEW
uZzj/uPtabTAKaEtmd63VkOUwlCGYnG8JUbU5GlL8/394dUhlonq83xeRxz5MCue
Zlviyo1C9NoHzB3eZn12myzkHYvoFq5AhlguteCPjcNol/zGHUzK3xBZXPUxmaX+
JBalgPvHBwC8NJ1xBcl3ivYRlpkdW5IqqcJs5l20PmuELmBW3SwqPXuFb7PY/Kq+
HeU6FouV2k6DeYy3xfqhMBCyQVdRQUJoB1Pm6euDUF4SOYHKU87SZ0tSo4a1dW3Z
R6khXWIfN70/9hzlhLlfhuP7r++UesBHmW3DtrxZarIMOx5Ogc756eaUYTm5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUozjD3dUG9mzwcN0KffGhBodORAUwHwYDVR0j
BBgwFoAUic5itBQ8vxvrjz2JqnWm/mGAOKAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmR1cTU2OThDMUI5bVBXQnlVN2paa3d0WmJKdkhyVXlRMjNTSkIxd3JC
b0EvMC84OUNFNjJCNDE0M0NCRjFCRUI4RjNEODlBQTc1QTZGRTYxODAzOEEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5Q0U2MkI0MTQzQ0JGMUJF
QjhGM0Q4OUFBNzVBNkZFNjE4MDM4QTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JkdXE1Njk4QzFCOW1QV0J5VTdqWmt3dFpiSnZIclV5UTIzU0pCMXdyQm9BLzAv
MzIzODMwMzQzYTMzMzIzMzYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMy
MzMzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQyPDANBgkqhkiG9w0BAQsFAAOCAQEAaA/aQ4ml
B2RfGUK3ZXJAMLZb/oShhHnTI72d4gHGAc1oj9wVhfZSYE+eYEM8aofdgAC5fQc1
G+QHN2nFLfdcOdHXRntJ9kOLf2M0GymABPRxeME7OAVujbOrC/3UagS2bOwL5XUo
OKw7X8TALPXEl7iaOopYPXar9qEOag1nA47GvjTF7gZqEdJwdPry2XrsilXSFoxm
rl0nf3x7Tc+3AqwMbGzOSPdhx0HStYWQh2eM3RBmL83YvbTadOQo1O+txJ02UET4
hJ/gcsocbfUCeYTeadnTH3jF4PKqLzwZuKC5xhWyZxhL46WDl/bGGogQULG0MDHR
2HaSM+5tbyH0JQ==
-----END CERTIFICATE-----
Generated at Mon Feb 23 04:19:04 2026 by rpki-client