Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BoGz2CgWnBUbtewGZwfdnkktpcT8FvTBmW7trcpFC1dZ/0/323830343a6132303a3a2f33322d3438203d3e20323633303234.roa
File:                     323830343a6132303a3a2f33322d3438203d3e20323633303234.roa (raw, json)
Hash identifier:          uIidAmQTLGmRdBDnb/A7dAnL45WrjdEOOGRCDHZJPdw=
Subject key identifier:   39:30:15:E7:1F:6B:F2:CD:DB:00:07:79:3C:2A:FA:F7:E5:3B:74:27
Certificate issuer:       /CN=BC6A48253B2C282B4C3EAAE93F645A484A5BC08D
Certificate serial:       66EB83F812219012C06507A573E8D6234A8F34EC
Authority key identifier: BC:6A:48:25:3B:2C:28:2B:4C:3E:AA:E9:3F:64:5A:48:4A:5B:C0:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6A48253B2C282B4C3EAAE93F645A484A5BC08D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BoGz2CgWnBUbtewGZwfdnkktpcT8FvTBmW7trcpFC1dZ/0/323830343a6132303a3a2f33322d3438203d3e20323633303234.roa
Signing time:             Thu 29 Jan 2026 16:01:38 +0000
ROA not before:           Thu 29 Jan 2026 15:56:38 +0000
ROA not after:            Thu 28 Jan 2027 16:01:38 +0000
asID:                     263024
IP address blocks:        2804:a20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BoGz2CgWnBUbtewGZwfdnkktpcT8FvTBmW7trcpFC1dZ/0/BC6A48253B2C282B4C3EAAE93F645A484A5BC08D.crl
                          rsync://rpki-repo.registro.br/repo/BoGz2CgWnBUbtewGZwfdnkktpcT8FvTBmW7trcpFC1dZ/0/BC6A48253B2C282B4C3EAAE93F645A484A5BC08D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6A48253B2C282B4C3EAAE93F645A484A5BC08D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 12:19:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:eb:83:f8:12:21:90:12:c0:65:07:a5:73:e8:d6:23:4a:8f:34:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC6A48253B2C282B4C3EAAE93F645A484A5BC08D
        Validity
            Not Before: Jan 29 15:56:38 2026 GMT
            Not After : Jan 28 16:01:38 2027 GMT
        Subject: CN=393015E71F6BF2CDDB0007793C2AFAF7E53B7427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cf:22:dc:be:d8:3e:e5:e4:eb:f7:7e:0f:ed:
                    7e:81:6c:7e:51:40:28:98:21:92:6d:61:4e:be:53:
                    af:5d:c3:f3:a9:e3:f7:2b:71:54:7f:a6:ce:0d:ce:
                    ea:79:70:58:db:dd:b6:fd:16:de:63:e8:a0:50:35:
                    ac:c5:6a:1e:c8:af:b8:1b:97:e3:94:0d:3e:ec:c7:
                    e2:d0:17:38:25:4f:51:30:63:98:75:b4:2d:50:e2:
                    8e:a1:e6:0a:ca:36:3b:31:96:5a:22:77:5b:22:5e:
                    37:5c:75:89:e3:7b:65:88:46:c6:7d:a7:b7:56:f9:
                    7e:d5:d3:f3:90:38:57:e9:82:bb:19:7b:3e:55:3c:
                    1a:68:75:3a:d7:78:72:8c:6a:40:e5:ce:32:75:7d:
                    aa:00:e5:be:0e:32:86:be:64:42:75:37:66:b3:c4:
                    22:47:88:3c:ef:57:06:e9:54:51:53:d7:f3:03:72:
                    ed:59:20:ec:98:43:8f:3a:2c:dc:7a:a5:2d:aa:05:
                    0c:3d:2b:de:a2:9e:8c:07:db:c9:f8:6c:31:95:a3:
                    18:9f:a5:8b:d4:12:ba:45:75:64:47:48:3b:eb:d4:
                    ca:c9:54:51:b3:b7:fe:8c:67:54:c8:7e:35:0f:89:
                    b5:74:45:93:ed:88:bb:5f:6a:94:32:fe:97:62:52:
                    e6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:30:15:E7:1F:6B:F2:CD:DB:00:07:79:3C:2A:FA:F7:E5:3B:74:27
            X509v3 Authority Key Identifier:
                keyid:BC:6A:48:25:3B:2C:28:2B:4C:3E:AA:E9:3F:64:5A:48:4A:5B:C0:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BoGz2CgWnBUbtewGZwfdnkktpcT8FvTBmW7trcpFC1dZ/0/BC6A48253B2C282B4C3EAAE93F645A484A5BC08D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6A48253B2C282B4C3EAAE93F645A484A5BC08D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoGz2CgWnBUbtewGZwfdnkktpcT8FvTBmW7trcpFC1dZ/0/323830343a6132303a3a2f33322d3438203d3e20323633303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:8d:21:74:fd:f1:70:5f:24:51:19:b6:5d:c6:dc:df:ac:c2:
         66:63:1c:ab:aa:a7:0a:e4:a9:43:75:68:e1:41:47:7c:6c:41:
         20:80:06:86:06:91:09:15:4a:7f:77:a6:fe:b1:01:3f:2e:8f:
         78:d0:93:0c:b1:df:50:27:a0:01:00:fe:0a:a6:55:de:f4:ec:
         8c:ae:66:a4:fe:29:92:1a:b2:da:04:aa:29:12:d5:93:fd:22:
         1d:fd:29:ee:bf:f4:37:4d:27:f7:6b:26:a3:43:a9:17:1b:cb:
         b1:0b:3b:09:18:e1:c7:ca:1b:3b:5f:fa:c6:ce:2b:fc:f8:75:
         cc:f4:4f:d1:31:05:39:c8:a0:aa:dd:b3:3d:ad:67:13:46:cd:
         12:63:97:45:7b:6d:bd:cd:e2:02:66:92:1f:ce:ff:b7:9a:2e:
         69:32:9e:37:a8:d8:c0:9e:0a:a8:dd:1a:f2:0e:ad:ba:d7:3e:
         66:38:b7:29:d9:e6:2d:3c:74:b9:a5:3c:e1:3d:5b:8d:a3:ab:
         f6:51:2c:d3:88:95:92:3f:a8:1e:30:b4:f5:de:b8:7d:aa:6d:
         f9:6c:6c:7d:e0:f8:97:f1:84:dd:18:65:bf:d6:a8:89:63:ac:
         fa:07:9c:87:ce:5c:3d:07:31:79:3e:10:89:2d:72:bc:ee:e2:
         64:1a:5a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:22:44 2026 by rpki-client