Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DUTzmmBReebcYtGN3JfsRzKzvZ2mkeeEbk1DuGsPor56/0/323830343a383663383a3a2f33322d3332203d3e20323732363636.roa
File:                     323830343a383663383a3a2f33322d3332203d3e20323732363636.roa (raw, json)
Hash identifier:          Z4FWiCqFaClxyy3MAWmIB49ozEDRAM0DbZBM91Jlw18=
Subject key identifier:   DC:49:D9:E1:BB:FA:F7:31:44:7C:57:27:B9:97:81:E4:85:39:D2:72
Certificate issuer:       /CN=6415817E779BB65D15ABFE0332192044330D88A4
Certificate serial:       5448205B35D0C4B4296C08662132D98C7D67D447
Authority key identifier: 64:15:81:7E:77:9B:B6:5D:15:AB:FE:03:32:19:20:44:33:0D:88:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6415817E779BB65D15ABFE0332192044330D88A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DUTzmmBReebcYtGN3JfsRzKzvZ2mkeeEbk1DuGsPor56/0/323830343a383663383a3a2f33322d3332203d3e20323732363636.roa
Signing time:             Thu 22 Jan 2026 18:00:42 +0000
ROA not before:           Thu 22 Jan 2026 17:55:42 +0000
ROA not after:            Thu 21 Jan 2027 18:00:42 +0000
asID:                     272666
IP address blocks:        2804:86c8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DUTzmmBReebcYtGN3JfsRzKzvZ2mkeeEbk1DuGsPor56/0/6415817E779BB65D15ABFE0332192044330D88A4.crl
                          rsync://rpki-repo.registro.br/repo/DUTzmmBReebcYtGN3JfsRzKzvZ2mkeeEbk1DuGsPor56/0/6415817E779BB65D15ABFE0332192044330D88A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6415817E779BB65D15ABFE0332192044330D88A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 16:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:48:20:5b:35:d0:c4:b4:29:6c:08:66:21:32:d9:8c:7d:67:d4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6415817E779BB65D15ABFE0332192044330D88A4
        Validity
            Not Before: Jan 22 17:55:42 2026 GMT
            Not After : Jan 21 18:00:42 2027 GMT
        Subject: CN=DC49D9E1BBFAF731447C5727B99781E48539D272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bc:c1:01:42:52:d2:80:32:70:4e:66:22:5a:
                    b0:81:d9:b4:d0:8c:34:38:94:b6:52:ef:1f:f0:ca:
                    66:52:d9:c0:77:31:54:fc:b6:19:9a:5d:21:43:d9:
                    b8:0c:40:46:29:d1:1c:a8:7a:ce:40:86:41:43:1b:
                    03:0d:56:1f:70:dd:1d:6a:e5:cb:6b:a3:87:8d:20:
                    27:57:ca:34:56:2d:31:73:99:dc:e9:01:21:aa:72:
                    22:af:1b:3c:47:3d:d9:37:86:00:5b:1c:c6:89:e2:
                    03:33:16:ec:4d:6e:a4:23:c0:16:06:c5:72:e0:a2:
                    ad:6b:2a:7c:e1:01:37:e7:52:a0:bd:be:fe:7e:1f:
                    49:0b:59:90:d6:11:0c:c7:6d:e6:8d:5f:4f:8d:b6:
                    da:42:0d:21:71:34:ed:d4:ab:76:5d:51:11:30:30:
                    76:9d:18:53:00:d4:37:42:69:87:ff:4c:1d:74:af:
                    76:c5:3a:2f:71:c1:cc:6a:ff:91:cd:03:b2:cc:63:
                    f3:fd:d3:5a:27:09:72:c4:9c:cc:fa:24:ea:11:8f:
                    1d:9d:ec:35:23:12:3b:b4:b7:ca:01:1b:aa:15:c5:
                    8d:d6:2c:34:bd:86:74:12:a8:e7:b2:e7:19:a9:22:
                    dd:ef:3f:a2:97:7d:1f:c0:fe:be:e6:ec:36:19:81:
                    b4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:49:D9:E1:BB:FA:F7:31:44:7C:57:27:B9:97:81:E4:85:39:D2:72
            X509v3 Authority Key Identifier:
                keyid:64:15:81:7E:77:9B:B6:5D:15:AB:FE:03:32:19:20:44:33:0D:88:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DUTzmmBReebcYtGN3JfsRzKzvZ2mkeeEbk1DuGsPor56/0/6415817E779BB65D15ABFE0332192044330D88A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6415817E779BB65D15ABFE0332192044330D88A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DUTzmmBReebcYtGN3JfsRzKzvZ2mkeeEbk1DuGsPor56/0/323830343a383663383a3a2f33322d3332203d3e20323732363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:08:2f:12:95:8d:40:49:c3:e9:cb:23:fd:5f:d4:69:d4:01:
         2f:de:f3:fe:00:47:a9:1c:76:4f:df:65:31:26:8a:5d:1a:fe:
         9d:33:40:d2:73:db:2b:f8:a5:f9:32:bd:2a:f0:a8:1c:9a:18:
         44:bc:59:ae:d5:f7:d7:0c:62:87:e6:7e:e5:75:d3:f8:fc:d2:
         56:eb:c7:61:53:eb:bf:9a:38:c6:dc:61:24:ac:56:9a:73:34:
         50:9f:22:9a:e8:a2:77:9d:9a:78:20:44:c5:85:1e:7e:68:b3:
         b8:8e:40:13:e4:bf:e0:7b:8a:c4:7a:db:8f:3e:3d:0a:3b:cb:
         fb:d5:4b:11:ed:3f:d0:f0:8a:a5:6d:cb:04:46:62:84:7e:61:
         de:de:35:62:1d:25:0d:6b:1d:4d:d4:a6:af:1c:7f:e6:b7:dc:
         14:0d:d5:3c:a3:43:38:e6:f2:bc:8f:f8:d7:4b:88:43:af:11:
         ca:9a:ce:e6:e6:13:41:4f:2e:aa:91:fe:b8:aa:fd:af:81:34:
         4f:97:38:9e:b5:0d:53:3a:ae:02:01:74:86:d1:35:55:5a:9e:
         67:48:e6:bd:3a:29:2c:65:60:23:e9:f4:f5:45:d2:37:89:ae:
         75:0f:1a:77:51:ac:88:f0:30:5a:fe:3a:0f:e3:63:d4:12:cc:
         22:f4:d4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:22:34 2026 by rpki-client