Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/323830343a313661303a3a2f33322d3438203d3e203631393038.roa
File:                     323830343a313661303a3a2f33322d3438203d3e203631393038.roa (raw, json)
Hash identifier:          IaR/FLlbR7Qp0Qi+m6TKzOVpIQ98orJedfVSHhvd+jc=
Subject key identifier:   5A:5E:A1:4E:2D:35:A1:45:9E:AB:89:B5:E2:C3:B3:10:54:52:7B:34
Certificate issuer:       /CN=5D62945067A432F6ECF2AEED5374A6819AB60607
Certificate serial:       169E97C229DECC02911E3FA344EF90103D5555C7
Authority key identifier: 5D:62:94:50:67:A4:32:F6:EC:F2:AE:ED:53:74:A6:81:9A:B6:06:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D62945067A432F6ECF2AEED5374A6819AB60607.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/323830343a313661303a3a2f33322d3438203d3e203631393038.roa
Signing time:             Fri 30 Jan 2026 15:52:15 +0000
ROA not before:           Fri 30 Jan 2026 15:47:15 +0000
ROA not after:            Fri 29 Jan 2027 15:52:15 +0000
asID:                     61908
IP address blocks:        2804:16a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/5D62945067A432F6ECF2AEED5374A6819AB60607.crl
                          rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/5D62945067A432F6ECF2AEED5374A6819AB60607.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D62945067A432F6ECF2AEED5374A6819AB60607.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 11:52:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9e:97:c2:29:de:cc:02:91:1e:3f:a3:44:ef:90:10:3d:55:55:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D62945067A432F6ECF2AEED5374A6819AB60607
        Validity
            Not Before: Jan 30 15:47:15 2026 GMT
            Not After : Jan 29 15:52:15 2027 GMT
        Subject: CN=5A5EA14E2D35A1459EAB89B5E2C3B31054527B34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d6:5d:9a:f3:4b:01:d3:ef:32:07:9f:18:a1:
                    37:85:ad:b7:52:d5:e3:9a:35:a2:78:c8:4c:34:92:
                    d9:cb:a4:10:7d:f7:e8:b4:2a:29:a4:64:30:e8:18:
                    e8:54:c1:17:e9:35:f9:fc:d9:94:56:7c:b0:70:72:
                    4e:ee:7d:db:2d:be:de:93:7b:7f:75:69:32:d5:73:
                    67:3a:74:a0:7a:a0:12:63:ab:28:64:81:f6:80:d3:
                    ee:c9:82:46:82:a8:58:a5:5a:28:60:cb:e9:17:bc:
                    cf:a7:b9:4d:5c:26:37:3d:06:fe:05:70:55:74:e1:
                    02:40:7a:62:2c:00:d3:8b:4e:71:d1:72:ce:b3:60:
                    6a:29:c5:3b:53:f0:d2:10:48:d9:e6:e8:41:b5:a4:
                    6b:b7:e6:02:dd:c5:73:ac:03:2e:11:04:07:b2:4a:
                    d0:63:45:88:62:d0:b9:8e:e8:ee:e7:9d:34:94:0a:
                    93:a3:75:26:c3:42:9e:db:ec:9c:9d:4a:11:8a:6c:
                    7d:89:5d:06:08:c2:9f:7e:2d:39:ea:42:00:c4:42:
                    30:16:3b:e4:38:03:a3:e6:9b:bf:73:d2:04:74:a9:
                    ea:e2:51:b4:5c:fe:45:1b:28:c3:81:bc:d2:3b:0a:
                    4b:c6:d5:02:9f:ea:04:fe:50:6c:09:66:ef:c7:6a:
                    b3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5E:A1:4E:2D:35:A1:45:9E:AB:89:B5:E2:C3:B3:10:54:52:7B:34
            X509v3 Authority Key Identifier:
                keyid:5D:62:94:50:67:A4:32:F6:EC:F2:AE:ED:53:74:A6:81:9A:B6:06:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/5D62945067A432F6ECF2AEED5374A6819AB60607.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D62945067A432F6ECF2AEED5374A6819AB60607.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/323830343a313661303a3a2f33322d3438203d3e203631393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:ce:17:cb:af:fd:c4:18:87:76:09:f1:89:6b:cc:2d:74:de:
         1a:56:a8:5b:22:09:8b:67:02:a5:35:5d:d0:20:47:5d:ce:30:
         e4:49:7d:e9:43:2b:22:a8:4f:34:d3:1b:be:dd:5d:7c:6d:73:
         5b:ea:8c:fe:f7:66:b7:1f:56:c2:c5:ee:a4:c9:16:b5:4f:74:
         67:a7:d7:e3:56:c6:4f:fa:5f:cf:8f:13:cf:2f:85:cc:22:e8:
         97:4c:0b:8f:7c:66:af:34:6c:44:0d:8d:81:f4:90:65:10:80:
         5c:23:ae:88:32:d5:52:a1:b8:70:93:0c:50:9e:1a:da:7a:b2:
         3a:5e:94:05:e0:b8:3c:40:e4:00:fa:4e:6f:8f:41:38:64:5a:
         05:bd:b1:a3:c0:84:80:71:22:6a:7c:95:37:f2:bc:8f:11:ce:
         20:0b:11:7b:27:1e:d6:8a:5d:82:30:4a:fe:8a:c6:0e:d7:5c:
         bf:f5:ed:d7:24:9d:99:fa:90:30:98:50:fb:f8:b8:9d:71:af:
         1b:83:a5:80:9f:9b:5e:f1:aa:5d:54:cc:4b:6d:4d:ce:51:92:
         89:b9:97:77:20:63:85:ac:72:b9:1b:5a:d0:e4:44:72:38:1e:
         c5:59:64:8a:b7:19:2b:e4:6c:6a:7d:45:91:e7:3d:54:5f:f4:
         96:00:51:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:55:02 2026 by rpki-client