Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a663130303a3a2f34302d3438203d3e20323633323833.roa
File:                     323830343a313635383a663130303a3a2f34302d3438203d3e20323633323833.roa (raw, json)
Hash identifier:          McVCf2Xc39sSa8k/N3pB4IUykUsipVuHSqkf+gFOVBU=
Subject key identifier:   D4:27:40:17:9A:95:11:6A:7B:64:B0:72:C1:D8:10:B8:0A:0D:16:CE
Certificate issuer:       /CN=41B0D3EA994B3A684602641351C292C7808B50FC
Certificate serial:       17B9172D94E2A24ACA7A6C092D7C2B9958F90A7D
Authority key identifier: 41:B0:D3:EA:99:4B:3A:68:46:02:64:13:51:C2:92:C7:80:8B:50:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a663130303a3a2f34302d3438203d3e20323633323833.roa
Signing time:             Mon 12 Jan 2026 16:30:31 +0000
ROA not before:           Mon 12 Jan 2026 16:25:31 +0000
ROA not after:            Mon 11 Jan 2027 16:30:31 +0000
asID:                     263283
IP address blocks:        2804:1658:f100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.crl
                          rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 21:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b9:17:2d:94:e2:a2:4a:ca:7a:6c:09:2d:7c:2b:99:58:f9:0a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B0D3EA994B3A684602641351C292C7808B50FC
        Validity
            Not Before: Jan 12 16:25:31 2026 GMT
            Not After : Jan 11 16:30:31 2027 GMT
        Subject: CN=D42740179A95116A7B64B072C1D810B80A0D16CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0d:c6:13:f6:cb:16:92:3e:d3:a1:3f:fd:59:
                    75:66:56:03:49:41:b3:7d:f7:ab:af:63:c6:a4:80:
                    6a:ec:41:ab:30:72:b0:95:53:21:49:c2:5a:c8:10:
                    24:76:e5:8c:b0:e5:98:3d:5a:c2:45:1f:d8:4c:fd:
                    cc:9c:a8:95:cb:3b:74:3c:78:46:32:4f:ab:6a:b2:
                    e0:93:18:a5:40:90:f7:68:63:22:5c:58:9a:66:e5:
                    08:3e:16:5b:bf:32:f9:78:6f:0b:ec:f4:c7:fc:86:
                    34:1e:57:90:d5:f8:a1:75:05:a8:97:9a:c2:de:f5:
                    f4:3b:ab:16:f5:c3:9d:1b:21:e9:e5:5f:10:25:7c:
                    e2:06:f5:80:da:46:1b:ff:09:8e:5d:07:c7:79:85:
                    1d:9e:bc:12:16:6c:dc:55:0f:b9:dd:53:dc:09:02:
                    52:91:de:3d:13:11:90:38:f5:68:ba:57:25:98:6e:
                    87:28:49:13:72:01:6b:15:60:d0:1f:4c:3c:02:5d:
                    d9:83:cb:ba:0e:2d:ab:07:97:0c:19:36:e2:05:20:
                    aa:9f:1b:63:1f:dd:34:bf:29:72:cf:b7:c2:d5:9e:
                    34:96:57:67:a0:9a:d5:7b:e8:b5:d8:53:3a:12:00:
                    0d:c8:2e:f2:80:8d:3f:08:5a:0c:cc:4c:61:9f:90:
                    d4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:27:40:17:9A:95:11:6A:7B:64:B0:72:C1:D8:10:B8:0A:0D:16:CE
            X509v3 Authority Key Identifier:
                keyid:41:B0:D3:EA:99:4B:3A:68:46:02:64:13:51:C2:92:C7:80:8B:50:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a663130303a3a2f34302d3438203d3e20323633323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1658:f100::/40

    Signature Algorithm: sha256WithRSAEncryption
         16:90:e2:32:04:80:15:2b:5f:b6:a0:eb:2c:4e:ea:eb:95:46:
         00:b2:6a:67:1a:56:33:b8:90:f9:80:35:d3:27:ae:47:0e:a8:
         a8:50:d5:c6:7d:2c:76:52:ee:43:36:9c:e9:0b:c8:25:3e:81:
         7f:ab:10:e0:0a:bf:20:b5:24:ac:53:c0:ab:79:fd:ea:71:60:
         16:aa:99:55:bf:d0:1e:cc:65:08:cf:9e:58:c6:75:9b:b5:5d:
         1c:5f:64:f0:e3:65:ea:16:42:b5:6b:77:e1:6e:5c:e6:10:7e:
         df:63:30:bb:c5:f6:85:28:1c:f6:03:6e:22:1a:88:67:e6:7a:
         0c:4b:71:14:83:a8:4e:22:7e:26:5f:aa:fa:23:6a:20:00:c7:
         6d:a3:0a:e7:60:bb:12:3d:04:57:c1:c1:7e:df:7b:df:dc:14:
         e3:b7:aa:75:eb:57:75:2e:79:64:c4:69:ed:82:ff:cd:6e:ca:
         1f:e3:27:e9:97:a8:cd:7a:c2:74:bd:20:e3:3b:20:ce:dc:d4:
         21:aa:96:75:5b:2b:f8:3a:46:06:be:e5:b4:ff:d1:37:e5:57:
         f2:7a:15:56:9b:00:1a:02:ca:dd:a7:6b:be:fa:f7:0f:55:09:
         0b:53:6b:4e:39:f1:75:fb:40:5f:8f:15:c8:19:f2:4a:d3:de:
         69:0c:8f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:22:33 2026 by rpki-client