Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a3a2f33322d3332203d3e20323733383136.roa
File:                     323830343a386362343a3a2f33322d3332203d3e20323733383136.roa (raw, json)
Hash identifier:          okCH1lW7z96HUjQD7gleeTB2IQ9tHUAIYOQVtqIV/Dk=
Subject key identifier:   99:0E:34:8D:51:94:67:5B:AC:F6:7B:E6:77:7B:EA:EE:72:73:78:D7
Certificate issuer:       /CN=54A36B0DF034AA7AA83520582C85CDA7DEF38153
Certificate serial:       7F2565CB98F6C62C1DA1DC8DF9415FC98D3DD40F
Authority key identifier: 54:A3:6B:0D:F0:34:AA:7A:A8:35:20:58:2C:85:CD:A7:DE:F3:81:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54A36B0DF034AA7AA83520582C85CDA7DEF38153.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a3a2f33322d3332203d3e20323733383136.roa
Signing time:             Tue 27 Jan 2026 14:20:54 +0000
ROA not before:           Tue 27 Jan 2026 14:15:54 +0000
ROA not after:            Tue 26 Jan 2027 14:20:54 +0000
asID:                     273816
IP address blocks:        2804:8cb4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/54A36B0DF034AA7AA83520582C85CDA7DEF38153.crl
                          rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/54A36B0DF034AA7AA83520582C85CDA7DEF38153.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54A36B0DF034AA7AA83520582C85CDA7DEF38153.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 15:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:25:65:cb:98:f6:c6:2c:1d:a1:dc:8d:f9:41:5f:c9:8d:3d:d4:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A36B0DF034AA7AA83520582C85CDA7DEF38153
        Validity
            Not Before: Jan 27 14:15:54 2026 GMT
            Not After : Jan 26 14:20:54 2027 GMT
        Subject: CN=990E348D5194675BACF67BE6777BEAEE727378D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b7:59:e5:f1:d8:ec:df:91:35:f2:cf:fe:f8:
                    93:0c:52:42:b1:76:a1:31:87:a4:cd:2d:73:19:d3:
                    17:26:07:5c:31:ff:8a:69:48:2b:e8:2d:88:57:fb:
                    ef:96:47:2a:f9:26:33:b7:42:09:e3:60:6c:50:86:
                    3a:7a:ba:ae:08:6d:4a:42:78:f6:20:49:ef:8e:75:
                    1f:22:e5:14:e4:8f:6c:d4:03:e0:ba:26:45:32:33:
                    9c:57:46:f2:44:d5:22:0e:01:1c:f4:4a:1d:11:46:
                    4b:04:35:61:a3:6f:de:53:56:23:9c:3e:ca:db:e3:
                    31:c1:d8:22:e2:56:6e:41:95:9c:23:4b:b3:7c:e3:
                    2a:0a:eb:ed:2f:bb:7b:e7:cb:8d:72:79:d2:c1:d4:
                    a6:16:1c:1e:3d:98:57:bb:87:a3:94:c6:e0:db:e2:
                    13:41:d1:c7:c8:f3:ad:d6:57:7b:2f:91:cc:4d:3d:
                    92:e9:b8:95:5c:39:d0:a1:f4:5c:93:0e:2d:ab:2a:
                    08:b6:e9:65:76:df:89:4f:97:ed:c0:83:0c:31:fe:
                    71:d8:5a:8a:2a:d8:d0:96:75:78:5d:42:e3:b6:dd:
                    f6:fc:5b:99:58:6c:7d:17:23:09:5e:4c:8a:2a:69:
                    66:12:46:39:fb:6d:e1:ce:33:5e:f0:8d:b0:c0:07:
                    d0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0E:34:8D:51:94:67:5B:AC:F6:7B:E6:77:7B:EA:EE:72:73:78:D7
            X509v3 Authority Key Identifier:
                keyid:54:A3:6B:0D:F0:34:AA:7A:A8:35:20:58:2C:85:CD:A7:DE:F3:81:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/54A36B0DF034AA7AA83520582C85CDA7DEF38153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54A36B0DF034AA7AA83520582C85CDA7DEF38153.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a3a2f33322d3332203d3e20323733383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:fd:29:3d:52:65:f4:48:78:ee:52:7c:05:58:9f:da:fb:fa:
         f8:89:bb:a3:1f:96:66:3c:83:54:b2:a5:59:5a:ab:03:24:d0:
         a7:1d:c0:17:df:91:23:62:28:f7:0e:82:0d:a3:d7:66:80:be:
         6f:54:18:4b:05:cf:86:01:2f:b2:69:9e:cf:aa:6e:a8:53:45:
         87:fa:dd:0f:7b:1b:ed:47:1f:c1:01:46:41:bc:37:ad:99:98:
         76:ac:e1:74:c2:d0:8f:00:0e:0b:b5:75:e3:e2:fd:67:82:9d:
         5c:7f:55:fa:42:74:54:9e:d5:ff:8a:6a:b7:ce:71:6c:00:29:
         77:23:70:ca:40:84:aa:9f:30:2c:65:e8:f9:d9:2b:06:fb:eb:
         ce:12:f0:3f:78:75:9f:9a:78:04:be:b0:b4:da:94:02:f4:51:
         9c:40:8f:25:b5:8d:9a:ea:7f:45:dd:84:5d:8a:8c:30:39:98:
         9c:27:49:ba:b2:11:f9:a3:dd:f4:97:23:01:5d:9c:f3:02:73:
         e1:74:c4:3d:7d:b4:5c:3b:3e:96:8e:20:64:59:d4:c9:2b:6d:
         c1:6d:b1:55:1d:16:4d:6f:97:fd:29:98:3b:c4:ed:f9:1b:4b:
         c6:18:3d:1c:38:70:5b:28:ce:ca:08:e2:96:ad:e0:df:2c:c9:
         41:a2:f1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:08:52 2026 by rpki-client