Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a3a2f33342d3334203d3e20323636313635.roa
File:                     323830343a336262303a3a2f33342d3334203d3e20323636313635.roa (raw, json)
Hash identifier:          kY2bq1Z/m5QHx3c04SrHw40F2Q0s4w3dqLE1yALNE+Y=
Subject key identifier:   4F:5D:6D:52:60:FC:2B:0F:BA:3D:2B:D5:C9:F5:82:C4:A3:AF:AD:1C
Certificate issuer:       /CN=35820974DAE7FC3F1AE8D279269AB670ABA40E8F
Certificate serial:       767D97F5A1B6EA76B9D46D08F3C4CB445AC9473A
Authority key identifier: 35:82:09:74:DA:E7:FC:3F:1A:E8:D2:79:26:9A:B6:70:AB:A4:0E:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a3a2f33342d3334203d3e20323636313635.roa
Signing time:             Fri 23 Jan 2026 19:57:35 +0000
ROA not before:           Fri 23 Jan 2026 19:52:35 +0000
ROA not after:            Fri 22 Jan 2027 19:57:35 +0000
asID:                     266165
IP address blocks:        2804:3bb0::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.crl
                          rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 10:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:7d:97:f5:a1:b6:ea:76:b9:d4:6d:08:f3:c4:cb:44:5a:c9:47:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35820974DAE7FC3F1AE8D279269AB670ABA40E8F
        Validity
            Not Before: Jan 23 19:52:35 2026 GMT
            Not After : Jan 22 19:57:35 2027 GMT
        Subject: CN=4F5D6D5260FC2B0FBA3D2BD5C9F582C4A3AFAD1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d9:fb:4f:c0:9c:9e:7d:df:21:80:34:21:43:
                    b8:36:15:ca:c9:44:4b:6a:4a:b6:72:ad:a0:92:50:
                    68:08:ed:90:5d:8c:f9:9a:b1:96:af:16:9a:f1:b1:
                    ba:d2:79:5a:50:71:4b:46:b7:91:6c:29:35:fb:f9:
                    ce:60:e2:87:eb:ff:3e:51:0f:fa:e7:7e:4d:7f:c8:
                    29:fe:d5:88:d6:11:78:f8:62:12:e1:11:81:f0:2d:
                    52:b8:42:9e:2b:3f:33:14:84:62:9f:17:11:7a:ea:
                    47:c5:23:e2:27:bd:35:65:c8:ab:58:cc:0b:8e:b1:
                    0f:a9:7e:60:b3:5b:e8:04:f3:ed:4a:51:e1:a3:1b:
                    37:5c:5e:b9:76:db:8a:8d:d6:75:cb:c8:f4:0a:71:
                    c7:53:34:dd:a9:c8:ec:91:64:72:d4:cf:03:fa:79:
                    f1:c8:07:aa:30:21:a8:a0:e6:2b:cf:87:b8:d3:dd:
                    b2:09:2d:b9:a3:d6:b2:02:05:76:3f:2f:e7:fe:d1:
                    63:d1:db:0f:7c:46:a4:8a:6b:d3:2f:fc:41:0b:78:
                    a0:b9:57:c7:7b:60:e7:bf:58:d1:ec:22:c5:c2:5c:
                    e8:b0:5c:2e:81:c9:61:5e:2b:cb:ec:88:75:81:4e:
                    db:ce:5d:69:69:fa:58:13:a8:fc:32:7f:db:cd:25:
                    91:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5D:6D:52:60:FC:2B:0F:BA:3D:2B:D5:C9:F5:82:C4:A3:AF:AD:1C
            X509v3 Authority Key Identifier:
                keyid:35:82:09:74:DA:E7:FC:3F:1A:E8:D2:79:26:9A:B6:70:AB:A4:0E:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a3a2f33342d3334203d3e20323636313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bb0::/34

    Signature Algorithm: sha256WithRSAEncryption
         7d:4d:35:7f:de:e5:ef:a2:1c:d0:fc:f8:f5:6d:c2:bc:7c:01:
         cd:70:f5:2a:2e:bc:ed:6c:00:f2:47:b8:92:df:18:3a:31:ba:
         dc:1d:97:9c:5e:92:77:1e:c8:8b:25:5f:d6:93:a6:e6:d7:4b:
         5a:bc:02:5b:cf:20:57:cd:58:8c:3f:8d:89:2b:66:80:e8:96:
         e6:c3:42:6f:39:49:e2:f5:26:f7:b1:0f:56:16:9b:f7:68:c1:
         4b:3e:08:ee:1f:32:19:93:a6:d1:d1:da:00:51:c5:86:08:2c:
         d4:66:3b:0d:14:f4:61:fd:22:a0:45:27:f6:91:33:df:cc:63:
         aa:25:aa:eb:ae:59:c2:ec:c9:5a:db:9b:cd:4c:55:d2:f5:c2:
         1e:70:6b:11:3f:88:c2:75:23:74:28:f5:4a:26:63:a4:f7:84:
         1d:1b:54:46:c6:fe:18:ef:58:32:c7:03:6f:57:f4:fd:a7:dc:
         96:81:f7:11:16:a2:86:a1:c3:79:48:2b:36:97:d2:9f:0c:f4:
         14:2c:a7:15:1f:aa:ae:ca:c8:6b:d5:dd:08:fb:6e:83:a1:16:
         f1:89:92:70:69:00:a6:c9:09:fc:05:6a:02:42:71:34:e4:80:
         9e:2b:d4:d6:0a:f0:d4:fc:32:a7:e9:3d:8a:02:e0:d4:80:ac:
         43:96:80:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:49:57 2026 by rpki-client