Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a633030303a3a2f33342d3334203d3e20323636313635.roa
File:                     323830343a336262303a633030303a3a2f33342d3334203d3e20323636313635.roa (raw, json)
Hash identifier:          XFTYmKY6JNCFXZ+x4nC1y8JJKbmqDOBMiZk6q8Sd7EA=
Subject key identifier:   98:E4:72:EA:F7:58:CA:38:33:F3:D7:EE:AD:A9:55:71:85:59:3E:4F
Certificate issuer:       /CN=35820974DAE7FC3F1AE8D279269AB670ABA40E8F
Certificate serial:       752945CD62F7435E1FA47E0AD4089F6BB171793F
Authority key identifier: 35:82:09:74:DA:E7:FC:3F:1A:E8:D2:79:26:9A:B6:70:AB:A4:0E:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a633030303a3a2f33342d3334203d3e20323636313635.roa
Signing time:             Fri 23 Jan 2026 19:57:43 +0000
ROA not before:           Fri 23 Jan 2026 19:52:43 +0000
ROA not after:            Fri 22 Jan 2027 19:57:43 +0000
asID:                     266165
IP address blocks:        2804:3bb0:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.crl
                          rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 10:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:29:45:cd:62:f7:43:5e:1f:a4:7e:0a:d4:08:9f:6b:b1:71:79:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35820974DAE7FC3F1AE8D279269AB670ABA40E8F
        Validity
            Not Before: Jan 23 19:52:43 2026 GMT
            Not After : Jan 22 19:57:43 2027 GMT
        Subject: CN=98E472EAF758CA3833F3D7EEADA9557185593E4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a0:ef:dc:55:4e:23:b9:de:93:f9:2b:ac:b6:
                    c7:c8:0f:53:21:db:01:ce:39:ed:4e:38:c9:6a:1a:
                    16:1a:ed:cb:94:cb:af:bb:49:17:3d:84:78:9f:88:
                    5c:cc:e6:55:67:7f:c2:16:d5:55:7a:ca:be:bc:2f:
                    f9:8d:fc:d2:f9:44:c9:25:91:78:23:d6:f9:cb:35:
                    5a:59:45:9c:65:f1:19:dc:87:2b:b9:74:84:0d:40:
                    1e:1f:a9:0d:5e:d9:a4:99:c1:46:1a:c1:b2:63:8f:
                    ff:4b:fd:bf:a7:8c:54:ca:9b:e1:91:68:e3:1c:f4:
                    c9:13:b0:08:34:51:74:44:4c:22:bd:fd:72:61:27:
                    7a:07:82:85:bd:a2:67:21:d7:e4:fe:39:a2:6f:5d:
                    7c:6d:71:c3:e0:5e:e8:7d:9d:be:33:b6:38:3b:4e:
                    b6:3a:5d:28:6c:5a:a7:30:20:9c:b4:54:ec:86:37:
                    66:bc:60:8c:2e:4e:55:0c:d9:49:d1:da:5c:e6:ae:
                    0f:59:65:c7:39:7b:a2:86:b5:02:cd:69:d4:36:8d:
                    49:ee:2d:b7:1a:3b:d8:9c:3b:19:cb:74:1d:94:83:
                    09:b5:90:a1:04:09:66:7a:09:87:61:f4:a8:57:b1:
                    a7:df:a7:7e:c6:00:68:d7:cb:7c:cc:ca:88:5d:ed:
                    3e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E4:72:EA:F7:58:CA:38:33:F3:D7:EE:AD:A9:55:71:85:59:3E:4F
            X509v3 Authority Key Identifier:
                keyid:35:82:09:74:DA:E7:FC:3F:1A:E8:D2:79:26:9A:B6:70:AB:A4:0E:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a633030303a3a2f33342d3334203d3e20323636313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bb0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6a:f4:2f:68:12:84:0d:cf:97:af:e8:b7:9d:84:0f:6b:c7:6a:
         dc:39:a4:bf:05:69:78:60:88:4b:9c:37:d9:e5:a9:6a:62:80:
         76:e8:f2:ed:8c:17:d6:7c:99:bf:64:08:47:44:88:c5:a6:25:
         14:3d:49:78:4c:1d:ba:3a:27:93:81:2f:9a:65:14:26:5a:08:
         55:28:f6:f2:bc:bb:34:db:94:f3:d2:8c:9e:b6:d0:71:29:09:
         1e:a9:1b:5b:66:d8:56:35:71:07:29:ba:14:2c:3a:a3:0f:33:
         f4:dd:6c:ff:24:b0:30:a4:f0:3e:ff:fb:bf:13:c4:61:9d:4f:
         5e:fa:39:df:89:de:38:52:09:45:12:bd:68:8f:42:a1:83:fa:
         18:ae:0f:9e:c6:4c:7e:cf:e6:29:9b:3f:1a:38:ea:3e:cf:bf:
         67:b2:1e:03:05:61:aa:6e:3c:88:e9:44:1e:5e:49:c2:60:68:
         4c:bb:0d:83:e0:90:e5:32:61:55:78:90:a4:32:59:dc:22:a1:
         9a:04:bc:a6:5c:9a:35:53:a2:d0:4a:e9:ec:93:db:9f:08:fb:
         39:ae:b8:44:fb:ea:c9:a2:ff:71:ba:75:97:ea:31:fd:fb:4f:
         5b:e2:a8:e3:85:40:85:22:ca:c8:85:15:0f:49:f0:97:2e:a6:
         a7:ec:e4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:50:18 2026 by rpki-client