Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/323830343a346333343a633032373a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633032373a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          sPt7WPgKQ3YBXnlNBbX8RuD15qJxZmXFZlrw82h5kk8=
Subject key identifier:   CD:DB:BA:16:F5:4E:F1:3B:D1:11:EB:11:B3:AC:28:7B:EE:19:DD:FD
Certificate issuer:       /CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
Certificate serial:       724BA32603BE1CB96693275C1928061FE2C5A3E5
Authority key identifier: 90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/323830343a346333343a633032373a3a2f34382d3438203d3e203631353932.roa
Signing time:             Fri 27 Feb 2026 20:29:54 +0000
ROA not before:           Fri 27 Feb 2026 20:24:54 +0000
ROA not after:            Fri 26 Feb 2027 20:29:54 +0000
asID:                     61592
IP address blocks:        2804:4c34:c027::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl
                          rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 03:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:4b:a3:26:03:be:1c:b9:66:93:27:5c:19:28:06:1f:e2:c5:a3:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
        Validity
            Not Before: Feb 27 20:24:54 2026 GMT
            Not After : Feb 26 20:29:54 2027 GMT
        Subject: CN=CDDBBA16F54EF13BD111EB11B3AC287BEE19DDFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:25:7c:ce:20:f3:9c:2f:4e:c4:38:fa:24:87:
                    c5:a9:5e:b0:f0:e0:64:a0:83:27:70:b2:90:56:41:
                    fb:07:8d:2b:64:99:f7:2f:85:9f:48:e0:67:e9:16:
                    0d:58:66:ca:55:a8:ec:43:44:01:e2:4d:27:56:3b:
                    bb:f2:e3:c7:5c:3f:d4:f7:9c:10:cf:d2:17:02:8a:
                    60:69:27:7e:8b:ea:04:85:b3:4f:2a:0f:b6:0c:6f:
                    e7:c4:63:7c:97:95:a8:3b:9e:ba:c9:92:fe:0e:f7:
                    cf:d9:ef:53:c7:e5:b0:5b:6b:cb:40:8e:e9:ec:5f:
                    d9:ad:d0:77:46:f4:70:b4:d6:6f:38:9d:d7:9f:0d:
                    32:fd:6a:47:35:89:22:ba:31:0e:fb:39:15:01:ef:
                    43:94:81:f7:d4:11:1f:e7:08:02:b0:04:ff:70:a3:
                    f5:f0:21:60:2c:85:df:fe:9e:e8:07:29:00:c8:62:
                    09:fd:ba:2d:08:cb:3d:7c:d2:8a:7a:06:ff:a7:01:
                    84:15:d0:c0:82:69:31:dc:3a:77:dd:0c:94:76:33:
                    2c:2a:43:83:b3:e8:04:77:b9:d2:51:96:1d:c1:d0:
                    b2:84:2d:5a:78:38:ab:f5:d1:e3:f5:11:07:62:a7:
                    16:df:ad:2e:de:4c:fe:60:d6:de:f3:8f:25:13:c1:
                    2c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DB:BA:16:F5:4E:F1:3B:D1:11:EB:11:B3:AC:28:7B:EE:19:DD:FD
            X509v3 Authority Key Identifier:
                keyid:90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/323830343a346333343a633032373a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c027::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:40:91:e6:0a:42:de:9a:0b:65:72:34:f3:e7:c1:e6:2f:6a:
         77:06:fe:e5:3d:bb:e7:c6:9d:1b:60:5b:cf:7e:a5:e6:0d:1b:
         0f:8b:8b:55:33:b2:d5:ff:98:bb:03:15:42:ce:7d:b0:34:7f:
         bf:43:7c:a3:16:6e:ea:c9:11:66:ef:da:65:09:8c:a9:3f:a9:
         05:74:32:31:dd:70:04:d7:ff:7a:5b:6c:61:af:90:0e:cd:63:
         ea:8c:d4:e5:b6:fb:6c:80:a9:b9:ab:05:7b:72:b6:03:3b:90:
         5a:78:00:48:3d:24:fa:4a:f2:0f:fa:c1:e3:e9:96:77:64:c2:
         3c:3a:2a:5e:21:1b:de:69:04:df:8f:f0:55:7e:34:19:c8:f6:
         74:1a:fc:0b:e4:27:98:8a:88:c5:b9:89:70:c8:c0:36:99:55:
         0c:aa:4c:08:0d:b9:5a:f7:bc:df:13:8e:07:62:17:89:85:33:
         89:bc:2e:57:73:9a:6a:8d:b9:0c:87:7c:eb:e2:33:7c:0b:c3:
         5e:20:f2:ba:82:35:b7:f5:6f:ed:95:20:32:43:41:c7:23:70:
         e4:7d:09:4a:aa:31:65:04:77:63:13:11:4e:06:d6:99:fc:03:
         93:05:46:86:e9:42:67:d5:f9:c9:53:5e:6d:ca:2b:94:ca:aa:
         44:f9:57:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:37:45 2026 by rpki-client