Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/323830343a343263633a3a2f33322d313238203d3e20323637353238.roa
File:                     323830343a343263633a3a2f33322d313238203d3e20323637353238.roa (raw, json)
Hash identifier:          PIlRQltrUdhiGTMrlNBLmA0cy+LED9T3Iu4ZRFUOcso=
Subject key identifier:   A3:B6:7E:F8:0D:16:C9:09:38:75:D0:06:3C:BD:7C:0E:AC:C0:12:9B
Certificate issuer:       /CN=5BA4DDBBE974E5C2A25A952BF4431147F1D195BD
Certificate serial:       4A0BF58EC27AE5267D21A1605A31E5A3390DB39C
Authority key identifier: 5B:A4:DD:BB:E9:74:E5:C2:A2:5A:95:2B:F4:43:11:47:F1:D1:95:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/323830343a343263633a3a2f33322d313238203d3e20323637353238.roa
Signing time:             Mon 23 Feb 2026 12:21:57 +0000
ROA not before:           Mon 23 Feb 2026 12:16:57 +0000
ROA not after:            Mon 22 Feb 2027 12:21:57 +0000
asID:                     267528
IP address blocks:        2804:42cc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.crl
                          rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 03:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:0b:f5:8e:c2:7a:e5:26:7d:21:a1:60:5a:31:e5:a3:39:0d:b3:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BA4DDBBE974E5C2A25A952BF4431147F1D195BD
        Validity
            Not Before: Feb 23 12:16:57 2026 GMT
            Not After : Feb 22 12:21:57 2027 GMT
        Subject: CN=A3B67EF80D16C9093875D0063CBD7C0EACC0129B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:76:80:6e:a5:0f:a0:93:c3:dc:b1:f8:b3:35:
                    ff:03:16:0e:59:97:1e:e8:9c:ec:a8:64:f4:62:61:
                    ef:bb:ce:40:67:07:32:fc:b4:ea:12:6c:64:f1:24:
                    27:30:03:2e:3c:56:a8:14:02:9a:d2:70:4a:26:66:
                    91:71:95:de:ee:69:60:0d:3a:f5:43:75:f6:30:72:
                    d7:e3:de:98:42:6d:e7:2e:0e:0e:be:a7:c1:55:43:
                    c9:be:b6:ec:82:41:55:c1:88:dc:51:c1:f0:fb:c2:
                    bf:c5:f4:db:a2:f2:ec:ac:08:12:5c:00:c5:56:74:
                    78:a6:e8:12:30:4b:5a:8d:cf:2f:82:c5:1c:ba:59:
                    25:92:36:46:00:24:69:4d:ac:b1:d9:be:9b:fc:e1:
                    c5:1d:26:9f:be:ea:28:9e:3b:70:44:9a:c5:af:fb:
                    e5:be:92:58:29:cd:47:f3:95:98:55:9c:8e:23:6e:
                    8c:1b:bb:f2:52:90:12:a4:9e:fe:01:02:6b:28:d2:
                    ce:66:e2:0c:7d:67:c8:46:e5:1f:15:3c:93:1b:2b:
                    c4:8a:91:2b:25:db:a1:30:2c:b4:52:40:78:95:4e:
                    62:dc:29:43:31:f3:fb:bf:37:6f:76:f3:f4:62:4a:
                    64:29:ae:1b:09:a0:5f:6b:97:c0:c5:91:04:fa:4c:
                    57:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B6:7E:F8:0D:16:C9:09:38:75:D0:06:3C:BD:7C:0E:AC:C0:12:9B
            X509v3 Authority Key Identifier:
                keyid:5B:A4:DD:BB:E9:74:E5:C2:A2:5A:95:2B:F4:43:11:47:F1:D1:95:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/323830343a343263633a3a2f33322d313238203d3e20323637353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:42cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:39:85:86:f0:4b:21:13:c7:c4:3f:f1:33:df:ac:55:5c:f1:
         6c:0f:d4:e2:57:fd:dd:01:74:d7:36:09:e7:f4:a4:9f:a9:37:
         7d:86:4c:b0:a5:65:d2:1c:41:c0:a7:ba:55:19:3c:66:da:c8:
         3b:6b:95:b8:29:46:3d:ee:9b:dd:c9:d7:f7:e6:40:9b:16:a1:
         f3:0b:67:25:55:56:0c:65:3d:5b:cd:a4:c1:0b:0e:23:2b:21:
         cd:91:43:55:b0:13:01:fb:69:67:02:a6:c9:e1:5c:49:f0:c4:
         66:15:02:8c:10:48:94:44:a4:9b:f7:cd:f1:89:6d:15:9c:7e:
         4d:d5:2e:93:53:fc:44:0d:5d:40:b7:8c:32:5e:82:f4:43:4a:
         d5:cb:5b:e2:1c:8c:5a:40:08:43:58:35:f3:24:33:ed:92:be:
         0d:ab:1f:2c:dd:93:f9:c5:c9:ae:a4:3a:32:d4:62:82:76:fa:
         5d:52:25:40:7a:78:c3:7a:4d:14:2e:57:08:a2:2d:4c:ff:70:
         31:7b:74:55:ce:b3:9e:35:ee:75:28:15:41:c1:20:e1:7c:1c:
         c8:37:4f:c2:8c:1b:cd:28:a2:67:18:9b:99:dd:db:69:d7:90:
         2a:7c:41:68:e6:f5:fc:87:19:02:a6:f5:08:f5:26:5e:23:82:
         dd:38:4b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:13:21 2026 by rpki-client