Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/323830343a356630303a3a2f33322d313238203d3e20323639303730.roa
File:                     323830343a356630303a3a2f33322d313238203d3e20323639303730.roa (raw, json)
Hash identifier:          6uu975bsToD06Tj7+sYQDdzdaOEn5RxQJ0V3+i9YA3M=
Subject key identifier:   05:1E:08:4E:B1:62:D3:A2:46:DE:A4:3A:AD:C5:06:3C:FA:1C:1F:67
Certificate issuer:       /CN=BC4626991569184D81CCF322C25715DD37F1D01B
Certificate serial:       45306E6E49DD4C25B7E2A56BDDA811E418BFFDA5
Authority key identifier: BC:46:26:99:15:69:18:4D:81:CC:F3:22:C2:57:15:DD:37:F1:D0:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC4626991569184D81CCF322C25715DD37F1D01B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/323830343a356630303a3a2f33322d313238203d3e20323639303730.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     269070
IP address blocks:        2804:5f00::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/BC4626991569184D81CCF322C25715DD37F1D01B.crl
                          rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/BC4626991569184D81CCF322C25715DD37F1D01B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC4626991569184D81CCF322C25715DD37F1D01B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:30:6e:6e:49:dd:4c:25:b7:e2:a5:6b:dd:a8:11:e4:18:bf:fd:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC4626991569184D81CCF322C25715DD37F1D01B
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:05:3f:d3:f9:a5:53:da:91:0c:65:75:75:9b:
                    26:c1:8b:45:61:34:6d:46:4a:53:5f:63:00:c2:82:
                    e0:bb:3c:37:a2:c1:df:3c:6c:c4:ff:d2:2e:65:26:
                    78:86:01:25:bd:d0:15:72:b4:5d:b4:c1:6d:5b:21:
                    33:c8:36:4c:c9:f6:71:ae:73:a3:32:22:62:21:16:
                    c6:f4:b9:b0:f6:d3:7a:6c:64:90:3f:f4:c8:81:28:
                    f8:57:a8:8f:53:99:ed:00:1d:8a:6c:1c:7c:67:f6:
                    cf:78:b0:7d:fe:9c:ec:da:51:63:76:46:be:8d:5f:
                    31:c7:ff:3a:07:f8:8a:87:6c:00:c3:e1:9e:44:38:
                    c1:3c:3d:ec:b6:99:42:c0:6a:3a:1b:04:f9:20:39:
                    60:1b:34:6f:1d:3b:ae:9f:b3:cc:09:16:b0:8f:ef:
                    e0:25:4d:1a:ab:e4:09:7b:2a:06:f2:0b:c4:6e:a7:
                    97:ec:6d:38:56:12:ac:06:af:9b:68:9c:94:00:48:
                    36:51:7f:1f:b6:d4:fb:ac:ca:48:b8:75:43:14:97:
                    14:dd:c6:58:53:48:e4:26:e3:52:55:7f:3b:6f:2b:
                    5f:03:d3:a0:62:e0:31:74:46:28:c3:cc:70:fb:a8:
                    47:a6:65:ff:60:2e:5e:0d:03:f7:68:96:c3:0d:ac:
                    af:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1E:08:4E:B1:62:D3:A2:46:DE:A4:3A:AD:C5:06:3C:FA:1C:1F:67
            X509v3 Authority Key Identifier:
                keyid:BC:46:26:99:15:69:18:4D:81:CC:F3:22:C2:57:15:DD:37:F1:D0:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/BC4626991569184D81CCF322C25715DD37F1D01B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC4626991569184D81CCF322C25715DD37F1D01B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/323830343a356630303a3a2f33322d313238203d3e20323639303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:f4:9a:3c:73:80:87:c3:14:0f:46:82:df:57:d0:85:b4:de:
         db:5e:f6:af:20:52:a3:5c:23:5f:8d:c2:3e:60:1d:c3:25:1d:
         ff:4b:b1:2d:28:10:8a:f7:cd:29:3f:a2:8e:69:07:3e:e1:8d:
         59:35:32:30:20:d2:c3:e6:3a:e7:10:40:a1:b9:33:ee:2a:84:
         8b:4d:62:7e:66:24:c4:54:7b:9b:53:d7:f4:61:9f:f2:c1:76:
         59:43:f9:34:f5:cc:ff:82:aa:ef:3a:8f:1a:71:ce:c9:4a:f0:
         50:36:ca:96:0f:c2:72:0f:9e:9a:ec:63:f0:ca:73:4e:1f:be:
         13:f7:ba:a6:bc:c5:0b:a1:3c:c2:d8:2d:c2:d1:c1:77:d5:3f:
         a0:e5:31:e2:97:a6:ad:fb:01:ac:7b:d7:ae:78:46:d0:72:95:
         9a:e7:37:8e:86:88:90:f4:d3:d8:6c:ab:97:9c:ea:4c:70:09:
         c4:2d:27:0f:e6:a0:a6:3a:a0:fd:22:63:02:cd:e0:4a:ca:28:
         6f:e8:e0:b2:d2:00:5f:b5:41:96:12:8a:1c:17:79:05:f2:67:
         f5:00:18:ae:f5:21:74:80:02:45:2d:60:58:d7:3a:fc:db:91:
         0f:a8:67:36:ad:95:6a:cf:3a:01:fc:85:ce:b5:33:99:17:fb:
         84:17:cd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:00:40 2026 by rpki-client