Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a3a2f33322d3332203d3e20323633363237.roa
File:                     323830343a313034343a3a2f33322d3332203d3e20323633363237.roa (raw, json)
Hash identifier:          BXyDeqY8T8JOBTMM35Mh5udw41owPDI5XQQ5VNTagT8=
Subject key identifier:   4A:5C:74:9B:D7:86:22:A4:9C:5F:12:C0:41:57:CE:6F:9A:12:39:96
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       51B48B4EF2EA0044ABFA5EEB4086F3C86E7406CA
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a3a2f33322d3332203d3e20323633363237.roa
Signing time:             Tue 24 Feb 2026 20:37:00 +0000
ROA not before:           Tue 24 Feb 2026 20:32:00 +0000
ROA not after:            Tue 23 Feb 2027 20:37:00 +0000
asID:                     263627
IP address blocks:        2804:1044::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 22:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b4:8b:4e:f2:ea:00:44:ab:fa:5e:eb:40:86:f3:c8:6e:74:06:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Feb 24 20:32:00 2026 GMT
            Not After : Feb 23 20:37:00 2027 GMT
        Subject: CN=4A5C749BD78622A49C5F12C04157CE6F9A123996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fa:4f:62:e7:b5:0d:2b:47:ae:74:14:de:c6:
                    5d:37:2e:c1:04:57:16:3b:12:c8:89:35:e8:6b:f5:
                    f2:10:f4:97:cc:e0:51:f1:19:33:2d:3c:98:72:f0:
                    07:e2:f0:51:eb:7e:da:62:6e:61:d3:7c:87:86:66:
                    e7:6a:dc:9e:df:a5:f4:06:83:fd:e4:17:be:18:cb:
                    31:76:a7:5a:fd:b6:c8:fd:74:9e:25:91:e5:8d:a0:
                    10:ef:83:ce:10:45:e2:05:0a:83:ff:ef:3e:84:26:
                    e8:50:53:9e:3d:f9:08:ad:9a:54:ca:bb:31:ea:09:
                    6d:c3:d0:98:20:67:0a:87:bd:78:7c:28:ab:02:ae:
                    7c:5d:11:da:ce:9a:0d:09:47:da:1d:88:d5:bb:26:
                    4b:22:5c:c1:82:4f:67:d3:52:ab:71:bd:c8:4b:a8:
                    15:88:87:68:ca:02:91:ec:21:0b:b2:a4:92:d1:8b:
                    ce:5b:61:74:f8:be:ca:14:aa:cc:59:90:e8:1f:20:
                    07:21:90:62:ef:6b:f5:55:df:df:c2:b2:4c:db:72:
                    55:27:ba:67:fa:e0:8a:6e:e4:1f:21:be:8d:a7:55:
                    c8:ba:32:ba:86:1d:58:d5:55:79:06:95:04:bf:e4:
                    a3:21:48:fb:e1:32:97:84:35:16:e4:37:12:dc:c0:
                    a9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5C:74:9B:D7:86:22:A4:9C:5F:12:C0:41:57:CE:6F:9A:12:39:96
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a3a2f33322d3332203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1044::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:86:eb:50:25:aa:a0:9b:d4:4e:23:5a:1a:47:da:f3:05:ab:
         5c:1a:f4:85:c7:a4:16:f1:44:e1:3b:fc:6c:b7:31:52:68:04:
         a1:4f:9e:0a:8e:42:b8:64:13:7b:ac:4e:88:3d:52:ee:24:f1:
         4c:e4:b5:23:d4:4f:8b:fd:3e:bd:25:08:5f:23:58:33:9f:3b:
         b8:7c:be:15:9c:98:83:9a:99:cb:b4:e9:ec:c1:99:90:92:4b:
         0b:0f:df:27:9e:f5:04:85:83:ca:f1:67:c4:5c:c0:39:78:73:
         bc:62:8a:e9:3e:fe:a7:6d:96:07:f9:97:25:c0:8c:ac:42:a2:
         d1:f4:af:78:8f:82:f5:d8:9c:47:f2:c4:b1:98:c4:c2:82:84:
         80:4b:06:17:f1:1f:48:b4:ab:04:da:5d:0e:9a:59:7b:57:52:
         7a:41:80:40:e7:00:45:5f:d8:4c:f4:7e:c1:76:ac:b9:c9:09:
         0e:8d:fb:3a:a7:1c:3d:00:de:5e:b2:a7:15:ed:b7:74:99:21:
         e5:51:25:18:e2:53:22:a4:d9:59:41:f3:77:7f:94:0d:da:63:
         9e:28:ba:7e:43:5d:5e:59:42:dc:6d:d0:02:11:2a:ca:44:2f:
         05:fe:b2:de:f7:94:7e:e2:26:32:e7:73:3d:08:15:94:43:63:
         49:88:7b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:45:14 2026 by rpki-client