Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/323830343a3462633a3a2f33322d3438203d3e20323632343632.roa
File:                     323830343a3462633a3a2f33322d3438203d3e20323632343632.roa (raw, json)
Hash identifier:          nOWH+7LanFmjajZSBDi9SQxnWv6QeoP27K6K56dEIFQ=
Subject key identifier:   E2:59:58:47:82:47:AC:E4:6D:4A:5E:58:66:03:0C:E7:4B:54:33:A0
Certificate issuer:       /CN=DD57F54CD0114823ABB5B5203F91EF5EEC26B06F
Certificate serial:       46EA1C427112DA83C0B700D476D1AF46383D6C4E
Authority key identifier: DD:57:F5:4C:D0:11:48:23:AB:B5:B5:20:3F:91:EF:5E:EC:26:B0:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/323830343a3462633a3a2f33322d3438203d3e20323632343632.roa
Signing time:             Tue 24 Feb 2026 20:49:24 +0000
ROA not before:           Tue 24 Feb 2026 20:44:24 +0000
ROA not after:            Tue 23 Feb 2027 20:49:24 +0000
asID:                     262462
IP address blocks:        2804:4bc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl
                          rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 05:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ea:1c:42:71:12:da:83:c0:b7:00:d4:76:d1:af:46:38:3d:6c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD57F54CD0114823ABB5B5203F91EF5EEC26B06F
        Validity
            Not Before: Feb 24 20:44:24 2026 GMT
            Not After : Feb 23 20:49:24 2027 GMT
        Subject: CN=E25958478247ACE46D4A5E5866030CE74B5433A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8b:0c:cb:1a:49:80:ae:de:fb:02:39:52:da:
                    73:48:3a:1c:da:63:54:a0:ad:cc:5d:a4:72:d0:bd:
                    bc:f7:87:92:3d:41:47:ac:2a:91:cd:36:46:88:b9:
                    79:d5:d0:2a:1c:c5:b5:b9:3c:b0:af:cd:de:c9:49:
                    49:6e:00:01:70:88:86:dc:f6:ec:ad:44:b3:fa:14:
                    e0:2e:4a:37:8c:f5:75:14:84:4f:cb:05:78:b2:42:
                    f0:24:6a:01:67:38:2c:4e:88:3d:0c:44:2a:79:19:
                    cb:95:27:aa:a6:4b:6f:cb:0e:0c:d8:f0:1a:17:f2:
                    ef:7e:8c:31:2b:13:11:7f:5c:b8:08:5b:77:eb:a2:
                    57:8a:6e:05:72:11:e8:fd:bc:1b:db:83:7a:0e:a2:
                    77:3d:a0:44:22:81:c4:60:c3:b2:0a:09:99:9a:a8:
                    4b:87:38:c0:12:8e:e6:7a:d1:69:61:7c:0b:df:43:
                    b0:21:c2:67:34:72:e2:7a:5f:32:4b:ad:0b:90:03:
                    1b:ef:32:b8:ae:6f:77:51:d0:a8:ff:bd:17:64:ef:
                    35:8f:3c:8c:92:86:db:f5:21:a0:e8:9d:bd:e4:8c:
                    31:18:d1:b7:e7:27:14:96:fb:9b:27:1a:4b:f2:d1:
                    a7:6e:1a:a6:22:bd:2e:91:9a:e5:a1:14:0b:28:e1:
                    c1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:59:58:47:82:47:AC:E4:6D:4A:5E:58:66:03:0C:E7:4B:54:33:A0
            X509v3 Authority Key Identifier:
                keyid:DD:57:F5:4C:D0:11:48:23:AB:B5:B5:20:3F:91:EF:5E:EC:26:B0:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/323830343a3462633a3a2f33322d3438203d3e20323632343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:59:e6:03:da:3f:90:04:35:f5:ae:00:ea:81:dd:78:2d:81:
         8f:91:f0:bb:ad:b9:77:3a:0c:72:b9:65:f5:54:1d:aa:ce:56:
         3a:8d:e8:5f:df:b6:9a:e8:af:1e:ce:db:85:66:35:cf:dc:6d:
         73:85:9e:0b:29:b2:85:21:41:63:8b:c0:18:ec:e6:c0:ab:59:
         67:09:e7:1a:05:1e:d2:5e:a4:f0:be:a5:24:48:ae:70:ac:c2:
         cd:c6:6a:19:36:ce:8c:a6:a5:59:64:eb:60:4b:b5:b2:73:97:
         c3:52:5f:09:0b:e3:ae:63:07:a8:83:9a:47:97:b3:76:aa:1f:
         37:1b:76:89:b2:de:06:54:ac:08:ac:e0:32:bb:31:ce:38:fb:
         7e:9d:11:20:6c:0b:3a:9a:95:fa:2f:42:92:09:8d:86:a7:75:
         57:12:b2:3c:70:bb:f9:01:c7:13:a1:c2:ae:35:77:97:ca:42:
         6a:25:d9:55:02:3a:50:30:0b:59:f0:ae:62:6b:19:68:cf:10:
         d9:d6:56:70:36:26:7e:d4:75:23:db:d4:bc:9e:89:4e:f4:d2:
         58:ad:ce:40:42:67:54:a9:95:c1:94:0c:fb:04:39:da:58:46:
         32:d6:93:d0:86:2d:42:d0:65:40:f4:05:96:0a:c0:1a:07:e0:
         ec:de:26:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:58:04 2026 by rpki-client