Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6P5BjAidLs1VitV9M3GJ7MkSNcnsoPaUZf8kNm8kVdLx/0/323830343a336531633a3a2f33322d313238203d3e20323636353734.roa
File:                     323830343a336531633a3a2f33322d313238203d3e20323636353734.roa (raw, json)
Hash identifier:          R0SVU5xPyg6Gmj+prlj6qcYaMyEAl0x6iJykwLg1PO0=
Subject key identifier:   39:AD:2E:7F:17:6E:FC:BA:62:3F:37:F7:C2:62:05:04:73:69:41:A8
Certificate issuer:       /CN=9DC0D84255CA9B276792460946C72580528D040A
Certificate serial:       09FE8EA2D7A8DB03F81BB68B8EB8F1EA28821E4A
Authority key identifier: 9D:C0:D8:42:55:CA:9B:27:67:92:46:09:46:C7:25:80:52:8D:04:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DC0D84255CA9B276792460946C72580528D040A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6P5BjAidLs1VitV9M3GJ7MkSNcnsoPaUZf8kNm8kVdLx/0/323830343a336531633a3a2f33322d313238203d3e20323636353734.roa
Signing time:             Tue 17 Feb 2026 00:58:36 +0000
ROA not before:           Tue 17 Feb 2026 00:53:36 +0000
ROA not after:            Tue 16 Feb 2027 00:58:36 +0000
asID:                     266574
IP address blocks:        2804:3e1c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6P5BjAidLs1VitV9M3GJ7MkSNcnsoPaUZf8kNm8kVdLx/0/9DC0D84255CA9B276792460946C72580528D040A.crl
                          rsync://rpki-repo.registro.br/repo/6P5BjAidLs1VitV9M3GJ7MkSNcnsoPaUZf8kNm8kVdLx/0/9DC0D84255CA9B276792460946C72580528D040A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DC0D84255CA9B276792460946C72580528D040A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 17:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fe:8e:a2:d7:a8:db:03:f8:1b:b6:8b:8e:b8:f1:ea:28:82:1e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DC0D84255CA9B276792460946C72580528D040A
        Validity
            Not Before: Feb 17 00:53:36 2026 GMT
            Not After : Feb 16 00:58:36 2027 GMT
        Subject: CN=39AD2E7F176EFCBA623F37F7C2620504736941A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:48:01:dc:c6:ad:5d:87:70:41:56:04:26:07:
                    0a:6b:f1:63:1a:c1:01:d2:50:1f:c5:d4:de:63:94:
                    48:29:94:22:a9:30:54:ee:f9:5b:d1:bf:89:9a:dc:
                    87:c3:45:2a:d3:23:b7:c6:be:9e:0b:2f:cb:37:7a:
                    41:95:a8:05:6b:58:0e:1a:5d:54:13:01:a5:f7:73:
                    1a:08:3d:29:4f:5e:70:d1:e8:4e:2e:97:b6:15:e9:
                    3e:f9:ab:1d:4d:7f:c3:21:fb:92:a2:92:b8:2d:0d:
                    4b:5e:80:b6:aa:ee:f0:b6:6d:a8:74:2e:a3:77:76:
                    19:dc:cb:29:58:f6:7f:e8:f5:33:cb:e9:05:fe:e8:
                    7a:69:65:50:ba:73:c7:d4:2b:a4:c4:01:ed:35:7d:
                    14:35:25:94:60:48:19:c0:8c:1f:3e:ad:70:42:c5:
                    d9:48:b3:e9:09:18:77:e6:25:8e:3e:ac:38:c7:2b:
                    96:43:1f:87:92:1e:a8:33:e0:bd:ec:1c:58:45:5c:
                    fc:9f:ef:76:8e:24:f2:c8:ae:d2:02:86:8a:41:e7:
                    3f:e0:1f:a1:d6:6e:5b:28:51:3e:d2:78:64:84:94:
                    db:2e:bb:a2:a6:d9:4e:1f:b8:22:be:96:81:df:d8:
                    72:9f:6b:4b:1b:78:a3:1d:e7:b2:ee:1b:b3:a7:14:
                    f0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AD:2E:7F:17:6E:FC:BA:62:3F:37:F7:C2:62:05:04:73:69:41:A8
            X509v3 Authority Key Identifier:
                keyid:9D:C0:D8:42:55:CA:9B:27:67:92:46:09:46:C7:25:80:52:8D:04:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6P5BjAidLs1VitV9M3GJ7MkSNcnsoPaUZf8kNm8kVdLx/0/9DC0D84255CA9B276792460946C72580528D040A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DC0D84255CA9B276792460946C72580528D040A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6P5BjAidLs1VitV9M3GJ7MkSNcnsoPaUZf8kNm8kVdLx/0/323830343a336531633a3a2f33322d313238203d3e20323636353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:67:7e:d1:c6:2e:49:74:b9:a6:77:4b:8d:2b:ca:2d:a7:ab:
         6b:e9:a1:c5:0b:a6:a4:16:b0:32:c9:12:8d:3e:65:dd:4f:09:
         c3:24:44:de:db:04:99:63:b4:1c:61:e6:44:1a:f8:da:78:c0:
         f8:7b:f5:ca:b7:e8:87:95:e1:66:d9:59:b0:e0:ff:89:b0:e3:
         ed:63:52:a2:1c:f2:55:20:a7:ba:6a:43:75:5d:a8:64:d1:08:
         d5:52:e2:17:13:10:f0:36:a8:78:0a:15:0d:82:30:1b:bd:d1:
         01:77:fb:32:81:1c:1a:38:e2:ec:aa:09:2e:81:cf:d4:60:71:
         b7:ea:6a:ce:ef:88:d6:21:d2:e5:dc:b2:18:32:91:f4:42:af:
         c4:19:16:61:b5:b0:3f:85:2a:51:d1:24:3c:b8:85:ea:dc:bc:
         d4:85:3b:ca:81:ca:a0:37:fc:2e:56:3a:63:3f:83:c4:3e:38:
         36:29:63:2d:d2:21:12:ed:51:3f:e2:0f:12:04:0e:3d:69:24:
         b9:9d:32:af:16:f2:d1:64:dd:e1:7f:26:3d:6f:1e:9c:0c:40:
         4e:54:bb:71:c1:91:76:08:82:44:4a:65:91:98:74:9c:2a:2a:
         ae:75:10:d1:77:7f:47:0f:52:f4:03:e6:60:d1:98:c9:b4:2c:
         e9:12:03:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:24:24 2026 by rpki-client