Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/323830343a386636633a3a2f33322d3332203d3e20323733343930.roa
File:                     323830343a386636633a3a2f33322d3332203d3e20323733343930.roa (raw, json)
Hash identifier:          XcKUifLa/j6cf3gZsDxmB8VK6DriocasVQbqyBDbg7k=
Subject key identifier:   F3:A2:EE:DA:98:14:A4:5A:7E:43:81:E4:26:9D:62:05:01:15:C3:EB
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       6D56B2E4036C2C7E995262D10836AD06ACFF7D11
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/323830343a386636633a3a2f33322d3332203d3e20323733343930.roa
Signing time:             Fri 20 Feb 2026 12:32:55 +0000
ROA not before:           Fri 20 Feb 2026 12:27:55 +0000
ROA not after:            Fri 19 Feb 2027 12:32:55 +0000
asID:                     273490
IP address blocks:        2804:8f6c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 09:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:56:b2:e4:03:6c:2c:7e:99:52:62:d1:08:36:ad:06:ac:ff:7d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Feb 20 12:27:55 2026 GMT
            Not After : Feb 19 12:32:55 2027 GMT
        Subject: CN=F3A2EEDA9814A45A7E4381E4269D62050115C3EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1b:0b:87:5d:b5:d0:53:ae:d7:6a:1c:59:c5:
                    55:03:a7:f0:54:9d:39:40:96:45:f7:1b:4e:05:fd:
                    6a:42:56:72:4b:5d:f0:8d:65:6d:68:d5:55:79:f6:
                    0a:e5:5e:9f:45:5f:ce:89:0a:b2:b3:47:c3:9c:62:
                    c5:69:de:30:fb:72:2c:1a:e4:98:59:79:fd:90:c9:
                    55:3f:56:81:0c:fc:fd:9b:e1:73:87:ff:df:90:fd:
                    95:e9:8c:81:ad:1a:8d:50:a0:76:66:ba:53:43:63:
                    c2:c5:ad:ec:ae:60:78:07:1c:30:5f:ae:86:99:86:
                    94:84:88:58:cb:db:9f:4a:11:ae:8a:71:ea:23:74:
                    7e:10:26:1a:3f:10:0e:bd:c3:97:32:dd:47:35:d0:
                    9e:8f:b3:7f:50:a7:45:cb:0d:8e:88:da:3e:1c:ee:
                    1c:3e:44:88:6e:a6:05:2d:a9:17:e8:c1:0b:cf:3c:
                    d0:1f:ec:51:a7:26:0f:6d:4c:65:eb:bb:93:2f:65:
                    df:2c:70:26:45:f3:08:fd:34:7d:37:3e:18:0e:cd:
                    cc:95:b5:fa:45:a2:f1:9d:15:58:f4:9b:b7:5a:4a:
                    12:b8:67:2f:1a:4a:3e:09:f1:d2:91:8a:b8:6a:ff:
                    e2:0e:d1:89:ea:dc:2b:76:c5:01:d3:63:0a:a3:2a:
                    57:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A2:EE:DA:98:14:A4:5A:7E:43:81:E4:26:9D:62:05:01:15:C3:EB
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/323830343a386636633a3a2f33322d3332203d3e20323733343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:23:3b:5d:6c:7c:14:8a:98:8c:c5:5c:3c:40:98:cd:97:93:
         7d:18:3d:fb:af:53:a2:3c:62:08:7a:d0:91:87:f4:55:2f:88:
         c6:6e:72:e4:88:3d:f8:3d:ea:de:1f:c6:14:92:3a:8a:b4:21:
         46:ef:bc:22:c2:00:05:1d:a9:c3:0f:10:ac:c5:84:30:ae:62:
         33:25:62:76:b8:ad:de:9c:e2:78:ed:75:38:0a:1b:04:a7:09:
         63:77:3b:9f:eb:13:18:54:41:ec:cd:4c:e9:6c:74:c4:e1:d0:
         f4:b6:25:48:33:e4:8c:bd:6d:31:25:48:71:8b:cd:3b:5e:11:
         ec:54:f4:8c:35:8b:c3:3e:e4:e7:40:25:4a:21:af:84:78:7e:
         aa:01:6b:ba:7b:cc:a0:fa:44:a5:1a:6a:d5:4f:d5:66:55:1a:
         0a:42:e3:53:d4:0f:24:1f:5f:65:94:ab:32:01:38:9f:be:73:
         6b:01:aa:4a:b5:f6:2f:56:45:26:66:67:d8:77:3b:a7:0d:5b:
         b7:ae:d3:e3:13:93:83:1a:cd:23:2d:33:25:b2:6f:72:67:cd:
         7a:10:b3:93:84:ac:22:66:8c:79:cb:46:ea:1e:93:f9:24:7b:
         d7:2c:27:a4:94:d0:ba:7b:2b:5e:17:03:77:4b:2f:2b:b6:c3:
         58:22:22:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:52:25 2026 by rpki-client