Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/323830343a3533343a323030303a3a2f34302d3430203d3e203232313737.roa
File:                     323830343a3533343a323030303a3a2f34302d3430203d3e203232313737.roa (raw, json)
Hash identifier:          XjooNNlSQgiglmY+X6ccfMzWiktFEZW1v3jPWi0KwT4=
Subject key identifier:   B7:18:39:B4:5D:41:20:F0:32:E8:0B:55:03:09:8C:5D:8D:A7:03:0A
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       68543601614F3E40AA25152C96FDA8F00FE629DD
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/323830343a3533343a323030303a3a2f34302d3430203d3e203232313737.roa
Signing time:             Tue 24 Feb 2026 14:34:42 +0000
ROA not before:           Tue 24 Feb 2026 14:29:42 +0000
ROA not after:            Tue 23 Feb 2027 14:34:42 +0000
asID:                     22177
IP address blocks:        2804:534:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 14:24:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:54:36:01:61:4f:3e:40:aa:25:15:2c:96:fd:a8:f0:0f:e6:29:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Feb 24 14:29:42 2026 GMT
            Not After : Feb 23 14:34:42 2027 GMT
        Subject: CN=B71839B45D4120F032E80B5503098C5D8DA7030A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:76:33:b2:cf:f2:50:32:00:df:bd:c7:f5:c2:
                    6d:2b:0f:22:6b:9d:87:e9:98:89:1c:0b:bb:34:48:
                    e3:5f:ba:0e:fa:51:c8:10:97:44:d4:7d:de:f6:54:
                    1f:bc:1e:98:bb:bc:b4:6e:6e:31:28:14:28:05:ca:
                    a6:7e:69:38:06:6f:b4:04:64:8e:d3:3c:fa:bd:f0:
                    93:d0:db:c4:fd:f6:ec:78:a7:0e:ea:b0:a8:c6:54:
                    cf:70:df:55:af:b6:fc:1d:0a:fc:01:61:6e:0c:3f:
                    52:d7:8f:0d:96:c1:4d:f8:f8:f8:94:88:8d:da:0d:
                    d1:a9:01:9b:3c:56:ce:61:4f:b4:32:9a:e8:f1:9e:
                    b2:9e:74:97:84:9a:df:00:ac:98:d1:75:9b:c0:4a:
                    44:37:31:da:3c:ea:3f:d2:24:0a:8f:fa:3e:98:de:
                    58:53:24:ec:bc:e6:79:17:5a:eb:ba:88:67:aa:66:
                    cf:66:d7:cd:51:82:97:3e:63:44:fb:c1:68:82:7f:
                    24:9f:b4:dc:54:e2:7c:cb:64:4a:0b:82:86:d4:98:
                    77:01:bb:3b:7c:81:29:ab:56:09:d1:69:05:f3:bd:
                    41:ef:0a:21:3c:1d:77:da:10:2a:45:25:92:26:ae:
                    59:d7:1b:34:a7:ca:18:23:80:f0:0b:f5:ca:7e:cc:
                    b1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:18:39:B4:5D:41:20:F0:32:E8:0B:55:03:09:8C:5D:8D:A7:03:0A
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/323830343a3533343a323030303a3a2f34302d3430203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:534:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         99:e4:f7:f0:67:a6:0f:b5:8a:96:61:ed:ea:7a:d8:7c:3e:fe:
         84:dd:8e:8d:6f:48:2f:a5:b5:8f:06:00:14:46:68:61:af:8d:
         80:f5:97:69:1d:91:32:94:b4:74:c4:7d:f1:e7:d6:5e:2b:c8:
         0d:81:a9:72:08:ff:51:f4:14:3f:d7:5b:ca:f8:58:41:29:94:
         b6:cf:ff:a1:64:b1:37:83:db:e1:a2:14:83:e6:e6:ad:c4:dd:
         54:00:40:8b:cf:c3:fa:d2:6f:af:1f:7d:2d:2f:f8:19:23:f5:
         24:7e:20:79:ac:91:20:62:02:16:2e:44:3f:4e:e3:3b:bb:bb:
         97:d3:ff:de:8e:8d:31:35:58:01:32:72:9c:e5:61:3b:26:44:
         4a:07:97:7d:b8:7e:b8:2d:45:7f:8c:66:7c:10:ae:c7:75:55:
         22:cd:b4:b8:52:c1:ef:7c:9d:d8:78:40:67:93:d8:a6:b2:07:
         cc:0c:10:6f:07:7e:00:f7:79:4c:04:c3:6f:85:78:b3:1b:99:
         ae:33:16:65:f3:63:0a:6d:5e:17:ec:d1:1f:98:e4:4b:8f:48:
         31:47:8c:3a:d0:97:db:3a:0c:f6:d0:a9:d5:b0:c2:0f:2b:d6:
         7f:e0:ac:0c:5e:33:e1:e8:12:a3:84:f4:db:3d:27:f9:bc:1d:
         cb:a4:4f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:23:02 2026 by rpki-client