Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/323830343a3533343a663030303a3a2f34302d3430203d3e203232313737.roa
File:                     323830343a3533343a663030303a3a2f34302d3430203d3e203232313737.roa (raw, json)
Hash identifier:          09+NUz+9frP/8kdDf1nf1Vcs/0LDihk1Z0P6kBHO1ms=
Subject key identifier:   2A:80:40:5D:DA:25:E6:34:23:8F:F3:25:03:29:67:03:96:03:5B:69
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       2993B635687CE18E7F33E52B0E10B9F5B706B422
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/323830343a3533343a663030303a3a2f34302d3430203d3e203232313737.roa
Signing time:             Tue 24 Feb 2026 14:35:22 +0000
ROA not before:           Tue 24 Feb 2026 14:30:22 +0000
ROA not after:            Tue 23 Feb 2027 14:35:22 +0000
asID:                     22177
IP address blocks:        2804:534:f000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 14:24:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:93:b6:35:68:7c:e1:8e:7f:33:e5:2b:0e:10:b9:f5:b7:06:b4:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Feb 24 14:30:22 2026 GMT
            Not After : Feb 23 14:35:22 2027 GMT
        Subject: CN=2A80405DDA25E634238FF3250329670396035B69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ef:92:b5:5f:31:be:02:40:fe:b4:dd:e0:25:
                    0b:73:47:65:99:15:5b:68:c7:82:d9:a9:f5:69:95:
                    7d:7a:38:1d:b7:38:99:ab:c2:f9:d4:5a:2c:9a:c2:
                    c4:f8:58:2d:0a:21:aa:77:49:3c:66:ee:4e:86:b7:
                    0b:d0:e2:4f:27:52:ca:05:8b:5d:ee:6e:38:5d:f7:
                    29:62:35:e3:79:ab:62:2d:2f:23:7e:96:fa:08:7d:
                    46:df:08:3e:7d:26:a9:88:5d:3c:4a:fb:4b:2e:bf:
                    b4:85:7a:c6:8f:1f:1c:c9:68:c1:dd:a7:3d:27:4b:
                    47:b7:1d:ae:25:11:4f:0e:54:cd:98:39:aa:d9:ff:
                    e8:a0:7d:f9:86:3a:c5:d8:48:7c:bc:1b:56:e0:2c:
                    09:cc:9a:9f:49:a7:ff:8f:ba:cd:f9:f1:e0:df:e1:
                    4b:6b:48:d9:80:02:6e:55:c0:0c:f1:2b:e1:31:1a:
                    bd:a2:11:d1:3c:7a:9e:62:39:29:2c:eb:7b:28:ad:
                    c4:43:2d:1f:fa:e2:35:31:83:6d:87:fb:6e:a3:ba:
                    b8:86:35:d7:09:b1:ed:1b:94:fe:8d:6e:96:ef:ca:
                    22:b2:4e:eb:a0:70:bc:5a:f2:b0:68:55:f1:47:00:
                    3f:3e:d2:4d:f9:d8:60:6e:70:8e:5a:c1:0b:16:86:
                    6c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:80:40:5D:DA:25:E6:34:23:8F:F3:25:03:29:67:03:96:03:5B:69
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/323830343a3533343a663030303a3a2f34302d3430203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:534:f000::/40

    Signature Algorithm: sha256WithRSAEncryption
         60:4e:0e:f7:57:5d:52:cf:31:9c:15:ed:80:fb:6f:f1:0e:25:
         78:e4:98:47:8c:e4:41:ef:dd:1b:e1:55:b5:27:0a:32:45:eb:
         fe:78:b3:23:e4:c5:fe:8b:91:ec:5b:8e:87:96:3f:62:df:a8:
         07:02:20:cc:6e:22:2b:90:71:f2:7e:cd:7f:8a:1c:7e:39:d9:
         aa:74:09:e9:0c:c3:1e:c1:67:dd:81:44:95:b2:8c:4d:5b:ff:
         b6:bf:57:c1:3c:56:de:d8:f0:13:4c:4b:ce:f0:99:59:4c:37:
         e9:d0:45:94:c7:cd:af:cc:56:b1:f0:1c:67:77:78:22:4c:4e:
         3a:58:07:83:b3:b1:ad:39:c8:5f:a3:84:23:5d:ac:48:cf:b4:
         71:e5:cb:e9:aa:f9:1a:3e:eb:06:b5:0e:2c:24:e5:1d:27:87:
         25:14:38:fe:c9:e1:cb:a7:11:75:72:c9:21:40:58:a8:ce:15:
         5b:76:bd:9c:b2:b3:0b:7c:f0:62:90:64:61:44:e8:a9:9e:2f:
         5d:63:d9:1c:51:05:ff:32:4d:3e:90:0a:73:56:0b:59:29:03:
         cc:29:03:6c:57:59:ba:fe:49:85:eb:75:f6:54:a8:95:27:3a:
         91:24:df:9f:77:81:72:5b:68:3b:7a:2c:30:cb:ff:ef:6b:df:
         a0:09:28:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:23:01 2026 by rpki-client