Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/323830343a373530383a383030303a3a2f33332d3333203d3e20323731303139.roa
File:                     323830343a373530383a383030303a3a2f33332d3333203d3e20323731303139.roa (raw, json)
Hash identifier:          SPh+1ahVzWbgY2/pveqmlNU+2d4PHM2Trqfm75RurZ0=
Subject key identifier:   4D:99:2E:88:CE:92:51:4B:6A:25:B0:8C:85:4A:F0:BC:3C:93:E2:A9
Certificate issuer:       /CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
Certificate serial:       4A463DDC6575F1D25BED4ED313AE2D004713E4CD
Authority key identifier: 6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/323830343a373530383a383030303a3a2f33332d3333203d3e20323731303139.roa
Signing time:             Tue 24 Feb 2026 20:37:02 +0000
ROA not before:           Tue 24 Feb 2026 20:32:02 +0000
ROA not after:            Tue 23 Feb 2027 20:37:02 +0000
asID:                     271019
IP address blocks:        2804:7508:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl
                          rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 22:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:46:3d:dc:65:75:f1:d2:5b:ed:4e:d3:13:ae:2d:00:47:13:e4:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
        Validity
            Not Before: Feb 24 20:32:02 2026 GMT
            Not After : Feb 23 20:37:02 2027 GMT
        Subject: CN=4D992E88CE92514B6A25B08C854AF0BC3C93E2A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:61:51:48:dd:1e:8e:26:7b:74:a2:22:c3:c6:
                    e2:35:08:77:84:75:27:36:8f:1c:3d:0d:e5:20:0e:
                    4a:05:24:a4:6f:ea:ad:53:df:df:b2:11:3f:f6:3c:
                    3d:27:47:d1:16:8e:a2:70:fa:f8:b5:2e:00:38:44:
                    a5:96:dd:00:e2:2a:2a:c4:6a:01:94:4a:13:35:7e:
                    d4:0a:c7:93:47:d8:3d:04:af:e9:8f:2a:4f:05:1e:
                    40:3d:f0:03:5b:56:2a:9e:de:3f:16:bc:de:52:49:
                    c1:fe:1c:4c:33:71:e4:51:a1:a7:8b:60:5f:85:99:
                    cb:7c:36:b1:e6:9e:0c:ce:5b:5e:1e:22:0e:c9:13:
                    df:b3:76:de:90:fa:10:22:3b:81:4b:43:c5:b9:67:
                    7e:a1:19:31:bb:4b:5d:e8:75:18:8b:38:5d:00:55:
                    5e:c6:96:02:68:36:78:66:88:21:72:cf:02:5c:66:
                    d9:6a:85:5a:f1:20:9e:c2:5d:bb:2e:f9:82:12:7b:
                    d5:19:9f:20:5d:4b:18:d6:3e:75:3d:96:5b:75:07:
                    5d:87:32:d3:b6:c6:10:85:fc:ef:79:c7:9c:9f:8b:
                    70:12:5f:da:c8:69:da:4b:e1:c6:86:76:e1:85:ae:
                    ac:00:e1:cf:aa:c3:7c:cc:31:fe:56:da:8f:3d:7a:
                    f4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:99:2E:88:CE:92:51:4B:6A:25:B0:8C:85:4A:F0:BC:3C:93:E2:A9
            X509v3 Authority Key Identifier:
                keyid:6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/323830343a373530383a383030303a3a2f33332d3333203d3e20323731303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7508:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         7e:29:09:da:b1:c7:0d:30:f4:ad:fd:1b:f6:e1:90:29:2b:c4:
         16:39:e0:6f:7a:37:ae:d7:64:46:ff:0a:60:9a:d9:6f:0c:10:
         65:0a:30:75:ef:72:8d:ca:31:29:30:b3:1c:12:ff:3e:65:6b:
         a2:af:2e:53:ce:fa:5e:2c:6f:fd:25:b8:27:30:c1:28:a8:89:
         0f:4a:90:34:a0:49:b9:54:2d:83:c8:68:f3:3a:f0:ab:12:48:
         ec:3c:e6:0b:d9:04:56:da:54:da:ca:ae:71:01:28:04:9e:b1:
         00:5c:9a:0d:b9:0c:fb:25:2d:d5:b4:0b:2e:8a:8a:f0:35:30:
         08:b4:d0:63:54:b4:46:43:f7:9a:ab:6e:53:86:39:d4:09:9f:
         93:92:8a:f0:8a:b5:af:94:8f:fe:70:68:0b:b9:76:d9:0c:c5:
         98:0e:49:d4:a2:dc:9a:70:44:86:e4:18:df:34:95:50:95:6a:
         5d:1d:7d:13:6e:29:f3:bc:f7:94:38:be:45:90:c7:25:af:4b:
         67:b9:82:92:36:cf:8c:87:4e:9f:ff:cb:89:eb:b4:22:8a:f7:
         c9:e6:8e:d6:22:db:d5:8b:d6:f0:93:87:6d:eb:70:fd:71:9a:
         dc:d4:5b:b0:97:d9:43:1f:7b:08:d0:03:94:35:9b:b4:ea:83:
         97:ef:7f:15
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUSkY93GV18dJb7U7TE64tAEcT5M0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkUwRTZBMzk3MjQ3RDQ5NkUzOUMwQTc4REZCMUU1MUE3
MURCQUFCNTAeFw0yNjAyMjQyMDMyMDJaFw0yNzAyMjMyMDM3MDJaMDMxMTAvBgNV
BAMTKDREOTkyRTg4Q0U5MjUxNEI2QTI1QjA4Qzg1NEFGMEJDM0M5M0UyQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKYVFI3R6OJnt0oiLDxuI1CHeE
dSc2jxw9DeUgDkoFJKRv6q1T39+yET/2PD0nR9EWjqJw+vi1LgA4RKWW3QDiKirE
agGUShM1ftQKx5NH2D0Er+mPKk8FHkA98ANbViqe3j8WvN5SScH+HEwzceRRoaeL
YF+Fmct8NrHmngzOW14eIg7JE9+zdt6Q+hAiO4FLQ8W5Z36hGTG7S13odRiLOF0A
VV7GlgJoNnhmiCFyzwJcZtlqhVrxIJ7CXbsu+YISe9UZnyBdSxjWPnU9llt1B12H
MtO2xhCF/O95x5yfi3ASX9rIadpL4caGduGFrqwA4c+qw3zMMf5W2o89evRzAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUTZkuiM6SUUtqJbCMhUrwvDyT4qkwHwYDVR0j
BBgwFoAUbg5qOXJH1JbjnAp437HlGnHbqrUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1RFdGE5TUFjTE1RWUpDVFJiYjM4Mkx3UXFVbjU3aW9DdG9UcHlxd0di
WjUvMC82RTBFNkEzOTcyNDdENDk2RTM5QzBBNzhERkIxRTUxQTcxREJBQUI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZFMEU2QTM5NzI0N0Q0OTZF
MzlDMEE3OERGQjFFNTFBNzFEQkFBQjUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NURXRhOU1BY0xNUVlKQ1RSYmIzODJMd1FxVW41N2lvQ3RvVHB5cXdHYlo1LzAv
MzIzODMwMzQzYTM3MzUzMDM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMTMwMzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEdQiAMA0GCSqGSIb3DQEBCwUA
A4IBAQB+KQnasccNMPSt/Rv24ZApK8QWOeBvejeu12RG/wpgmtlvDBBlCjB173KN
yjEpMLMcEv8+ZWuiry5TzvpeLG/9JbgnMMEoqIkPSpA0oEm5VC2DyGjzOvCrEkjs
POYL2QRW2lTayq5xASgEnrEAXJoNuQz7JS3VtAsuiorwNTAItNBjVLRGQ/eaq25T
hjnUCZ+TkorwirWvlI/+cGgLuXbZDMWYDknUotyacESG5BjfNJVQlWpdHX0Tbinz
vPeUOL5FkMclr0tnuYKSNs+Mh06f/8uJ67QiivfJ5o7WItvVi9bwk4dt63D9cZrc
1Fuwl9lDH3sI0AOUNZu06oOX738V
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:33:32 2026 by rpki-client