Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/323830343a373530383a3a2f33332d3333203d3e20323731303139.roa
File:                     323830343a373530383a3a2f33332d3333203d3e20323731303139.roa (raw, json)
Hash identifier:          b93jQA7WGaiFrO9Rcmfe4F09RpDDGosh099miggpERE=
Subject key identifier:   79:56:BE:EC:A6:E8:2B:B2:D1:86:25:57:03:01:01:B5:24:E3:AF:45
Certificate issuer:       /CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
Certificate serial:       7FF0BE515067FDEB5430789A57A094CF2CC07238
Authority key identifier: 6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/323830343a373530383a3a2f33332d3333203d3e20323731303139.roa
Signing time:             Tue 24 Feb 2026 20:37:02 +0000
ROA not before:           Tue 24 Feb 2026 20:32:02 +0000
ROA not after:            Tue 23 Feb 2027 20:37:02 +0000
asID:                     271019
IP address blocks:        2804:7508::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl
                          rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 22:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f0:be:51:50:67:fd:eb:54:30:78:9a:57:a0:94:cf:2c:c0:72:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
        Validity
            Not Before: Feb 24 20:32:02 2026 GMT
            Not After : Feb 23 20:37:02 2027 GMT
        Subject: CN=7956BEECA6E82BB2D1862557030101B524E3AF45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cc:4c:7d:94:64:25:d0:3a:4a:a5:a3:ae:51:
                    bc:5a:d9:d5:8a:de:e1:53:07:e5:9d:9a:27:d6:e9:
                    35:4c:90:18:3a:cb:05:09:2d:1d:e8:3f:d4:64:c7:
                    e9:ae:69:7c:f4:55:ba:41:72:21:14:d4:8b:c7:ac:
                    66:e6:c7:69:eb:c0:90:29:e3:c4:75:cc:3a:9c:d1:
                    6f:b0:1f:88:0c:8d:c0:8b:8b:e4:8e:1e:88:91:4c:
                    a7:43:4b:fd:23:16:b7:f9:ac:d3:02:3e:28:39:a3:
                    60:9c:b8:b4:18:45:34:80:72:6e:fd:fa:3b:e1:e3:
                    54:9a:ee:fc:b4:18:00:ae:e8:50:59:19:b1:14:07:
                    f5:ca:dd:69:d5:f5:24:09:f3:e7:7c:67:7d:34:e7:
                    d3:53:19:c8:33:01:bc:2d:8e:84:b3:ab:77:94:85:
                    17:13:12:a8:3e:67:fa:c9:dd:61:f6:2f:f9:75:59:
                    0d:e5:74:5c:a0:fe:11:28:b4:00:d5:1d:37:55:23:
                    50:5f:6b:0c:d4:c2:82:ed:a6:09:c5:b6:46:9d:c6:
                    f5:be:a8:52:25:2f:10:1d:f9:da:51:8a:d0:e6:1b:
                    0a:ca:bc:53:ce:06:4c:42:a7:30:20:4d:ed:bd:0a:
                    18:ca:b3:8c:54:db:00:d3:d4:14:09:e4:34:d2:c9:
                    f2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:56:BE:EC:A6:E8:2B:B2:D1:86:25:57:03:01:01:B5:24:E3:AF:45
            X509v3 Authority Key Identifier:
                keyid:6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/323830343a373530383a3a2f33332d3333203d3e20323731303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7508::/33

    Signature Algorithm: sha256WithRSAEncryption
         48:d7:3c:d9:3b:da:09:9d:2e:41:3f:d9:8e:b3:98:38:d4:f8:
         f3:3d:c5:3f:ef:f3:fb:e9:74:9f:b8:6e:14:88:47:4d:a7:53:
         6e:51:27:b3:eb:39:fb:97:2e:ab:ad:30:38:e5:bf:6e:8f:f8:
         ec:5f:3f:b1:fd:bf:5b:a7:5d:71:09:5a:73:6b:b6:04:95:b4:
         ba:bb:cd:cb:34:3d:96:b6:83:d8:6a:5c:2c:23:77:94:a8:84:
         b9:35:33:52:86:fb:d6:63:bd:21:71:fc:da:0b:83:55:8b:52:
         8e:b8:1c:0f:6c:d8:fa:28:33:67:12:d1:59:51:36:7a:4e:c5:
         51:25:49:af:fa:c0:64:6a:40:12:de:2b:45:cd:a1:21:83:ce:
         3c:59:f8:c2:b1:03:ee:ce:31:6c:9d:11:40:76:c6:db:c5:c4:
         a9:9e:1a:4c:90:7d:e6:3e:b3:94:7c:af:16:0d:95:28:35:ef:
         35:11:3c:ec:0f:fb:ad:26:1e:5d:52:9d:97:61:a0:a2:ef:11:
         45:de:b8:4d:4e:b3:9f:1e:50:bd:2e:6a:41:d4:8e:bd:80:e0:
         93:72:69:42:cf:d2:4a:45:4e:73:2d:31:da:fb:ab:9c:e9:44:
         2a:c7:f5:f3:13:f0:e6:a4:3e:fe:73:f2:85:4a:40:49:4d:6b:
         10:28:2e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:44:22 2026 by rpki-client