Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/323830343a316462303a3a2f33322d3438203d3e20323634333836.roa
File:                     323830343a316462303a3a2f33322d3438203d3e20323634333836.roa (raw, json)
Hash identifier:          3mYaNta/aHoEzN7Wodt1NzXNQY077d5xab+jB3ud0qk=
Subject key identifier:   DA:10:06:66:9A:A8:F0:FB:58:F5:3F:37:24:09:75:82:52:41:67:56
Certificate issuer:       /CN=CC038C42F33B3D558931769A27D97E3412751117
Certificate serial:       60FAAF704B5581764ED607EB650DF358C12796DB
Authority key identifier: CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/323830343a316462303a3a2f33322d3438203d3e20323634333836.roa
Signing time:             Thu 19 Feb 2026 19:48:08 +0000
ROA not before:           Thu 19 Feb 2026 19:43:08 +0000
ROA not after:            Thu 18 Feb 2027 19:48:08 +0000
asID:                     264386
IP address blocks:        2804:1db0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.crl
                          rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 10:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fa:af:70:4b:55:81:76:4e:d6:07:eb:65:0d:f3:58:c1:27:96:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC038C42F33B3D558931769A27D97E3412751117
        Validity
            Not Before: Feb 19 19:43:08 2026 GMT
            Not After : Feb 18 19:48:08 2027 GMT
        Subject: CN=DA1006669AA8F0FB58F53F372409758252416756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:13:99:73:f9:4a:1a:77:9c:c5:c6:a0:40:17:
                    c9:11:21:b5:01:e7:bd:22:00:d0:c9:c1:b6:c6:b9:
                    2d:c5:5f:17:f8:5b:4c:6d:b0:8a:9d:de:e4:c1:92:
                    04:db:90:5a:c6:0a:4d:fc:85:d8:33:c1:57:4d:d9:
                    2a:b7:bf:b6:d0:c5:63:cd:64:e4:3a:2a:f2:01:67:
                    23:b4:ce:70:08:00:6f:e5:e8:64:a3:18:9c:80:c9:
                    10:5f:24:c7:0d:11:6d:18:49:ff:30:50:f1:de:70:
                    a6:71:cb:71:55:f3:88:79:8f:b3:01:d4:12:80:e2:
                    42:69:30:0f:25:80:53:b1:62:ea:08:da:22:4c:d5:
                    e9:d7:4c:b3:c1:85:62:af:d9:6a:77:e8:46:e3:5a:
                    97:8a:a4:3c:1f:d2:e5:40:5e:2b:67:21:03:f1:b9:
                    a5:a4:c4:1c:08:76:c4:d6:45:9e:99:3a:04:d4:1c:
                    10:2c:8c:f0:7a:d7:4b:cf:bc:5e:3a:a3:7a:dd:93:
                    1e:ce:91:55:7c:59:8c:35:b8:7e:78:01:eb:51:8a:
                    9d:e8:eb:0a:a6:64:69:e7:5f:3e:04:20:c6:35:37:
                    7e:91:87:20:be:28:86:11:9d:cc:25:78:49:9b:6a:
                    ff:14:6f:51:02:eb:df:be:2a:b5:3e:66:cf:c8:86:
                    34:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:10:06:66:9A:A8:F0:FB:58:F5:3F:37:24:09:75:82:52:41:67:56
            X509v3 Authority Key Identifier:
                keyid:CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/323830343a316462303a3a2f33322d3438203d3e20323634333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1db0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:3d:65:c4:d4:ab:df:91:e9:f3:f3:4d:cd:e5:8b:7f:40:7e:
         41:0f:db:70:ba:44:38:33:d7:71:cb:48:8f:89:17:e8:f5:5b:
         71:48:3c:3b:1f:91:11:36:aa:dc:80:a8:38:7c:3a:a5:38:6b:
         7a:79:1e:50:a7:09:27:30:bc:23:0a:db:52:a1:0c:c8:47:af:
         fb:67:ad:26:1c:b4:3a:14:8a:9c:a3:fc:63:11:91:33:ff:cb:
         ec:e8:c2:fb:d9:78:6e:79:72:77:4b:3d:23:ea:bc:6e:ed:9c:
         bb:f5:69:6c:57:d0:e3:9a:19:e0:e5:24:40:9f:2c:38:84:92:
         f8:9e:b8:51:fa:ec:80:9a:34:ab:d2:13:c4:83:19:e5:9b:35:
         28:b6:bb:41:c1:8c:fe:d1:67:7e:09:6a:b0:2c:65:91:23:4a:
         9a:c7:ee:55:f2:10:08:da:76:1b:c5:1f:37:63:66:68:63:ce:
         01:03:78:cc:56:70:81:de:9b:7c:f5:3b:34:cb:9d:8f:5e:e0:
         e5:ad:c9:fb:2a:2b:6f:05:83:39:47:77:3d:f9:d4:c7:ef:ca:
         fe:18:a3:25:ee:b0:3c:03:65:39:d1:f9:99:b3:3c:cc:ba:e5:
         1b:5d:33:f2:bb:18:83:68:fc:45:3d:90:88:cd:3d:08:2f:72:
         f8:e6:f7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:01:45 2026 by rpki-client