Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/323830343a376338303a3a2f33322d3332203d3e20323731353030.roa
File:                     323830343a376338303a3a2f33322d3332203d3e20323731353030.roa (raw, json)
Hash identifier:          wjTDSLuw3BqNgPK5xBLgm1ajJFIcVspLYhK5Xxk1Bgs=
Subject key identifier:   F7:57:46:2A:B3:DE:B0:54:16:5A:B9:0D:0C:22:E3:9F:26:A2:46:21
Certificate issuer:       /CN=7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7
Certificate serial:       2A8E2E0D5EB15757DB814701DFFF994BCB0DD3A0
Authority key identifier: 72:50:E2:7A:73:2B:D8:2B:F0:BE:AE:DA:E0:F0:9A:FC:45:29:2E:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/323830343a376338303a3a2f33322d3332203d3e20323731353030.roa
Signing time:             Tue 24 Feb 2026 23:22:34 +0000
ROA not before:           Tue 24 Feb 2026 23:17:34 +0000
ROA not after:            Tue 23 Feb 2027 23:22:34 +0000
asID:                     271500
IP address blocks:        2804:7c80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7.crl
                          rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 16:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:8e:2e:0d:5e:b1:57:57:db:81:47:01:df:ff:99:4b:cb:0d:d3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7
        Validity
            Not Before: Feb 24 23:17:34 2026 GMT
            Not After : Feb 23 23:22:34 2027 GMT
        Subject: CN=F757462AB3DEB054165AB90D0C22E39F26A24621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:43:45:5c:83:9d:b9:99:4c:a5:92:32:d0:
                    3a:50:cb:8e:25:23:9a:0c:52:48:3e:95:79:64:d4:
                    d3:cb:2c:ba:df:c6:e1:3a:53:4d:cf:6c:7e:3d:41:
                    a0:6d:dd:00:8d:0f:f7:22:e6:e8:50:ef:76:c4:36:
                    49:54:d8:66:50:3e:58:96:88:63:d1:f2:08:f6:b1:
                    a0:54:53:b8:43:98:4c:4d:de:c1:af:6d:8f:67:c1:
                    23:1b:08:5b:72:8d:ff:11:3f:a8:ec:04:66:c8:68:
                    61:1f:d0:59:3f:d1:80:75:90:e2:00:90:fb:a4:40:
                    50:b5:cf:47:85:0e:45:48:a1:07:f2:f9:d6:82:73:
                    63:3f:17:b1:ea:f6:31:3a:08:a0:16:49:cd:7d:1f:
                    80:0c:35:1b:a7:d1:cb:16:e1:d1:8e:ee:32:cf:dd:
                    88:47:a2:2f:47:27:74:12:7c:ce:83:ed:86:d5:72:
                    35:cc:28:c4:56:a9:df:1b:c3:44:a3:52:0a:01:32:
                    59:f8:57:b3:e6:74:b8:38:61:40:3b:3e:e4:85:23:
                    82:74:2b:6a:ee:d3:19:d9:62:65:74:84:b9:9b:e6:
                    0b:24:ec:9d:a1:83:d3:c5:c6:bb:94:f3:c8:c7:68:
                    84:87:4b:13:b0:9f:f0:cc:27:f0:e8:b5:28:4a:c1:
                    40:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:57:46:2A:B3:DE:B0:54:16:5A:B9:0D:0C:22:E3:9F:26:A2:46:21
            X509v3 Authority Key Identifier:
                keyid:72:50:E2:7A:73:2B:D8:2B:F0:BE:AE:DA:E0:F0:9A:FC:45:29:2E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/323830343a376338303a3a2f33322d3332203d3e20323731353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:2a:28:5d:f4:49:e2:12:bc:ab:08:37:c7:b1:c0:aa:69:99:
         df:77:3d:3c:36:03:b0:c0:d3:d2:94:67:e8:a0:55:2c:52:c1:
         b7:8f:27:95:23:2a:8b:e4:89:69:87:e6:b2:ca:ab:2d:69:b9:
         36:b0:c2:d5:18:52:78:fc:e0:66:36:29:7d:69:ad:18:7e:70:
         13:5d:4c:2f:9f:86:97:71:ae:d0:b8:c3:80:83:a3:fa:61:21:
         a7:34:88:03:06:5b:a5:52:67:8e:67:29:0e:08:2a:08:2c:8c:
         b6:13:3a:f2:68:20:d1:02:a2:fa:c9:02:64:ca:27:39:25:c2:
         00:33:5f:41:43:18:e4:4f:e7:b9:8d:78:dc:b7:95:6b:7e:64:
         70:ab:af:74:a2:6f:55:c5:7c:00:c4:96:2d:12:1c:d8:d5:e7:
         51:3c:c8:19:f2:96:76:84:4e:30:7e:2c:12:73:0f:92:87:eb:
         2d:a9:83:d3:2f:f3:14:ab:f9:6f:b1:ce:0b:d1:35:84:e6:3c:
         b9:0f:f1:75:90:49:df:86:e5:a2:4b:c1:f6:f4:9d:d5:3e:50:
         c5:d1:3d:55:5b:ed:33:dc:99:91:9f:c1:fb:5e:7d:b3:40:68:
         b2:96:70:07:6c:6a:14:8a:1a:76:6c:e8:ab:7a:54:aa:74:48:
         62:18:15:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:18:49 2026 by rpki-client