Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/323830343a353939343a3a2f33322d313238203d3e20323638373131.roa
File:                     323830343a353939343a3a2f33322d313238203d3e20323638373131.roa (raw, json)
Hash identifier:          HjDMPuUyJdYTNTv3aEN6uju4kNizUyYBP7/ZhY/OAzU=
Subject key identifier:   A3:26:65:0C:D9:0E:43:6F:66:C9:07:4E:2B:DD:7F:33:D9:7C:22:CB
Certificate issuer:       /CN=C25265AD4C15AD12F33FD243385F457064C66247
Certificate serial:       4B6FCBA33295940DE5E000EC4231A3491D8008C5
Authority key identifier: C2:52:65:AD:4C:15:AD:12:F3:3F:D2:43:38:5F:45:70:64:C6:62:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C25265AD4C15AD12F33FD243385F457064C66247.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/323830343a353939343a3a2f33322d313238203d3e20323638373131.roa
Signing time:             Mon 23 Feb 2026 12:24:49 +0000
ROA not before:           Mon 23 Feb 2026 12:19:49 +0000
ROA not after:            Mon 22 Feb 2027 12:24:49 +0000
asID:                     268711
IP address blocks:        2804:5994::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C25265AD4C15AD12F33FD243385F457064C66247.crl
                          rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C25265AD4C15AD12F33FD243385F457064C66247.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C25265AD4C15AD12F33FD243385F457064C66247.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 12:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6f:cb:a3:32:95:94:0d:e5:e0:00:ec:42:31:a3:49:1d:80:08:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C25265AD4C15AD12F33FD243385F457064C66247
        Validity
            Not Before: Feb 23 12:19:49 2026 GMT
            Not After : Feb 22 12:24:49 2027 GMT
        Subject: CN=A326650CD90E436F66C9074E2BDD7F33D97C22CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2e:40:12:c4:a0:b5:4f:4e:79:9a:62:8b:4f:
                    9d:b7:5c:61:48:b2:19:96:56:98:22:b5:cb:10:c2:
                    ab:8f:af:d8:ef:2c:70:3c:24:3e:81:76:29:1e:65:
                    00:58:46:d4:b2:81:62:ea:e6:6c:15:7f:11:ae:55:
                    ff:b0:b9:c4:03:e7:b4:da:2c:29:b0:46:75:71:a5:
                    6b:2e:64:bc:38:b7:06:2f:b1:a1:40:d9:d6:ca:07:
                    72:85:14:2b:3a:91:dc:be:11:ca:4e:09:db:c9:39:
                    bc:a6:55:18:8b:bf:63:dc:8c:8a:79:42:9c:cb:98:
                    92:51:94:1a:fe:9d:5c:c9:13:da:8f:2a:09:c3:4c:
                    71:9a:49:4b:bc:33:54:6b:1c:5e:ee:c1:e4:dc:f2:
                    63:d2:40:32:db:d1:71:d2:70:9c:6b:a7:9b:d4:72:
                    94:3c:8d:96:e7:7a:01:c5:4f:ca:3d:df:37:39:7b:
                    d7:e6:88:f6:63:32:bb:d9:fb:e8:b5:0f:25:22:f3:
                    e0:eb:35:a7:61:56:6c:52:05:17:8d:bb:8f:40:04:
                    f0:6d:fb:86:1f:fd:99:cb:f6:06:98:16:b5:0a:ac:
                    8a:a2:bf:b2:f6:51:9d:37:e3:33:d3:fd:a4:5a:6a:
                    5e:10:4d:9a:96:4b:95:51:a9:1d:85:89:42:f8:06:
                    f5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:26:65:0C:D9:0E:43:6F:66:C9:07:4E:2B:DD:7F:33:D9:7C:22:CB
            X509v3 Authority Key Identifier:
                keyid:C2:52:65:AD:4C:15:AD:12:F3:3F:D2:43:38:5F:45:70:64:C6:62:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C25265AD4C15AD12F33FD243385F457064C66247.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C25265AD4C15AD12F33FD243385F457064C66247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/323830343a353939343a3a2f33322d313238203d3e20323638373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5994::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:60:83:02:b7:5d:b6:e3:33:be:e5:19:89:3f:10:65:71:62:
         fc:cc:f3:42:4d:5a:35:ca:84:52:8e:0f:07:d3:60:46:1e:f3:
         b3:56:76:1d:3a:91:cc:45:07:02:46:2b:93:c2:7b:65:3e:0b:
         40:95:e2:cf:67:12:03:44:2e:09:74:78:e8:3e:50:2b:ae:6d:
         22:38:57:67:51:be:6f:97:b1:7d:b2:84:7c:29:79:be:c5:74:
         75:9c:b1:57:a7:16:95:8f:ac:03:5f:d1:f7:1a:46:85:9f:55:
         10:42:23:22:8d:a9:ea:72:2c:10:79:27:26:48:29:c6:83:6b:
         e0:fc:cb:c8:b9:c1:9b:22:ac:19:25:ff:0e:4c:7e:8d:7f:75:
         0d:2c:7e:3b:02:77:af:77:c0:a3:29:88:b4:66:7f:44:b6:4c:
         df:62:bd:a3:27:b0:1d:3d:f7:75:30:b1:34:ec:e0:82:bd:e2:
         ab:4f:c7:97:cd:a5:ec:93:3b:1e:b0:15:fe:50:e1:b9:c1:57:
         21:68:6b:b0:26:07:bf:75:9d:ce:92:54:9e:c2:fa:79:41:2d:
         dd:37:3a:c0:25:31:00:37:05:d2:46:f1:d2:4d:4f:c9:49:21:
         a9:65:fc:93:cb:2e:96:15:f9:fc:34:9c:c2:c6:a4:0b:d2:a2:
         b4:26:ee:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:35:34 2026 by rpki-client