Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a633030303a3a2f33342d3334203d3e20323732353031.roa
File:                     323830343a383232343a633030303a3a2f33342d3334203d3e20323732353031.roa (raw, json)
Hash identifier:          lvS+PpChyK+GSXbzlI+LlQ5M3M6sJTIQRlOSnaqvVlk=
Subject key identifier:   07:AA:74:13:AF:A1:01:6B:15:08:70:29:BE:D1:51:61:51:7D:DE:90
Certificate issuer:       /CN=E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF
Certificate serial:       01607505116C319D2F5B009E6DF935D5749DB14F
Authority key identifier: E5:9C:BB:F1:8F:C7:A7:9D:C8:32:8B:AD:E1:6A:C7:12:C9:9C:FF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a633030303a3a2f33342d3334203d3e20323732353031.roa
Signing time:             Tue 24 Feb 2026 23:20:57 +0000
ROA not before:           Tue 24 Feb 2026 23:15:57 +0000
ROA not after:            Tue 23 Feb 2027 23:20:57 +0000
asID:                     272501
IP address blocks:        2804:8224:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.crl
                          rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 14:39:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:60:75:05:11:6c:31:9d:2f:5b:00:9e:6d:f9:35:d5:74:9d:b1:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF
        Validity
            Not Before: Feb 24 23:15:57 2026 GMT
            Not After : Feb 23 23:20:57 2027 GMT
        Subject: CN=07AA7413AFA1016B15087029BED15161517DDE90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:42:47:ae:5c:15:5a:6e:f6:09:1f:f2:e3:6b:
                    c5:f0:f8:fc:f5:76:24:92:44:c6:b6:6f:70:64:36:
                    0b:4a:21:9d:14:96:55:fd:5f:d7:ed:be:85:da:95:
                    7a:df:7b:e2:2f:99:0e:40:89:a1:e4:ea:dc:3b:21:
                    9d:78:dd:66:4e:8e:fe:e4:34:7c:02:f7:8c:b4:5b:
                    34:41:fd:ca:3a:d9:7a:98:96:c9:fc:9a:97:4e:9c:
                    63:22:94:75:0d:8a:d3:00:e7:eb:df:fc:cc:82:13:
                    c2:1b:7f:fc:bf:5f:d5:81:6f:03:cf:ed:35:ae:b9:
                    61:04:2a:72:6f:5b:48:c9:49:06:c4:95:f4:86:85:
                    5f:8b:04:67:0b:8b:96:96:e8:88:98:7b:9b:fb:c7:
                    80:d2:75:bf:12:c9:36:45:0c:ed:be:42:fa:a8:d6:
                    b5:a0:6d:9d:76:68:10:ba:19:ec:7e:c5:ed:d9:6a:
                    9b:5e:d3:27:74:fd:16:79:cd:5a:39:36:7a:1b:8d:
                    d5:c2:0e:58:4a:1a:4b:ca:4a:98:26:7f:91:6e:9c:
                    4f:94:95:0d:af:85:c9:77:bc:12:80:df:04:6d:b5:
                    3d:59:de:5a:7f:04:9e:80:19:5f:da:ae:cd:f9:af:
                    0b:09:03:dc:4b:18:4d:32:9e:6d:3a:43:53:f3:45:
                    24:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AA:74:13:AF:A1:01:6B:15:08:70:29:BE:D1:51:61:51:7D:DE:90
            X509v3 Authority Key Identifier:
                keyid:E5:9C:BB:F1:8F:C7:A7:9D:C8:32:8B:AD:E1:6A:C7:12:C9:9C:FF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a633030303a3a2f33342d3334203d3e20323732353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8224:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7e:e9:ec:de:00:bf:e8:21:b9:da:3a:f0:ba:68:ea:25:40:91:
         0c:2f:06:94:5f:ca:d1:49:49:79:2a:a1:1a:3a:a3:8e:e8:ff:
         f0:5f:76:d7:31:ac:58:c3:48:ea:f7:81:b5:59:0a:88:32:b3:
         bf:1f:6e:09:68:8e:c8:02:f4:9d:89:fb:64:8f:e9:82:c8:71:
         01:11:cd:2b:e9:34:3c:9a:c0:c6:ba:b8:72:30:af:48:2d:10:
         c6:16:27:23:5d:26:07:b5:cd:03:44:d8:98:4d:f4:aa:89:ff:
         7c:c4:05:6a:86:72:51:39:c4:66:af:b9:99:92:aa:5a:31:fa:
         f0:4f:5e:5c:be:e7:55:0d:91:d9:30:38:7c:5e:f5:ea:e4:da:
         32:19:3a:17:d9:ca:74:c7:e0:54:00:f0:dc:3b:52:60:1f:09:
         92:92:e1:31:72:69:13:71:9b:ed:9c:8a:36:c9:9c:32:e3:9a:
         3b:99:25:1a:21:42:e2:ed:16:ae:3f:08:ea:01:22:1f:73:2a:
         1e:da:0d:55:e4:1f:42:73:fb:21:af:8d:d9:ac:04:f1:d6:35:
         26:ce:68:6e:b6:22:a0:fe:83:90:4f:82:7c:9d:9a:f4:0a:ca:
         e6:29:af:61:9c:9f:0b:ca:9b:31:86:eb:38:05:e9:0b:2a:5c:
         fd:4a:59:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:59:47 2026 by rpki-client