Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/323830343a376633343a633130303a3a2f34302d3430203d3e203635303031.roa
File:                     323830343a376633343a633130303a3a2f34302d3430203d3e203635303031.roa (raw, json)
Hash identifier:          BQfpz/o7r/DPbUHgN+mB8rcJx85SaweshGbpfL/ujRo=
Subject key identifier:   14:DE:FB:E4:A0:41:38:D6:23:14:3E:60:08:89:20:07:53:3A:68:DF
Certificate issuer:       /CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
Certificate serial:       3E7F09354622C6E6F2F65162997BDB469E2D1ED7
Authority key identifier: DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/323830343a376633343a633130303a3a2f34302d3430203d3e203635303031.roa
Signing time:             Sat 21 Feb 2026 00:04:27 +0000
ROA not before:           Fri 20 Feb 2026 23:59:27 +0000
ROA not after:            Sat 20 Feb 2027 00:04:27 +0000
asID:                     65001
IP address blocks:        2804:7f34:c100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.crl
                          rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 13:51:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7f:09:35:46:22:c6:e6:f2:f6:51:62:99:7b:db:46:9e:2d:1e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
        Validity
            Not Before: Feb 20 23:59:27 2026 GMT
            Not After : Feb 20 00:04:27 2027 GMT
        Subject: CN=14DEFBE4A04138D623143E6008892007533A68DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f6:2d:a8:08:f6:a3:3b:8c:12:09:2b:77:10:
                    23:fa:f6:ab:91:37:3c:b8:09:d3:c4:c3:df:c7:af:
                    6d:ac:87:7a:4d:99:58:58:8c:bb:94:4a:69:bb:2c:
                    90:8c:af:f6:07:92:e0:e6:f5:85:61:7c:71:86:02:
                    bf:64:89:84:64:53:06:a0:89:8b:34:d8:1c:09:3e:
                    db:16:60:b1:e9:c6:18:78:2f:17:45:dd:1f:f0:8c:
                    7c:a6:96:3d:69:48:19:a0:a4:8e:c5:e1:38:48:34:
                    52:37:1a:4a:f7:cb:8f:08:94:5d:0f:2b:a9:7e:fb:
                    c0:11:4f:0f:5b:1e:7c:f3:04:d7:48:68:2e:be:c2:
                    a9:3d:cf:74:e3:49:2b:66:15:66:1a:5a:0c:a7:58:
                    86:5b:1b:16:f0:4f:35:e6:8a:f9:58:a0:71:77:c2:
                    f8:92:b3:71:6f:17:4b:81:b1:d7:30:db:b0:6e:0e:
                    28:71:51:4e:f3:38:5d:9c:22:15:54:d1:20:1d:fc:
                    c5:e9:ea:70:81:df:a8:53:60:62:5d:91:1c:ce:ed:
                    34:aa:38:f0:ae:aa:bd:22:41:5f:5a:8a:ba:8f:b5:
                    af:3a:0f:94:70:69:ed:04:77:c7:ed:33:e9:5c:19:
                    0f:53:47:6a:67:3e:2c:da:90:d6:08:3f:88:4f:00:
                    66:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DE:FB:E4:A0:41:38:D6:23:14:3E:60:08:89:20:07:53:3A:68:DF
            X509v3 Authority Key Identifier:
                keyid:DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/323830343a376633343a633130303a3a2f34302d3430203d3e203635303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f34:c100::/40

    Signature Algorithm: sha256WithRSAEncryption
         c3:e5:42:94:8c:16:82:2d:14:a1:fe:87:0e:ba:d4:82:f9:b9:
         dc:6e:da:c8:95:92:8b:11:dc:04:45:f9:d8:fb:b3:4a:f7:12:
         82:13:28:1b:8c:84:10:18:48:87:73:a0:3b:48:4a:db:d6:11:
         76:5a:ce:e7:46:ed:f6:1f:1c:a0:70:94:5e:e6:2e:0b:b8:9f:
         90:9f:02:61:7a:bd:47:fc:cd:36:8b:f1:ca:25:7d:20:2d:a0:
         85:3b:4e:03:8e:20:c2:9f:50:83:f4:ff:e5:f9:c9:fc:31:b6:
         b7:e7:46:b7:19:c7:64:6b:22:c6:20:82:11:94:63:6e:1e:37:
         13:47:af:85:db:00:8a:e8:40:da:4d:55:11:e5:bb:4f:d4:ed:
         8f:5f:78:0e:03:53:b7:74:61:f0:60:9c:06:0c:dc:d3:ad:1e:
         93:a5:50:99:21:0c:bc:1a:7e:26:e0:9e:f7:00:a7:44:39:f5:
         e3:26:65:0d:86:5e:14:28:62:31:e8:db:4a:46:ec:dd:dd:fd:
         49:3d:7f:87:40:6c:8f:69:6f:f8:9b:9f:6f:b7:f1:20:07:02:
         3b:93:f5:8a:5c:b0:1b:a0:c4:27:bc:94:57:89:d7:ab:bf:28:
         ed:29:e7:49:56:c6:ff:f6:0f:b0:e5:36:50:87:20:d9:a6:6c:
         db:6b:fe:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:50:41 2026 by rpki-client