Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a383030303a3a2f33332d313238203d3e20323633393830.roa
File:                     323830343a323863383a383030303a3a2f33332d313238203d3e20323633393830.roa (raw, json)
Hash identifier:          S2YGOoYG6/RG37CAojJ4C+sz0CgPvkgte2TSz0jXgeU=
Subject key identifier:   11:72:D6:AE:DF:EC:4F:3F:62:AB:CC:7B:0F:20:4A:F1:0C:AB:39:AD
Certificate issuer:       /CN=2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2
Certificate serial:       70BFEDFC9538E10FD2526BF36C527F5835BCFD67
Authority key identifier: 2A:07:55:CD:A1:0D:BE:BB:A6:A8:24:11:2F:67:CD:AE:61:44:A1:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a383030303a3a2f33332d313238203d3e20323633393830.roa
Signing time:             Thu 19 Mar 2026 17:09:48 +0000
ROA not before:           Thu 19 Mar 2026 17:04:48 +0000
ROA not after:            Thu 18 Mar 2027 17:09:48 +0000
asID:                     263980
IP address blocks:        2804:28c8:8000::/33 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.crl
                          rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 04:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:bf:ed:fc:95:38:e1:0f:d2:52:6b:f3:6c:52:7f:58:35:bc:fd:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2
        Validity
            Not Before: Mar 19 17:04:48 2026 GMT
            Not After : Mar 18 17:09:48 2027 GMT
        Subject: CN=1172D6AEDFEC4F3F62ABCC7B0F204AF10CAB39AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:24:15:d6:be:ad:33:fc:37:79:76:e7:34:94:
                    3a:4e:ec:3f:5a:14:fd:4c:b2:de:cf:39:da:9a:2d:
                    5f:2c:d8:1a:0f:db:75:20:c0:7b:c9:62:f7:e2:8c:
                    a5:38:ca:0d:69:6a:1f:2d:fe:d1:8b:8b:dc:64:90:
                    06:56:ee:51:2c:75:87:08:a2:6d:94:64:55:b1:b8:
                    c9:63:f1:b0:1f:1c:d3:e2:54:13:f1:c7:13:67:69:
                    1b:20:a2:08:f1:86:f9:bf:32:93:b2:ca:3c:90:6d:
                    0f:c7:4f:3b:55:66:eb:e2:f7:8b:70:a8:81:c8:94:
                    86:30:4e:81:97:42:d3:11:07:76:61:52:92:37:d8:
                    43:ed:2c:b0:18:da:1e:e6:59:b2:c7:c2:7f:e5:75:
                    ae:dd:fc:f6:4e:35:ae:fe:27:30:d5:49:54:58:6b:
                    70:07:59:2b:84:55:67:d3:3d:75:7c:d1:6b:ee:67:
                    c6:81:2e:0b:6e:50:17:bd:4f:58:e1:aa:60:77:77:
                    7d:41:45:ae:5d:01:e5:bf:44:df:5b:3d:c5:c1:9f:
                    7e:6f:34:4d:ff:2c:bf:72:f7:92:2b:42:63:cd:60:
                    37:59:3b:2a:a0:83:e5:70:d1:31:d4:ea:fc:5f:ee:
                    34:2a:32:af:58:66:f3:9f:04:68:9d:a7:49:e1:91:
                    7c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:72:D6:AE:DF:EC:4F:3F:62:AB:CC:7B:0F:20:4A:F1:0C:AB:39:AD
            X509v3 Authority Key Identifier:
                keyid:2A:07:55:CD:A1:0D:BE:BB:A6:A8:24:11:2F:67:CD:AE:61:44:A1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a383030303a3a2f33332d313238203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28c8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         92:6c:7d:12:bc:81:08:8b:b2:fc:4d:28:e9:9d:9b:15:d0:bf:
         6e:42:03:c2:0b:c4:b4:ec:75:52:3f:01:89:c3:1e:60:33:bb:
         b5:19:42:4f:ab:64:90:d9:60:2e:ff:f9:97:08:4b:17:56:b2:
         06:87:24:54:23:d3:59:c3:97:af:3e:90:16:36:63:c0:ff:76:
         cd:52:a1:c2:ec:5d:26:a5:eb:f2:dd:11:32:c2:d2:27:ba:a8:
         0b:3c:32:75:63:15:78:cc:53:09:a9:de:f3:4b:c5:f5:91:cd:
         fb:c9:69:dd:5f:82:fe:58:eb:39:19:b1:e1:7b:df:ac:5a:c5:
         55:cb:62:df:dc:6a:55:db:cd:a1:42:88:d8:27:ed:6b:17:32:
         3f:54:e4:8f:60:10:5a:58:25:94:ce:6c:3f:2d:e2:4f:2b:9a:
         3b:8a:73:3b:ee:9d:9d:dd:29:15:73:34:b6:88:7c:fd:9c:1f:
         d7:84:d8:30:77:ff:d1:06:40:bf:aa:69:23:5d:1c:a0:97:85:
         11:37:a8:86:62:31:37:1a:57:da:ea:65:76:0c:53:77:ef:73:
         1f:ef:4c:72:b0:bc:7f:a4:0d:54:01:cc:01:45:2f:9a:14:5f:
         36:84:6a:d0:58:f6:0d:0f:c5:f6:e6:60:49:f7:7e:f7:74:e6:
         7c:b8:cb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:57:43 2026 by rpki-client