Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a3a2f33332d313238203d3e20323633393830.roa
File:                     323830343a323863383a3a2f33332d313238203d3e20323633393830.roa (raw, json)
Hash identifier:          bVwse1w55JChnO8qPIjujb93KkHvyFJiPSDut6m/WjI=
Subject key identifier:   AC:E9:19:10:5E:78:11:9F:63:DA:90:E6:D5:33:A2:6F:F8:00:CC:9D
Certificate issuer:       /CN=2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2
Certificate serial:       7329CC5A4826C494F45098F404BEA39A00236AE8
Authority key identifier: 2A:07:55:CD:A1:0D:BE:BB:A6:A8:24:11:2F:67:CD:AE:61:44:A1:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a3a2f33332d313238203d3e20323633393830.roa
Signing time:             Thu 19 Mar 2026 17:09:43 +0000
ROA not before:           Thu 19 Mar 2026 17:04:43 +0000
ROA not after:            Thu 18 Mar 2027 17:09:43 +0000
asID:                     263980
IP address blocks:        2804:28c8::/33 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.crl
                          rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 04:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:29:cc:5a:48:26:c4:94:f4:50:98:f4:04:be:a3:9a:00:23:6a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2
        Validity
            Not Before: Mar 19 17:04:43 2026 GMT
            Not After : Mar 18 17:09:43 2027 GMT
        Subject: CN=ACE919105E78119F63DA90E6D533A26FF800CC9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1a:56:9a:3f:41:a4:b2:a7:b0:65:2e:17:34:
                    f3:d8:c0:e2:ac:91:92:98:2c:5d:41:c6:5d:ae:b4:
                    cc:7e:62:25:bd:ec:e4:3b:64:62:9a:be:35:ab:14:
                    75:d8:87:05:eb:90:5b:3f:30:fb:fb:86:26:a7:fc:
                    1f:39:fc:8a:8b:bc:76:38:dc:ce:8f:97:b4:6b:22:
                    78:3a:a5:fd:e6:6a:e8:46:c2:c9:db:38:dc:f5:04:
                    65:b8:1a:10:88:37:c3:ce:ee:58:1d:fb:18:d3:6b:
                    df:c5:89:11:70:4e:de:36:f7:31:b5:e1:72:84:bc:
                    88:36:14:ea:9f:54:24:21:c4:8a:c0:55:b8:5c:a3:
                    f4:3d:e5:6a:1a:55:da:3c:df:07:b1:e7:db:86:18:
                    ff:f5:39:64:1e:54:f6:ae:67:33:e4:35:97:7a:ec:
                    35:5b:0a:21:af:dd:03:20:02:0f:97:da:30:67:d3:
                    c7:fa:66:af:a9:a9:33:c3:e0:0c:95:f3:8b:5d:4f:
                    b8:07:1c:d6:ff:25:0c:5a:bf:1f:a8:a4:33:c7:12:
                    5b:10:64:ad:fd:8c:b9:80:c2:b6:99:8f:2b:01:a7:
                    0f:22:88:02:f7:64:5d:00:78:3d:2a:cf:31:81:c1:
                    f1:26:4b:e3:bd:af:26:9a:b6:9c:20:6c:c0:11:b5:
                    aa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E9:19:10:5E:78:11:9F:63:DA:90:E6:D5:33:A2:6F:F8:00:CC:9D
            X509v3 Authority Key Identifier:
                keyid:2A:07:55:CD:A1:0D:BE:BB:A6:A8:24:11:2F:67:CD:AE:61:44:A1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/323830343a323863383a3a2f33332d313238203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28c8::/33

    Signature Algorithm: sha256WithRSAEncryption
         9c:6f:3e:b2:75:60:97:c4:d3:a3:60:0e:f4:bd:50:55:37:6f:
         a1:36:bb:8b:e1:a2:3d:30:83:ae:ed:e1:0c:04:5b:76:78:c8:
         10:85:7f:76:66:5f:dc:4f:62:17:cf:0d:11:3a:b1:46:5b:c8:
         a7:d4:10:bf:8a:e1:4d:cf:68:1c:0f:80:7d:f6:de:08:d2:ce:
         ae:0e:3f:e5:6d:92:5f:f3:e7:48:a5:0e:35:26:bd:c7:05:d1:
         53:a8:18:82:81:bc:2b:42:11:a6:6d:72:13:a5:1c:2b:43:31:
         95:89:83:84:33:bf:48:89:f9:ca:84:66:2a:60:cc:55:8d:77:
         2d:e6:86:af:ad:88:34:c6:c4:cb:30:d0:34:3a:b0:fe:21:7e:
         ee:b1:06:c9:95:5d:d7:9f:16:a8:18:6a:9d:11:bf:ea:a3:7f:
         26:6e:c5:fb:77:8e:a4:58:d7:03:f7:c8:7d:31:ce:fe:a0:a1:
         df:90:56:a8:98:87:74:a4:14:30:02:82:ef:28:26:3c:59:8a:
         90:a0:ab:fb:f9:a1:5b:77:5e:bc:f6:c5:e1:63:3d:73:e3:8f:
         91:ba:84:d6:bc:bc:83:3f:51:cc:5e:a8:03:59:ff:df:b0:23:
         56:31:e3:65:65:73:6c:e3:4c:5c:3c:de:3c:00:16:09:b9:3c:
         0b:ba:16:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:48:20 2026 by rpki-client