Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS264352.roa
File:                     AS264352.roa (raw, json)
Hash identifier:          lv5SPJwj6l73gDEU6jqQCUE1avuoKciFDW0TSC+yYXg=
Subject key identifier:   77:7E:9C:A4:91:55:0D:29:6E:44:76:01:CF:71:D4:43:78:F1:20:10
Certificate issuer:       /CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
Certificate serial:       7846F2A8ADCA20CB6279B326C0B908D086513FA6
Authority key identifier: BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS264352.roa
Signing time:             Tue 15 Sep 2026 19:57:12 +0000
ROA not before:           Tue 15 Sep 2026 19:52:12 +0000
ROA not after:            Tue 14 Sep 2027 19:57:12 +0000
asID:                     264352
IP address blocks:        2804:1d2c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl
                          rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 10:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:46:f2:a8:ad:ca:20:cb:62:79:b3:26:c0:b9:08:d0:86:51:3f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
        Validity
            Not Before: Sep 15 19:52:12 2026 GMT
            Not After : Sep 14 19:57:12 2027 GMT
        Subject: CN=777E9CA491550D296E447601CF71D44378F12010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5f:e8:f6:d8:94:d8:46:36:02:07:db:b2:fa:
                    13:03:5c:6b:5d:2e:50:21:4a:39:0a:b5:59:c4:dd:
                    54:a5:dd:4b:9d:21:12:be:5e:af:24:43:4f:7d:18:
                    47:54:cf:57:a5:8c:4f:77:84:18:f0:a6:ad:24:0f:
                    01:88:73:22:9a:b3:5c:76:6b:36:bf:55:3a:f1:9c:
                    7f:40:8d:e0:6e:e3:5f:b7:45:7c:0b:90:28:cc:ef:
                    c3:52:94:e1:63:22:7e:40:53:4c:66:c3:02:27:5c:
                    fb:80:8f:9f:20:44:e7:ad:5b:e8:a0:65:62:bc:38:
                    c2:92:06:0c:9d:28:5d:22:7b:08:41:ef:4e:f6:b8:
                    3f:c3:14:57:9e:57:cc:6e:2e:8a:5a:b8:c1:b6:06:
                    4b:9c:ad:a9:cf:d4:fd:c3:50:69:21:4b:34:d9:0f:
                    3c:93:09:7f:a1:4c:89:2c:56:94:08:35:d7:83:2d:
                    18:ed:23:af:54:91:1a:c4:63:71:2c:eb:eb:49:a0:
                    6b:b3:d9:36:20:8c:6f:48:1c:ec:3b:09:aa:af:fc:
                    70:48:70:23:6f:f2:15:f7:6a:4e:61:8b:c6:ba:21:
                    cf:cd:23:c2:af:1d:05:51:c6:9f:aa:a4:db:9f:fb:
                    a7:34:71:92:e5:78:be:89:07:08:34:94:0f:e5:0c:
                    d1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7E:9C:A4:91:55:0D:29:6E:44:76:01:CF:71:D4:43:78:F1:20:10
            X509v3 Authority Key Identifier:
                keyid:BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS264352.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:e0:37:33:dc:e9:ca:07:a4:f1:87:68:a6:38:98:48:12:46:
         d9:d6:86:d7:0d:6c:b8:64:ce:ba:c1:fc:ff:57:d3:30:d2:bf:
         fb:35:85:89:fa:da:65:22:a6:dd:a7:9b:50:eb:8d:a3:1b:f1:
         39:18:d8:73:46:f1:bf:0f:ed:fe:8a:b5:f6:98:55:05:00:97:
         7a:60:69:c0:9e:00:36:48:50:72:7f:fe:66:d6:f8:c2:82:a7:
         29:0d:41:5b:e9:51:52:0b:09:ec:19:d5:3d:d7:75:f9:d8:5f:
         17:44:5b:5a:43:8d:01:b5:de:91:67:ee:a6:a7:bc:92:0e:d5:
         6e:7b:69:09:52:06:be:e0:7a:84:15:22:e9:ff:9a:fd:3a:08:
         20:ce:3d:f4:8b:4a:1c:4d:42:f7:0a:90:b3:7b:88:3a:ec:3f:
         67:7e:98:19:19:01:a6:87:1f:e5:60:bf:0c:b9:da:47:57:ba:
         bb:ff:ea:df:25:99:1e:a8:51:ce:41:21:5e:73:a3:ad:ca:93:
         c2:e0:02:36:b2:02:b6:97:f1:2e:3f:f7:75:f3:71:f6:52:4a:
         86:87:ad:72:7f:62:ff:b1:8b:50:db:29:78:61:85:f8:56:fa:
         c6:3a:05:0a:8a:63:c8:b8:f7:32:f3:60:f6:16:96:5c:6b:ff:
         f6:7a:c7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:17:07 2026 by rpki-client