Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a34303a3a2f34322d3432203d3e20323632343234.roa
File:                     323830343a363136343a34303a3a2f34322d3432203d3e20323632343234.roa (raw, json)
Hash identifier:          jhYxQ8PlvA0Mm2H/uyQVsVLJ0xYRb/KC1WGUPBlkKy4=
Subject key identifier:   FB:57:3B:3B:76:8D:5B:3B:F8:A3:8C:D9:7D:68:48:16:60:8B:54:60
Certificate issuer:       /CN=BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0
Certificate serial:       455AB3D620EF394D3BAC80D1E3B34B970007EE01
Authority key identifier: BC:B9:95:CE:EA:05:AD:BF:EB:8D:71:B1:A0:0A:EB:D5:69:81:21:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a34303a3a2f34322d3432203d3e20323632343234.roa
Signing time:             Mon 02 Mar 2026 22:30:42 +0000
ROA not before:           Mon 02 Mar 2026 22:25:42 +0000
ROA not after:            Mon 01 Mar 2027 22:30:42 +0000
asID:                     262424
IP address blocks:        2804:6164:40::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:5a:b3:d6:20:ef:39:4d:3b:ac:80:d1:e3:b3:4b:97:00:07:ee:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0
        Validity
            Not Before: Mar  2 22:25:42 2026 GMT
            Not After : Mar  1 22:30:42 2027 GMT
        Subject: CN=FB573B3B768D5B3BF8A38CD97D684816608B5460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:24:1b:28:d0:2f:d5:be:61:a4:e9:ff:c3:c5:
                    a5:3d:96:34:aa:20:b7:79:75:30:43:da:e7:9d:a1:
                    ba:d8:2e:78:87:72:e6:7d:8c:07:2f:c0:c4:48:60:
                    e8:a4:d7:9c:92:3c:f1:c5:f5:ff:2c:b0:e6:5f:1f:
                    f3:2e:9b:55:de:ee:d1:40:d5:5b:48:17:f1:8f:d9:
                    a9:f0:eb:5c:3d:fc:05:5b:40:61:d4:55:12:b1:aa:
                    ea:06:14:17:c5:ea:af:3f:a3:61:c0:3f:96:6e:82:
                    b0:bd:12:36:0f:90:15:74:80:c9:67:bd:8f:11:33:
                    6c:18:1b:3e:dc:3e:4d:42:d3:d5:a9:8d:03:0b:85:
                    0c:dd:52:6f:95:84:23:45:a8:3b:63:f1:21:d6:2b:
                    b8:cf:92:57:f2:f1:31:90:1f:14:39:3e:9c:26:ff:
                    a8:71:11:e6:9a:a0:52:c1:d0:4d:58:15:a2:b0:02:
                    45:db:da:04:74:be:70:6a:5d:94:cf:df:74:e7:4e:
                    d9:af:56:40:ad:8c:a2:c2:67:30:ce:f4:c9:cf:02:
                    4d:ed:d5:c7:cb:de:8d:da:8b:24:f9:83:2f:17:db:
                    a3:5a:8f:63:f2:e9:0d:fd:d2:ff:09:21:80:b5:c4:
                    de:69:92:85:26:3b:94:b8:33:89:2b:b5:83:f4:94:
                    c1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:57:3B:3B:76:8D:5B:3B:F8:A3:8C:D9:7D:68:48:16:60:8B:54:60
            X509v3 Authority Key Identifier:
                keyid:BC:B9:95:CE:EA:05:AD:BF:EB:8D:71:B1:A0:0A:EB:D5:69:81:21:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a34303a3a2f34322d3432203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6164:40::/42

    Signature Algorithm: sha256WithRSAEncryption
         60:2f:1a:7e:2f:16:6c:70:fa:18:66:9f:6e:ac:58:ef:65:c0:
         ad:f6:2f:a9:54:7f:b4:b6:0e:29:dc:36:5b:91:22:70:ba:52:
         40:8e:9e:92:2a:74:45:3f:56:99:ad:e1:dc:08:bb:8a:a0:c1:
         74:ee:02:24:6d:9f:4c:83:2d:83:17:40:47:cd:64:e7:d5:08:
         9d:41:4d:62:3e:e0:49:e3:9e:5c:9d:ba:8e:1a:b0:96:61:75:
         84:10:bc:27:4e:f9:ad:62:80:92:3b:d6:18:a9:84:a0:9d:df:
         cf:ba:54:4d:c8:54:d1:28:5d:1e:e8:03:5b:55:1e:d1:9b:03:
         28:5e:6f:74:5d:50:7e:31:c5:0e:53:3f:54:cc:96:cb:6e:98:
         3a:67:74:6d:a0:b4:92:d6:21:b7:a8:85:a4:b6:d6:35:0b:0f:
         67:ab:97:04:d1:a9:7f:73:16:68:98:1b:ec:43:79:a6:38:e6:
         4f:a7:c0:31:7b:c4:6a:ba:48:40:14:c2:5c:93:6c:d6:fe:68:
         ef:dc:b9:c3:ba:ef:ca:e0:6d:30:b1:5e:ca:9e:78:7b:db:be:
         3e:d2:12:18:56:69:b7:84:04:1f:87:2d:ff:3b:9a:f3:f6:d6:
         0a:75:94:fd:39:f8:ce:e1:53:cb:1d:95:f8:fa:db:66:5a:48:
         f6:ae:10:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:01:49 2026 by rpki-client