Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiUmZcXnEMHdmeRVFnef9w4M85szfqeGMpX8AiYndRxz/0/323830343a323363303a3a2f33312d313238203d3e203236323138.roa
File:                     323830343a323363303a3a2f33312d313238203d3e203236323138.roa (raw, json)
Hash identifier:          z7aSjIWivhLjqWDVK3yChFTk5zq/YZzCCFB7i9gPQls=
Subject key identifier:   F2:82:05:7A:2B:10:16:01:94:A5:7D:A7:78:9B:D9:F4:7E:86:75:F2
Certificate issuer:       /CN=5D12A1312FB5F75D6295FAB2BD568B4EEB6F5B60
Certificate serial:       0C261C818E3F7896FC2BBB55AA8EF231B358A7B9
Authority key identifier: 5D:12:A1:31:2F:B5:F7:5D:62:95:FA:B2:BD:56:8B:4E:EB:6F:5B:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12A1312FB5F75D6295FAB2BD568B4EEB6F5B60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiUmZcXnEMHdmeRVFnef9w4M85szfqeGMpX8AiYndRxz/0/323830343a323363303a3a2f33312d313238203d3e203236323138.roa
Signing time:             Tue 03 Mar 2026 17:22:50 +0000
ROA not before:           Tue 03 Mar 2026 17:17:50 +0000
ROA not after:            Tue 02 Mar 2027 17:22:50 +0000
asID:                     26218
IP address blocks:        2804:23c0::/31 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiUmZcXnEMHdmeRVFnef9w4M85szfqeGMpX8AiYndRxz/0/5D12A1312FB5F75D6295FAB2BD568B4EEB6F5B60.crl
                          rsync://rpki-repo.registro.br/repo/DiUmZcXnEMHdmeRVFnef9w4M85szfqeGMpX8AiYndRxz/0/5D12A1312FB5F75D6295FAB2BD568B4EEB6F5B60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12A1312FB5F75D6295FAB2BD568B4EEB6F5B60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:40:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:26:1c:81:8e:3f:78:96:fc:2b:bb:55:aa:8e:f2:31:b3:58:a7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D12A1312FB5F75D6295FAB2BD568B4EEB6F5B60
        Validity
            Not Before: Mar  3 17:17:50 2026 GMT
            Not After : Mar  2 17:22:50 2027 GMT
        Subject: CN=F282057A2B10160194A57DA7789BD9F47E8675F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:40:a6:b2:4c:7f:4d:b2:58:61:e8:90:fb:8b:
                    4b:5b:02:50:d2:1d:8a:5a:89:f3:27:57:fa:20:83:
                    32:78:da:72:4e:d7:1c:69:89:d6:7f:a7:dc:a2:89:
                    90:6d:7c:ce:a1:15:8a:e1:28:d5:a8:35:96:e9:26:
                    a1:dc:e8:4b:11:67:12:4c:1e:9b:d1:47:81:83:88:
                    cf:96:e9:22:c0:64:2d:89:f8:5c:a7:72:8a:e5:67:
                    9d:91:ea:db:da:d3:c5:2c:fa:13:49:48:6e:69:24:
                    aa:f5:bd:8f:0f:31:e8:6b:b3:fa:cf:b3:b0:73:c5:
                    b0:9f:44:97:98:84:7d:ca:35:df:c5:14:fc:6f:50:
                    98:fd:f5:29:93:ce:d8:b3:48:9a:57:ee:8c:f2:bc:
                    e2:6d:f2:11:7e:bb:5a:9f:2f:cb:13:75:c3:4d:ed:
                    be:9b:ba:e0:c9:f6:88:6e:ca:00:c2:95:2b:b5:eb:
                    a5:2b:df:69:df:3a:de:f8:09:5d:a1:54:38:d9:b4:
                    9d:9d:99:a4:56:46:27:2d:53:82:be:88:02:41:bc:
                    b9:cd:3f:a4:aa:db:bc:f6:4a:f8:75:6b:b6:aa:c7:
                    70:8b:6c:ee:ff:39:49:c0:ae:90:3d:a2:dd:2a:5c:
                    79:63:84:44:a8:dc:c1:39:db:b4:ea:6b:5b:28:1d:
                    b3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:82:05:7A:2B:10:16:01:94:A5:7D:A7:78:9B:D9:F4:7E:86:75:F2
            X509v3 Authority Key Identifier:
                keyid:5D:12:A1:31:2F:B5:F7:5D:62:95:FA:B2:BD:56:8B:4E:EB:6F:5B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiUmZcXnEMHdmeRVFnef9w4M85szfqeGMpX8AiYndRxz/0/5D12A1312FB5F75D6295FAB2BD568B4EEB6F5B60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12A1312FB5F75D6295FAB2BD568B4EEB6F5B60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiUmZcXnEMHdmeRVFnef9w4M85szfqeGMpX8AiYndRxz/0/323830343a323363303a3a2f33312d313238203d3e203236323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23c0::/31

    Signature Algorithm: sha256WithRSAEncryption
         27:20:4f:d8:4e:3b:a9:8b:1e:39:40:7a:45:48:df:7a:e7:32:
         59:58:ef:72:75:9a:d5:7b:2f:2c:3c:76:42:34:6a:9c:a6:68:
         b8:61:c2:cf:7d:af:24:ae:05:9c:d8:35:e5:4e:db:46:31:7e:
         a0:fe:35:c4:d6:fc:7e:95:b7:f3:b0:12:3d:d4:db:93:20:61:
         c1:7c:62:cb:3e:15:dc:c7:55:0a:42:96:9b:d6:f0:3c:9e:6a:
         b5:2a:15:ae:25:32:51:55:55:ea:5f:ed:0e:31:2d:8b:69:2c:
         dd:90:0a:18:a1:d1:1a:d4:6b:ad:89:d7:bb:c1:7c:8a:7c:35:
         57:e4:26:21:59:c3:70:c0:9e:8f:d6:d1:b2:d8:b0:6a:44:38:
         15:58:6f:3b:23:d1:3e:87:a3:7a:1d:69:88:3a:b8:80:8a:6c:
         02:94:77:21:6c:eb:76:4d:3f:30:ff:6d:fa:8e:de:15:53:43:
         ef:d5:80:b9:d7:83:41:3a:de:9d:fa:0c:03:6e:00:7d:38:c0:
         dc:cb:65:91:8f:81:0c:59:a8:c0:a4:ba:26:06:54:d2:5f:61:
         5b:f2:87:73:96:dd:b2:1b:7d:93:85:3b:d5:97:8d:80:8d:3f:
         ff:e9:b9:c3:6f:5b:ae:5a:45:86:29:9b:f5:07:f8:e5:69:9f:
         fd:40:76:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:02:58 2026 by rpki-client