Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/323830343a333531633a3a2f33322d3438203d3e20323636323639.roa
File:                     323830343a333531633a3a2f33322d3438203d3e20323636323639.roa (raw, json)
Hash identifier:          LtV8CSQlvWWkbJkqPVbLY/rGnXYcOq37X+sGyawOd8g=
Subject key identifier:   81:89:EF:7E:72:A4:82:2E:4E:72:14:62:B9:BE:85:50:7B:62:17:BC
Certificate issuer:       /CN=CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227
Certificate serial:       35C8C1ABD24F8C3CFD357451C69504DAE935DB8C
Authority key identifier: CB:0E:C6:B7:F7:40:56:65:C6:58:4B:5D:B7:F3:C8:75:5A:A6:D2:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/323830343a333531633a3a2f33322d3438203d3e20323636323639.roa
Signing time:             Fri 06 Feb 2026 00:28:31 +0000
ROA not before:           Fri 06 Feb 2026 00:23:31 +0000
ROA not after:            Fri 05 Feb 2027 00:28:31 +0000
asID:                     266269
IP address blocks:        2804:351c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.crl
                          rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c8:c1:ab:d2:4f:8c:3c:fd:35:74:51:c6:95:04:da:e9:35:db:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227
        Validity
            Not Before: Feb  6 00:23:31 2026 GMT
            Not After : Feb  5 00:28:31 2027 GMT
        Subject: CN=8189EF7E72A4822E4E721462B9BE85507B6217BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d9:8d:b1:ab:ab:db:df:a3:dc:df:c3:6c:28:
                    01:07:ff:e9:a5:f1:5e:73:5d:b0:4d:4c:28:00:04:
                    2a:b8:e4:eb:f4:6f:0d:40:81:08:74:7b:32:55:3f:
                    b8:46:e5:f6:37:a5:f6:e5:9d:59:d4:04:a8:ea:77:
                    14:0d:ce:8f:56:8f:ca:dc:eb:a8:92:84:d3:94:33:
                    e3:d7:c5:3c:46:7c:d4:54:82:7c:f5:51:09:c4:06:
                    e3:b1:34:8a:3b:1c:14:bd:a6:46:bf:b6:5b:b8:c9:
                    0b:2e:33:5c:88:eb:77:e8:8b:54:51:ad:2d:91:41:
                    be:30:47:9e:02:ae:3b:f9:c9:f4:91:19:8a:d4:c4:
                    0f:6d:c0:f5:4c:67:22:f9:b4:b1:1f:50:69:12:4e:
                    a5:e4:be:c7:90:a4:ce:8b:e4:56:d7:81:ab:9a:a3:
                    1a:80:06:93:52:54:e1:ce:5e:7b:21:93:33:78:8c:
                    0e:02:28:49:b3:7f:72:f6:a6:ea:13:53:b4:da:21:
                    1e:04:96:92:c4:00:c0:3e:34:84:9d:2b:15:c0:f0:
                    b8:e2:23:88:3e:af:70:65:98:c2:78:8c:81:02:62:
                    a3:ae:21:ec:07:d6:38:1d:84:74:c6:09:a2:47:3d:
                    46:8f:25:04:8c:f6:98:01:c7:62:fc:7c:42:12:95:
                    df:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:89:EF:7E:72:A4:82:2E:4E:72:14:62:B9:BE:85:50:7B:62:17:BC
            X509v3 Authority Key Identifier:
                keyid:CB:0E:C6:B7:F7:40:56:65:C6:58:4B:5D:B7:F3:C8:75:5A:A6:D2:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/323830343a333531633a3a2f33322d3438203d3e20323636323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:351c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:b9:e0:5e:6e:a0:12:69:28:d5:df:b8:ac:66:73:41:da:93:
         4a:48:e3:81:3a:16:71:cc:56:8c:89:5f:65:70:6b:3b:de:d8:
         e9:56:1b:6f:62:92:d7:6b:89:65:70:d8:c8:2d:8e:45:42:1a:
         b0:3a:55:ed:46:8c:4e:23:fd:e2:09:91:ca:b5:de:93:ed:14:
         30:6e:38:fd:58:a5:0e:f6:9d:e2:27:84:97:6f:65:7d:88:08:
         83:a9:b6:17:73:c9:46:b7:b5:3c:cc:48:ce:fe:06:3e:0b:6c:
         6f:18:4d:92:e8:fc:93:19:03:bc:ca:54:03:a4:4d:04:ad:c0:
         05:2a:b9:98:be:c6:e8:74:fe:18:c5:67:44:8f:94:c2:4a:e5:
         9e:b2:1d:d0:69:25:84:80:da:45:fe:20:9c:f4:1e:28:94:e9:
         50:8f:43:42:79:c6:3f:28:28:99:07:52:4e:69:3d:83:53:32:
         f1:cd:81:59:f2:0a:a0:9d:b3:04:9a:33:ae:2c:f7:4b:89:21:
         c3:0a:15:fd:09:ca:dc:9b:a6:85:65:6b:a3:8a:54:98:93:0f:
         04:01:31:d3:b9:e1:93:09:a5:b5:ea:d1:50:86:4b:de:6e:d4:
         f0:98:34:de:0a:6c:98:bb:e2:43:02:7b:28:c3:e9:9b:08:18:
         60:60:1b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:36:03 2026 by rpki-client