Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/323830343a363137303a3a2f33322d313238203d3e20323639323334.roa
File:                     323830343a363137303a3a2f33322d313238203d3e20323639323334.roa (raw, json)
Hash identifier:          2FxPaxKn4arwvKvjr3OPODj2oEoZdZh/9m+ckPml+6A=
Subject key identifier:   29:3B:DC:AE:2C:E0:FC:44:C2:B1:2A:43:32:DF:23:DE:87:D0:84:03
Certificate issuer:       /CN=E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF
Certificate serial:       7A5DFA382F2AD3B4C8BEA1E534B9805577701E36
Authority key identifier: E7:B6:FC:B2:A7:49:40:38:5B:FB:79:EA:F3:8C:BA:AF:2F:00:8C:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/323830343a363137303a3a2f33322d313238203d3e20323639323334.roa
Signing time:             Mon 16 Feb 2026 18:04:33 +0000
ROA not before:           Mon 16 Feb 2026 17:59:33 +0000
ROA not after:            Mon 15 Feb 2027 18:04:33 +0000
asID:                     269234
IP address blocks:        2804:6170::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.crl
                          rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 11:34:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:5d:fa:38:2f:2a:d3:b4:c8:be:a1:e5:34:b9:80:55:77:70:1e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF
        Validity
            Not Before: Feb 16 17:59:33 2026 GMT
            Not After : Feb 15 18:04:33 2027 GMT
        Subject: CN=293BDCAE2CE0FC44C2B12A4332DF23DE87D08403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:20:dc:b9:77:f2:ae:c9:f2:1c:fa:bd:ed:73:
                    d1:87:cb:a3:0b:db:80:0d:f9:2e:02:b7:ee:6e:67:
                    8b:bf:74:db:17:fa:9d:34:43:43:11:e3:6e:00:d2:
                    66:f4:fa:18:51:24:5e:0a:28:f8:fa:f2:50:e9:8b:
                    f2:dd:5b:1a:21:88:b3:c6:56:18:0a:03:8a:85:b5:
                    d0:19:69:23:6e:e0:cc:86:12:c2:5d:48:8f:b4:da:
                    0f:0a:ad:d7:a7:7f:16:fe:15:bd:96:53:b9:4e:62:
                    0c:59:ab:f3:c9:d5:d0:cb:56:43:ab:5c:8d:42:af:
                    ac:e4:6c:ea:f4:27:dc:de:9e:e6:31:e6:b2:8f:c1:
                    ec:2e:89:1c:70:88:14:2f:e0:15:fa:d5:b2:04:88:
                    99:c6:98:7f:0f:c4:7e:f5:da:6c:88:69:af:cb:52:
                    38:e5:68:67:2a:9f:b8:87:16:3d:3e:ba:34:03:17:
                    77:40:fe:18:c6:ba:7d:78:17:37:bf:63:33:0b:c9:
                    57:bb:8e:9d:8f:61:d2:87:98:74:63:76:15:e5:cf:
                    a3:82:24:60:46:64:a8:cf:91:ef:e8:06:2e:1a:9c:
                    89:0e:91:7b:51:41:7d:16:0b:85:85:99:be:33:41:
                    d7:d8:d1:75:92:17:6c:d6:0e:49:cb:a2:8e:06:ad:
                    d9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3B:DC:AE:2C:E0:FC:44:C2:B1:2A:43:32:DF:23:DE:87:D0:84:03
            X509v3 Authority Key Identifier:
                keyid:E7:B6:FC:B2:A7:49:40:38:5B:FB:79:EA:F3:8C:BA:AF:2F:00:8C:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/323830343a363137303a3a2f33322d313238203d3e20323639323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6170::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:86:6e:31:d7:1a:b3:b6:0f:7b:65:10:95:32:b4:ba:31:d8:
         68:5f:9e:c0:49:c7:14:a4:e9:4a:76:88:d1:0b:f8:fd:12:35:
         bc:33:61:13:2b:4c:38:0f:d3:86:e1:bc:c8:23:63:6b:3e:52:
         41:5f:6b:38:bc:5a:be:15:a2:f1:da:74:06:06:5c:fc:f1:d2:
         81:2b:a5:ef:29:35:7b:ff:59:99:d9:97:9d:2b:cf:39:ee:3e:
         ff:1b:d1:ca:50:3e:98:89:a1:de:af:84:5a:d6:d5:76:25:71:
         c5:95:9e:99:da:a9:37:48:46:a9:d2:2b:d7:e3:bd:40:93:76:
         d8:29:eb:7e:2c:c6:3e:e1:70:de:94:cc:1e:f3:1e:74:f9:3c:
         7b:0b:77:b3:0e:74:34:7f:5d:63:bf:55:c8:ae:55:88:e9:01:
         3e:94:85:7f:fc:cf:cd:79:d4:e6:43:c8:22:e0:2c:3c:33:66:
         96:f5:83:f6:c7:dc:03:32:57:c0:9a:41:4e:d2:9e:b1:45:34:
         43:2c:ee:a6:3b:df:39:06:83:af:26:e2:4a:b7:54:8f:92:db:
         96:2a:65:f8:32:67:35:a4:a0:01:91:b6:39:56:0a:d4:60:df:
         f2:6e:8e:d0:16:44:44:e9:64:d1:14:b6:10:8a:b8:dd:db:a7:
         44:0b:87:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:06:56 2026 by rpki-client