Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3130303a3a2f34302d3430203d3e203631383838.roa
File:                     323830343a6536303a3130303a3a2f34302d3430203d3e203631383838.roa (raw, json)
Hash identifier:          D+qVjK3Nba4PLPfC8CNDBFcKAOeddGP/fCYQUYSGI2E=
Subject key identifier:   75:88:E2:7D:6C:1A:FA:FF:97:0F:71:3A:46:6D:01:3D:5A:6F:AC:FE
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       4FFF18E9680F55E503CEEF1EC9C58782C29C44C8
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3130303a3a2f34302d3430203d3e203631383838.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     61888
IP address blocks:        2804:e60:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
                          rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ff:18:e9:68:0f:55:e5:03:ce:ef:1e:c9:c5:87:82:c2:9c:44:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject: CN=7588E27D6C1AFAFF970F713A466D013D5A6FACFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bb:d6:d7:a1:9a:c1:45:80:d8:df:f4:82:7e:
                    83:59:3a:a5:cf:f6:4d:ba:53:f4:c2:54:3b:29:09:
                    3a:af:75:53:77:92:f3:ee:82:31:70:a3:71:5d:a6:
                    28:25:44:5b:a5:4b:22:57:dd:ff:44:fa:76:58:ae:
                    31:50:e1:e9:5a:83:a4:5f:6b:27:b2:29:fb:b3:d4:
                    5a:b3:64:d7:9a:2d:c4:fa:76:24:f2:ac:21:86:25:
                    15:86:5d:c1:24:9b:a3:35:75:4b:24:96:f0:3a:8a:
                    35:6f:94:cd:c8:af:ba:cd:61:28:99:42:39:70:c2:
                    61:68:76:61:69:f9:fe:bf:c2:4f:1a:8e:37:2a:b1:
                    75:fc:f3:b3:0c:da:9a:9d:28:71:c8:b7:c5:c6:ac:
                    a9:94:61:26:da:6c:cf:12:e2:bd:7f:f0:94:47:21:
                    be:cf:e2:e7:16:34:94:13:86:5f:ba:16:11:9a:bd:
                    1b:68:59:f7:36:d3:21:ca:1a:89:43:5e:6f:fd:7b:
                    ca:76:22:44:17:c8:e7:19:5d:65:31:6a:49:01:ed:
                    14:6b:7a:20:da:b8:82:00:bb:df:1b:e7:50:3f:ad:
                    79:18:ef:2b:94:b2:fd:c8:04:ac:11:a8:40:82:c0:
                    e3:40:fb:89:89:1b:91:f1:43:6b:e8:07:4f:73:fc:
                    0d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:88:E2:7D:6C:1A:FA:FF:97:0F:71:3A:46:6D:01:3D:5A:6F:AC:FE
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3130303a3a2f34302d3430203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         8d:23:8a:45:99:00:bf:dc:73:4d:b3:7f:0e:ca:50:31:85:d9:
         b4:6f:52:92:23:6a:99:59:1e:5b:01:f1:90:79:7f:63:0f:9c:
         1d:7f:6b:3a:c2:88:9b:da:30:a6:4c:3c:87:61:75:30:8e:75:
         33:59:14:04:69:40:51:b1:1c:f8:d9:3d:4e:36:b8:33:d5:ee:
         78:8d:55:05:9d:79:e1:11:64:d4:09:62:34:02:25:ad:79:83:
         9c:cc:95:69:c1:c0:bf:8e:9d:0c:f1:12:e5:e3:ae:96:bd:fd:
         59:79:36:bf:34:0d:07:2b:f3:a1:2a:65:36:95:25:1e:91:68:
         58:f8:b0:16:ae:42:be:6b:9a:aa:b7:1e:b8:ec:e1:5b:7d:00:
         61:fc:66:52:22:01:ad:fc:b2:85:09:d4:b6:2d:41:08:32:94:
         1a:5b:26:76:f1:66:47:64:a7:df:f8:3b:55:4b:f0:9e:68:2c:
         a8:56:01:e9:f4:63:f1:d4:b9:ae:1d:84:ec:ef:42:fe:71:8f:
         60:ae:be:e9:c3:1a:71:9b:a3:6b:37:b0:2d:b5:5c:1a:02:48:
         b4:8b:50:5c:16:39:53:c4:a2:c2:1a:46:0c:30:40:3d:52:5c:
         51:b8:23:39:a1:31:21:ab:d6:fa:ee:fe:f4:07:1e:28:5c:6d:
         cd:3e:b4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:01:54 2026 by rpki-client