Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/323830343a363264303a633030303a3a2f33342d3334203d3e20323639333230.roa
File:                     323830343a363264303a633030303a3a2f33342d3334203d3e20323639333230.roa (raw, json)
Hash identifier:          86jmtts1HG0cQZc9ptIZQsuaRaZZheIvUkTN6LqX5rk=
Subject key identifier:   61:59:8D:88:D1:A1:5B:A8:69:0B:84:1C:80:36:D5:00:49:F1:D3:8C
Certificate issuer:       /CN=F196A9AF2ABCCD8F3406AD535AF560447E07E6E7
Certificate serial:       7A1771E3313276F1E341151EFE7C5CB7D3A41713
Authority key identifier: F1:96:A9:AF:2A:BC:CD:8F:34:06:AD:53:5A:F5:60:44:7E:07:E6:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/323830343a363264303a633030303a3a2f33342d3334203d3e20323639333230.roa
Signing time:             Wed 04 Feb 2026 21:21:30 +0000
ROA not before:           Wed 04 Feb 2026 21:16:30 +0000
ROA not after:            Wed 03 Feb 2027 21:21:30 +0000
asID:                     269320
IP address blocks:        2804:62d0:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.crl
                          rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:17:71:e3:31:32:76:f1:e3:41:15:1e:fe:7c:5c:b7:d3:a4:17:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F196A9AF2ABCCD8F3406AD535AF560447E07E6E7
        Validity
            Not Before: Feb  4 21:16:30 2026 GMT
            Not After : Feb  3 21:21:30 2027 GMT
        Subject: CN=61598D88D1A15BA8690B841C8036D50049F1D38C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:71:ca:bf:78:14:40:b9:9e:67:08:6b:17:c3:
                    d7:36:b9:e5:7a:b1:f1:e9:e2:67:8d:26:53:04:7e:
                    dd:bf:64:c1:9d:c9:3a:91:9a:d5:73:b0:8f:9f:0c:
                    f3:8c:2d:2f:10:61:71:71:23:01:b9:7b:0d:3c:f0:
                    03:f2:e6:da:86:4b:70:0f:aa:09:ea:1f:4b:e7:3f:
                    cf:0f:d4:34:ec:c5:95:c1:f1:d2:83:aa:5a:63:5f:
                    10:54:f8:06:ae:55:a7:10:ca:d5:28:7d:3a:29:eb:
                    de:57:11:da:96:d2:7f:81:1d:ef:7a:60:e8:ac:ef:
                    c9:39:49:84:50:d4:c6:df:07:63:1d:5c:bf:0f:6d:
                    f6:2f:13:d5:9a:45:1b:e3:35:b3:e2:28:8f:d5:b9:
                    48:6f:30:80:21:fc:6b:63:88:ec:98:b1:58:7c:f4:
                    d1:56:14:c8:28:07:66:e5:a6:6b:b1:69:a7:74:3c:
                    e7:49:dc:4b:ad:8d:b7:c3:89:a2:e1:ee:6c:61:0c:
                    6a:50:b2:1f:10:de:bd:4e:b6:18:e6:ba:1c:1e:66:
                    da:d2:0d:e2:10:94:26:75:de:58:a3:61:dd:9c:1c:
                    c7:17:38:87:ec:4f:df:76:21:4b:b8:72:11:f5:c2:
                    57:12:96:84:29:2c:78:fc:8b:70:58:f9:b7:ab:18:
                    67:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:59:8D:88:D1:A1:5B:A8:69:0B:84:1C:80:36:D5:00:49:F1:D3:8C
            X509v3 Authority Key Identifier:
                keyid:F1:96:A9:AF:2A:BC:CD:8F:34:06:AD:53:5A:F5:60:44:7E:07:E6:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/323830343a363264303a633030303a3a2f33342d3334203d3e20323639333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:62d0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7c:06:a3:f5:8d:11:fe:a8:44:76:08:c3:18:30:f6:e1:a3:22:
         43:12:d0:de:e9:95:0b:d2:a7:73:6d:e3:f0:45:64:05:cf:b0:
         0b:a5:ad:8c:5a:6e:74:14:75:10:ee:3f:94:ef:ab:0b:2f:26:
         05:71:25:ae:e8:b1:a8:1b:78:20:15:c2:5c:96:63:ef:ef:68:
         de:32:b4:13:a4:8e:08:66:e5:cf:e9:8f:97:01:49:1e:e0:ef:
         3c:07:c5:cb:04:8b:fc:5a:87:37:4e:6f:61:2b:70:6f:95:75:
         aa:11:2e:15:1e:23:3b:35:15:6d:e1:82:82:c7:da:92:c6:07:
         69:3a:ad:91:ca:28:2a:22:bb:4c:52:06:e5:54:9f:a5:de:f8:
         d4:d4:b4:ea:eb:a5:04:fc:cb:2f:40:0f:8a:4d:c0:62:04:4c:
         63:0a:33:89:b8:42:34:8a:df:61:93:16:ac:98:d2:72:9c:b3:
         98:65:16:81:82:2a:35:e0:36:ea:e8:86:d7:b2:c9:95:aa:e8:
         c1:49:e3:e6:0b:6d:6b:ab:b6:02:34:d7:ba:7b:29:01:c8:ee:
         80:9c:00:d7:f2:be:6f:80:d5:84:47:4f:dd:42:fd:f4:12:17:
         8b:7c:3d:50:41:ca:33:2f:95:8b:18:90:78:69:5f:27:2c:8b:
         aa:85:00:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:13 2026 by rpki-client