Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/323830313a38303a6165303a3a2f34382d3438203d3e203631373739.roa
File:                     323830313a38303a6165303a3a2f34382d3438203d3e203631373739.roa (raw, json)
Hash identifier:          cGe1000RguWJhhNSvl7VRAxDphOffrqJS/r6DyiD+pY=
Subject key identifier:   F3:A2:B0:32:11:0D:21:FB:C4:A1:2A:DA:19:E5:CB:F7:D4:9D:88:8B
Certificate issuer:       /CN=0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765
Certificate serial:       16311BD66D7A29A0B55BE06FB455741479B8B5A1
Authority key identifier: 0D:74:BF:A3:D0:BD:CC:2C:C6:2E:DD:9E:FB:11:FC:02:83:74:37:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/323830313a38303a6165303a3a2f34382d3438203d3e203631373739.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     61779
IP address blocks:        2801:80:ae0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.crl
                          rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:39:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:31:1b:d6:6d:7a:29:a0:b5:5b:e0:6f:b4:55:74:14:79:b8:b5:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=F3A2B032110D21FBC4A12ADA19E5CBF7D49D888B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:02:24:89:bf:28:27:8d:74:c5:7a:9c:cb:75:
                    c6:f7:94:81:4e:e5:c0:c2:bc:16:d6:7c:16:07:32:
                    d4:3a:b5:56:da:43:2b:89:05:c8:7d:1e:c7:ce:b0:
                    51:cd:94:25:8a:44:60:a0:78:9e:91:dc:6d:d5:d7:
                    f7:15:e7:56:3d:8e:b0:3e:ef:9e:ae:f7:4d:fc:9e:
                    d7:26:de:51:56:ea:0f:b3:c0:4e:67:bc:ec:43:bb:
                    30:4e:aa:46:33:55:94:61:02:5c:33:1e:f0:3f:d2:
                    99:72:6a:39:18:9f:a3:be:85:9c:c2:fc:7f:f3:80:
                    8e:1d:7f:47:79:20:4e:18:25:cd:21:66:97:20:1d:
                    c2:dd:df:dc:b0:89:2e:20:0d:3a:a0:3d:e1:5c:86:
                    a5:4b:0c:66:ef:17:ca:37:26:9e:43:5e:e6:3c:6c:
                    dc:96:47:f6:29:b9:70:e4:70:b7:71:11:ff:79:c6:
                    6f:19:70:cb:ab:3b:ad:6c:71:ad:83:ac:c3:d0:03:
                    ae:10:9f:cd:06:a4:b6:c2:9a:16:57:ec:7d:09:02:
                    a6:f4:1e:8c:2a:00:28:16:35:a4:61:1b:e5:35:de:
                    90:74:60:06:2a:b3:dc:0a:ac:32:79:0b:8b:ff:68:
                    f5:02:5a:1b:9e:4f:e3:f3:8e:15:5e:f1:94:2c:d3:
                    ad:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A2:B0:32:11:0D:21:FB:C4:A1:2A:DA:19:E5:CB:F7:D4:9D:88:8B
            X509v3 Authority Key Identifier:
                keyid:0D:74:BF:A3:D0:BD:CC:2C:C6:2E:DD:9E:FB:11:FC:02:83:74:37:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/323830313a38303a6165303a3a2f34382d3438203d3e203631373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:ae0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:b9:aa:e4:b5:45:55:82:dc:1c:ad:08:45:c1:d3:49:f0:d4:
         41:15:20:da:e8:6b:1f:49:a3:5f:c2:d3:33:7e:ee:19:7a:64:
         12:2a:f7:36:d6:ce:97:a4:e5:8a:14:e5:11:15:d9:99:89:5a:
         70:d6:88:5c:6c:fe:9b:29:8a:5c:b6:c8:3b:14:fc:9d:2d:aa:
         9f:e0:0e:2b:53:90:95:6c:a0:82:46:ee:34:0a:bb:02:93:0d:
         81:58:33:6d:58:36:30:4f:65:9f:d2:8c:b2:2c:4d:67:12:b0:
         2b:94:cf:ee:fc:ee:10:b2:ff:6b:e3:a1:57:a7:d6:34:59:da:
         3f:2c:68:9c:b5:c3:19:66:2f:cb:13:80:28:24:67:12:93:9d:
         03:ed:37:50:43:1e:d6:67:15:53:27:ad:0d:4f:d5:63:6e:16:
         29:60:58:19:e5:fa:af:d9:57:ed:90:10:aa:12:27:3f:86:7a:
         2e:04:8d:f3:c4:58:38:40:a1:30:87:f9:5d:70:f7:bb:e3:35:
         a9:94:ad:23:ef:c9:fd:03:71:e2:75:47:84:e1:ee:aa:d4:77:
         29:3b:13:06:a2:fb:64:60:39:7a:e3:f0:d1:97:29:70:0a:57:
         64:93:52:6c:78:37:a7:4a:af:49:15:80:76:80:c6:ac:b9:67:
         fd:76:61:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:04:05 2026 by rpki-client