Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/323830343a326465383a383030303a3a2f33332d3333203d3e20323635333131.roa
File:                     323830343a326465383a383030303a3a2f33332d3333203d3e20323635333131.roa (raw, json)
Hash identifier:          XpEHsLSOLV2LEIMJReK/bkT5iqErxbWjb0F1oMD5BIw=
Subject key identifier:   FB:03:96:D3:97:99:B1:70:69:0B:58:C1:A4:7C:BA:0B:BF:39:89:DA
Certificate issuer:       /CN=2F18CA349C9620E76DE6A8432BAA44A4392B449D
Certificate serial:       551F324D31134071B1968D71FF7C80560333149D
Authority key identifier: 2F:18:CA:34:9C:96:20:E7:6D:E6:A8:43:2B:AA:44:A4:39:2B:44:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F18CA349C9620E76DE6A8432BAA44A4392B449D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/323830343a326465383a383030303a3a2f33332d3333203d3e20323635333131.roa
Signing time:             Wed 18 Feb 2026 17:34:16 +0000
ROA not before:           Wed 18 Feb 2026 17:29:16 +0000
ROA not after:            Wed 17 Feb 2027 17:34:16 +0000
asID:                     265311
IP address blocks:        2804:2de8:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/2F18CA349C9620E76DE6A8432BAA44A4392B449D.crl
                          rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/2F18CA349C9620E76DE6A8432BAA44A4392B449D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F18CA349C9620E76DE6A8432BAA44A4392B449D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:20:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1f:32:4d:31:13:40:71:b1:96:8d:71:ff:7c:80:56:03:33:14:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F18CA349C9620E76DE6A8432BAA44A4392B449D
        Validity
            Not Before: Feb 18 17:29:16 2026 GMT
            Not After : Feb 17 17:34:16 2027 GMT
        Subject: CN=FB0396D39799B170690B58C1A47CBA0BBF3989DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:de:9c:59:78:25:bc:ea:44:a4:f6:65:b0:ab:
                    cb:d6:b9:d3:12:83:27:2e:be:65:64:4e:f5:e5:64:
                    57:77:d3:80:dd:a4:4e:83:57:40:96:20:cc:04:42:
                    4d:aa:ab:0b:06:75:f3:f4:bf:59:da:57:85:2b:77:
                    b5:5c:4a:61:63:a3:e3:ac:02:5d:b8:75:6d:bd:ea:
                    ad:0f:2c:72:71:2a:ee:05:40:7c:59:4f:fe:e8:92:
                    be:1a:84:da:ab:78:3e:db:4a:17:b2:de:ac:c8:88:
                    0d:c6:b6:d1:75:17:6d:8a:e6:26:c3:cc:93:3a:f1:
                    e2:4e:6b:1b:b9:08:a4:b8:a8:e0:29:5f:6e:47:b3:
                    f1:a4:bd:6b:6c:bf:cc:75:e2:c8:3e:5c:4c:59:89:
                    16:19:f6:c7:98:f5:66:c4:fc:ec:0b:50:0f:bd:7a:
                    bf:39:8b:25:b0:e5:a6:d5:8d:a1:6a:90:d9:6b:48:
                    64:46:82:9a:e3:5e:da:fd:bc:0a:4d:76:a0:33:b7:
                    a1:09:1b:de:17:da:b2:b9:79:22:89:06:9d:46:d2:
                    a5:11:4b:09:7f:57:10:4a:07:a9:0c:f1:de:5e:5d:
                    27:e6:16:a2:3a:0d:47:49:64:46:c6:a2:cc:2e:36:
                    51:d6:ae:ae:fe:b0:21:e5:7f:96:60:23:50:5e:5e:
                    fb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:03:96:D3:97:99:B1:70:69:0B:58:C1:A4:7C:BA:0B:BF:39:89:DA
            X509v3 Authority Key Identifier:
                keyid:2F:18:CA:34:9C:96:20:E7:6D:E6:A8:43:2B:AA:44:A4:39:2B:44:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/2F18CA349C9620E76DE6A8432BAA44A4392B449D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F18CA349C9620E76DE6A8432BAA44A4392B449D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/323830343a326465383a383030303a3a2f33332d3333203d3e20323635333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2de8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         3c:bc:eb:f3:50:c7:b1:a7:3d:7e:4e:9b:4e:97:e4:5e:d7:ff:
         36:b7:48:48:f5:a4:98:6b:1e:ba:ad:a5:2f:6b:06:a3:51:fa:
         8f:19:b0:21:26:ca:03:51:27:d4:a0:8a:91:75:2f:f4:12:15:
         d1:75:d6:58:94:59:c0:2b:b6:09:de:56:45:c7:cf:81:90:74:
         9a:4f:c5:54:88:21:8d:e8:45:06:83:f6:47:cb:d4:99:71:b5:
         bd:b8:be:29:ec:f7:da:14:62:b8:1d:49:ab:f8:f8:83:e7:0e:
         4f:43:fa:08:58:ef:ca:4c:01:c1:56:fb:a5:76:20:91:b1:73:
         c7:a0:25:c5:48:05:3c:2f:5b:21:58:09:cd:a3:96:80:76:66:
         ed:a5:ee:4a:a3:c5:8f:55:a1:27:08:9b:6b:f6:82:52:70:6a:
         45:4c:c7:15:83:1f:e6:47:91:69:d6:2e:42:29:29:c5:bb:47:
         c0:67:8e:c8:9c:be:e5:2f:f9:50:f8:60:43:ad:d3:e4:ae:5f:
         c3:a2:2e:f4:dd:af:49:65:8d:da:10:94:e2:30:3d:44:8a:76:
         09:c9:05:ab:1e:5d:b8:65:85:11:07:1f:4d:29:3c:f7:a1:74:
         41:f9:47:c9:64:e5:f1:e4:f5:ff:4e:26:a0:7d:3f:44:ce:5d:
         31:0d:76:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:55 2026 by rpki-client