Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/323830343a316362633a383030303a3a2f33342d3334203d3e203631363732.roa
File:                     323830343a316362633a383030303a3a2f33342d3334203d3e203631363732.roa (raw, json)
Hash identifier:          UNt5/WZlBPiWvPCdFZVzNPUDfCNvxIMLw4NU+LBTLkg=
Subject key identifier:   D8:0D:F0:A1:19:70:44:B7:A0:94:3F:15:AC:F4:F5:E8:E2:14:49:3A
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       4188FF4417403DF066DA7436F1EE5995A16F655E
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/323830343a316362633a383030303a3a2f33342d3334203d3e203631363732.roa
Signing time:             Thu 05 Feb 2026 19:00:36 +0000
ROA not before:           Thu 05 Feb 2026 18:55:36 +0000
ROA not after:            Thu 04 Feb 2027 19:00:36 +0000
asID:                     61672
IP address blocks:        2804:1cbc:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl
                          rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:35:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:88:ff:44:17:40:3d:f0:66:da:74:36:f1:ee:59:95:a1:6f:65:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Feb  5 18:55:36 2026 GMT
            Not After : Feb  4 19:00:36 2027 GMT
        Subject: CN=D80DF0A1197044B7A0943F15ACF4F5E8E214493A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:03:8a:b2:ac:e7:54:c9:02:f4:f8:50:0d:ae:
                    eb:8a:92:06:e4:83:e7:13:dc:5d:29:e4:5d:98:5d:
                    f7:6a:b7:90:78:f7:3c:4a:4f:a8:74:38:53:e1:8f:
                    6e:84:a3:79:67:96:f8:46:1e:60:c0:d0:be:3c:36:
                    e6:54:5a:1a:da:a5:a5:88:65:66:33:6e:5a:6d:70:
                    4f:3b:77:41:cf:fb:9a:90:b7:95:c9:72:6e:bc:37:
                    79:0d:ad:f4:74:64:78:93:a2:60:1e:2e:f7:f8:93:
                    96:74:a4:e3:f4:9b:0c:66:b8:d2:0c:a3:b0:a1:55:
                    b9:41:58:e0:44:a9:32:07:be:c1:1c:e7:40:c3:21:
                    f3:b6:03:52:e9:de:23:6c:03:99:fe:1f:00:1f:d8:
                    05:cc:8f:f2:e1:0b:a3:07:3a:dd:ca:8a:03:1f:f7:
                    e9:ac:61:8e:da:51:9d:3d:b9:d3:1d:84:25:96:ca:
                    58:25:5d:c8:92:eb:ea:01:d7:b5:ab:99:ed:1f:a7:
                    73:a4:e1:2f:89:b7:ff:87:6b:81:4b:ee:1d:46:76:
                    0b:88:92:bc:5f:f2:6b:b6:05:c9:aa:3d:9c:db:d9:
                    df:3f:83:4f:71:f5:fa:ed:0b:dd:2e:e7:5c:4b:4b:
                    5d:17:da:82:8e:28:12:65:86:08:fa:39:e4:20:5d:
                    c5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0D:F0:A1:19:70:44:B7:A0:94:3F:15:AC:F4:F5:E8:E2:14:49:3A
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/323830343a316362633a383030303a3a2f33342d3334203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cbc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         03:54:6a:05:52:52:0c:4c:2c:25:8d:27:9b:eb:1a:87:c7:f8:
         9a:b7:36:e6:21:d7:87:2e:32:0b:1a:ee:e4:3b:b3:4e:91:82:
         dc:45:22:86:42:e1:cc:bf:31:81:28:73:bd:ad:51:ec:85:9d:
         dc:fa:d4:05:d1:8b:5e:41:bc:14:91:19:de:cb:ac:53:c0:45:
         cc:41:2a:42:18:62:88:1c:3a:43:b7:b5:7c:fc:9b:1c:2f:92:
         29:8a:77:4f:f0:84:2f:c9:5a:fa:9f:c6:bf:95:5b:79:54:60:
         6d:09:8a:2b:47:ff:2b:45:ea:3b:d3:95:f1:75:0b:c6:c1:86:
         61:fc:d2:a6:b7:2e:dd:e7:b4:c7:49:09:c5:02:75:d5:35:39:
         fa:84:2d:fa:7b:98:12:43:d4:75:6c:61:1b:9f:0f:23:eb:18:
         39:16:a9:e6:3e:28:cb:92:44:d7:0f:f4:fb:45:2f:83:81:0b:
         b0:55:3d:44:a0:9e:1f:59:68:d9:6c:61:c1:b7:29:6c:cc:27:
         90:6e:0f:52:15:4d:52:7a:91:01:a2:77:23:50:2d:28:65:b5:
         82:3f:dd:5b:10:72:98:97:f1:11:63:47:85:0e:3d:2f:00:97:
         85:d8:f7:a0:96:28:06:db:76:36:ec:8b:8c:aa:00:54:d1:21:
         d6:d7:91:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:20:39 2026 by rpki-client