Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a633030303a3a2f33342d3334203d3e20323636313239.roa
File:                     323830343a336231383a633030303a3a2f33342d3334203d3e20323636313239.roa (raw, json)
Hash identifier:          f+Hv4VLR7y7Ep/IKTVvqMv8pUdJiKYJSedLJC5Odt4c=
Subject key identifier:   82:59:DC:ED:14:90:55:97:20:F9:77:03:34:80:D6:04:E4:1E:9A:22
Certificate issuer:       /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial:       06807CC5A9182E5B32B2B906FC68089858492152
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a633030303a3a2f33342d3334203d3e20323636313239.roa
Signing time:             Wed 04 Feb 2026 20:00:13 +0000
ROA not before:           Wed 04 Feb 2026 19:55:13 +0000
ROA not after:            Wed 03 Feb 2027 20:00:13 +0000
asID:                     266129
IP address blocks:        2804:3b18:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
                          rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:80:7c:c5:a9:18:2e:5b:32:b2:b9:06:fc:68:08:98:58:49:21:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
        Validity
            Not Before: Feb  4 19:55:13 2026 GMT
            Not After : Feb  3 20:00:13 2027 GMT
        Subject: CN=8259DCED1490559720F977033480D604E41E9A22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9c:dd:2d:56:f5:4e:1b:79:ee:9b:56:13:c1:
                    69:2d:a5:f3:8a:a6:37:d2:7b:c9:49:48:34:b0:88:
                    f2:5e:58:26:06:88:47:17:31:08:f6:a8:56:f7:da:
                    25:be:fc:dc:a5:11:14:59:f7:81:a0:cc:5d:78:b1:
                    5d:06:1b:be:8c:ee:a0:48:29:85:7c:5f:0e:52:a9:
                    07:b6:23:e4:60:ac:7d:08:a7:3d:64:05:0a:54:fb:
                    4f:95:a0:8c:e8:54:e9:04:4d:88:df:18:c6:9a:52:
                    dd:9b:f1:05:65:37:9c:77:98:1c:41:81:0e:ff:a0:
                    83:0f:9b:a3:3e:35:0b:d0:89:c5:3a:b3:fa:15:77:
                    0d:b5:9f:66:e7:cf:6f:55:9b:7d:bc:c1:17:ba:1e:
                    be:da:33:7e:9d:0b:ec:78:7b:27:51:e0:a3:15:ee:
                    97:da:c4:4c:81:5b:80:fd:8c:d1:c4:ca:9d:a1:65:
                    d6:34:bf:2e:a9:3d:e0:93:a1:fe:b9:1d:25:e6:91:
                    d1:bc:6a:d0:5a:5b:f1:ba:52:8e:c4:a0:78:10:3f:
                    a8:d5:85:00:d9:d8:61:ce:76:f0:69:9c:e5:a0:1e:
                    5d:0b:03:5d:f4:80:43:8d:b8:d1:68:2d:d5:b7:cb:
                    22:64:1d:9e:20:25:82:50:ac:05:db:c0:c2:32:d7:
                    2f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:59:DC:ED:14:90:55:97:20:F9:77:03:34:80:D6:04:E4:1E:9A:22
            X509v3 Authority Key Identifier:
                keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a633030303a3a2f33342d3334203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b18:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         68:17:d8:b9:c2:9a:19:bb:eb:df:6e:1f:22:95:ea:49:01:6a:
         cb:6e:74:39:bd:8a:d4:cb:7a:c3:19:0f:0f:29:fc:c1:f2:6f:
         49:ba:0b:b0:43:67:0c:7f:5f:58:63:7e:17:09:47:ed:7d:32:
         5e:e0:ec:d3:db:e7:36:38:56:85:42:00:ac:f0:6e:61:57:f4:
         50:9d:80:66:11:fc:0b:e7:44:07:d6:11:12:0f:a2:be:b1:97:
         81:8d:8d:04:24:ff:f8:9f:7f:66:15:13:17:66:37:45:f5:54:
         9e:49:fc:a6:39:d9:fa:2c:e7:6d:0c:1f:09:3d:c4:ef:22:f0:
         c4:ef:ba:3c:fe:f4:94:d8:05:64:b1:b7:09:97:c8:95:62:54:
         ae:35:e3:3f:17:21:9c:01:47:4f:c9:cc:55:d3:90:21:4a:a5:
         54:55:98:61:45:05:95:4b:34:89:5b:42:b8:e9:83:fc:75:88:
         f7:b0:12:44:54:e6:6a:40:40:5e:2c:6d:bf:ad:f2:b5:cb:87:
         b6:c2:f5:e9:78:ad:68:86:0c:e4:7f:fb:f1:1a:16:93:4f:cf:
         b5:35:30:ed:ce:68:61:3f:e5:88:49:cf:5b:c1:f9:34:82:23:
         c6:63:1c:2b:57:c4:c7:6f:96:37:85:e5:19:a9:43:ad:e8:c6:
         21:4c:6a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:14 2026 by rpki-client