Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a383030303a3a2f33342d3334203d3e20323635393335.roa
File:                     323830343a343031633a383030303a3a2f33342d3334203d3e20323635393335.roa (raw, json)
Hash identifier:          OBHqqNIz3akR1irPnJT6tdTN25bwOM4IlaaFdhrY5NI=
Subject key identifier:   B1:1A:57:D2:0E:8A:3F:AF:D0:35:4F:92:FF:AF:9C:D8:A1:9B:E7:9B
Certificate issuer:       /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Certificate serial:       302A8033C0114686F64DE7B94CD784BA1F06A976
Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a383030303a3a2f33342d3334203d3e20323635393335.roa
Signing time:             Thu 05 Feb 2026 08:00:11 +0000
ROA not before:           Thu 05 Feb 2026 07:55:11 +0000
ROA not after:            Thu 04 Feb 2027 08:00:11 +0000
asID:                     265935
IP address blocks:        2804:401c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl
                          rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:2a:80:33:c0:11:46:86:f6:4d:e7:b9:4c:d7:84:ba:1f:06:a9:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
        Validity
            Not Before: Feb  5 07:55:11 2026 GMT
            Not After : Feb  4 08:00:11 2027 GMT
        Subject: CN=B11A57D20E8A3FAFD0354F92FFAF9CD8A19BE79B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4d:24:c2:89:04:1e:41:b0:52:a3:42:6d:05:
                    27:16:e4:a4:10:1c:f6:4d:53:d0:c0:15:32:62:1a:
                    49:7e:6a:22:8a:c7:48:de:4a:9f:4e:78:1d:7a:d3:
                    6e:61:c5:32:82:19:52:46:3f:bb:7b:06:cc:21:66:
                    eb:95:de:95:66:95:b6:f1:c8:54:30:0e:6c:a1:ad:
                    13:29:d9:25:b2:c1:ae:1e:31:03:9e:81:90:bc:02:
                    fa:04:18:50:67:ed:32:16:8c:cf:ca:75:b6:dd:6b:
                    e6:34:ee:e7:17:ee:1d:e3:08:ea:d2:3f:0e:f4:01:
                    7a:61:f2:6f:1d:8c:21:fa:01:10:7a:53:31:bb:ea:
                    d2:d8:92:f5:86:d7:9c:0f:6b:af:d3:da:1d:62:2f:
                    29:cd:f5:82:60:dc:f7:a9:ff:0c:2f:ab:ed:4e:cb:
                    48:ab:47:eb:7c:4c:7b:c1:cd:2f:5d:42:a9:f0:55:
                    69:63:6d:8f:e6:8f:19:c2:23:2a:5b:32:2b:65:20:
                    18:34:58:22:5b:77:8b:ca:f0:0c:97:c1:db:6a:bd:
                    ee:10:0f:49:c2:98:75:db:54:81:da:73:d6:08:28:
                    08:7e:1d:d8:23:90:7d:82:6d:2c:ec:5b:9c:86:2e:
                    4d:71:71:6d:4e:da:b6:c3:08:10:24:e0:9a:8e:ae:
                    21:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1A:57:D2:0E:8A:3F:AF:D0:35:4F:92:FF:AF:9C:D8:A1:9B:E7:9B
            X509v3 Authority Key Identifier:
                keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a383030303a3a2f33342d3334203d3e20323635393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:401c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7b:11:90:c9:8d:6c:27:6e:ce:d6:7b:e1:a2:b8:3d:0a:6f:d8:
         05:58:1c:95:05:2b:c3:cc:93:96:fe:fc:64:6c:5a:e9:99:cd:
         a1:80:72:a7:05:e3:1c:09:44:69:7f:99:e2:22:69:f5:43:be:
         fd:5d:e4:59:88:d6:87:60:02:b2:c6:8a:67:13:01:6a:fe:1d:
         89:8a:f9:c9:89:b7:72:2b:e9:5b:ce:96:e8:25:04:2d:b1:db:
         da:37:bc:da:7a:04:0d:ab:97:81:48:57:36:81:0a:24:8b:a2:
         0f:69:fd:c5:7c:76:54:60:ec:98:f1:16:e8:94:7c:5b:36:9a:
         44:82:76:89:57:98:76:34:4b:0a:1e:d5:6d:7e:01:fe:ed:e5:
         56:82:e2:aa:56:c9:62:81:08:fa:33:13:f7:fb:af:00:e5:b1:
         22:5e:ed:78:9c:bc:43:3f:53:8a:b1:b9:aa:58:f4:76:28:c5:
         d6:1b:3f:5c:3f:58:4f:7d:1e:eb:60:96:31:e0:ef:49:18:c0:
         07:f8:09:c3:61:6c:9b:e7:cc:28:6c:8d:73:89:b0:ce:fd:72:
         86:c6:d3:ec:75:fe:f4:13:f3:cb:45:9b:29:b0:f4:26:0e:2f:
         51:cd:5e:cf:df:0c:e5:ee:ae:e4:a1:e8:75:18:17:9f:59:ec:
         76:7a:03:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:25 2026 by rpki-client