Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a633030303a3a2f33342d3334203d3e20323635393335.roa
File:                     323830343a343031633a633030303a3a2f33342d3334203d3e20323635393335.roa (raw, json)
Hash identifier:          OCsEcACfuvtGrDuTTiwuUJYuYSKLgkK1iRwH2rQNkxI=
Subject key identifier:   E2:B6:4B:40:54:94:48:0F:91:5C:E8:14:40:79:03:67:7D:3C:88:D7
Certificate issuer:       /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Certificate serial:       0140D6C05E39C5F93F9E64A0218959D6DC4272E8
Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a633030303a3a2f33342d3334203d3e20323635393335.roa
Signing time:             Thu 05 Feb 2026 08:00:11 +0000
ROA not before:           Thu 05 Feb 2026 07:55:11 +0000
ROA not after:            Thu 04 Feb 2027 08:00:11 +0000
asID:                     265935
IP address blocks:        2804:401c:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl
                          rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:40:d6:c0:5e:39:c5:f9:3f:9e:64:a0:21:89:59:d6:dc:42:72:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
        Validity
            Not Before: Feb  5 07:55:11 2026 GMT
            Not After : Feb  4 08:00:11 2027 GMT
        Subject: CN=E2B64B405494480F915CE814407903677D3C88D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cb:0b:a0:e6:ff:ab:0a:55:bd:13:8b:b4:51:
                    f3:69:b1:f3:0b:86:cc:02:c8:cc:7d:ff:f0:d3:ce:
                    88:90:d5:2e:92:5a:6c:14:ac:8f:ae:d3:93:99:f7:
                    f4:bb:98:af:9b:16:20:a8:e8:fd:fe:6a:a8:70:ea:
                    28:3e:74:aa:ec:45:7e:e3:b3:dd:bc:ac:02:2c:e0:
                    fe:83:02:79:f2:66:ce:72:92:99:ed:3f:6e:0c:01:
                    8e:0a:58:d7:cd:c1:c2:74:d5:62:9f:7d:ad:20:fa:
                    e6:fe:2c:58:9f:83:4f:1b:69:81:62:e5:ad:a1:ff:
                    b4:99:3b:73:ad:ad:85:c3:b1:a8:b2:4a:61:0e:3f:
                    11:11:aa:a8:4a:d4:26:c8:22:0d:b0:cf:94:2b:e3:
                    42:19:e8:38:20:24:00:48:15:f9:2a:13:23:79:cc:
                    4a:11:a4:70:27:7f:a8:71:fa:99:b5:50:d1:f7:8c:
                    ee:01:13:21:71:3f:0b:ae:55:ad:dd:b3:00:c5:13:
                    50:10:81:ce:13:65:e9:b1:06:5b:6e:54:b0:9b:a1:
                    1e:dd:59:8c:f4:a3:7c:97:53:66:58:09:c7:6c:8e:
                    81:cf:bf:5c:44:bb:4b:37:dd:ef:81:f5:c3:65:f5:
                    d3:5e:97:93:8e:fc:d1:0a:90:f3:5f:6f:88:88:a3:
                    da:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B6:4B:40:54:94:48:0F:91:5C:E8:14:40:79:03:67:7D:3C:88:D7
            X509v3 Authority Key Identifier:
                keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a633030303a3a2f33342d3334203d3e20323635393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:401c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         67:2d:f6:88:a3:5d:7e:e9:aa:3e:a4:48:d3:c6:9e:f0:5b:9f:
         72:af:8c:63:7d:6f:f1:a3:57:d8:c6:74:2d:1c:4c:a9:ee:45:
         06:b8:32:de:8b:de:03:ed:a7:fe:11:cd:cc:fe:25:3b:e0:31:
         d6:94:18:f9:d7:94:19:83:6a:fc:4e:ec:97:46:36:56:c0:c7:
         02:a0:46:79:14:9c:05:7e:1c:f1:06:2c:0d:e0:e5:5a:9a:7c:
         c4:39:75:e0:2f:70:97:02:99:01:99:40:3a:bd:a8:6e:93:7a:
         14:9f:f7:aa:46:15:bc:38:71:c8:66:af:01:05:6f:b0:74:a2:
         a2:9b:3a:76:de:00:f2:e0:68:3f:ed:fb:cc:94:ed:4f:5e:4e:
         29:85:f1:55:f1:d4:5c:ef:d8:e2:c6:b3:25:dc:d4:31:e5:4e:
         91:25:7a:43:66:87:e4:28:ba:92:10:12:b1:dc:57:08:a3:11:
         2a:aa:f1:ca:8e:13:0c:9c:c8:fc:5c:35:d0:08:4d:60:1b:79:
         26:e9:50:29:14:5e:34:1a:d8:91:1d:9d:7c:6f:91:3b:52:2a:
         6c:21:dd:bb:5a:84:d9:2b:62:83:35:c8:7e:53:d6:73:c1:83:
         a1:f4:c3:10:9f:0c:47:8e:19:b8:d6:cb:f9:b3:c0:9c:ef:2a:
         3a:e5:b3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:26 2026 by rpki-client