Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a3a2f33322d3332203d3e20323634393936.roa
File:                     323830343a333132343a3a2f33322d3332203d3e20323634393936.roa (raw, json)
Hash identifier:          +ok8pZnifwC3NrPOfhfFi3490Cak+qqozPWTgAHJf3U=
Subject key identifier:   E2:0B:1B:88:FE:43:3E:3B:F9:65:76:E5:C2:EB:30:18:E5:CE:34:1C
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       3A4D267DE3DE19826D2F8BC3A9EEB244D8B9DD39
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a3a2f33322d3332203d3e20323634393936.roa
Signing time:             Thu 05 Feb 2026 09:43:52 +0000
ROA not before:           Thu 05 Feb 2026 09:38:52 +0000
ROA not after:            Thu 04 Feb 2027 09:43:52 +0000
asID:                     264996
IP address blocks:        2804:3124::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:4d:26:7d:e3:de:19:82:6d:2f:8b:c3:a9:ee:b2:44:d8:b9:dd:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Feb  5 09:38:52 2026 GMT
            Not After : Feb  4 09:43:52 2027 GMT
        Subject: CN=E20B1B88FE433E3BF96576E5C2EB3018E5CE341C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:13:00:fd:04:3b:c2:7f:02:c0:73:f7:92:f3:
                    ee:79:9f:cc:b1:24:91:fa:16:b8:59:0a:35:62:aa:
                    a2:6e:78:9c:d5:b7:73:a2:e7:44:20:02:e4:4c:c4:
                    fa:08:4c:22:65:8f:9d:77:59:2d:61:42:36:f5:b7:
                    62:af:29:2b:16:70:33:dd:3d:75:e8:37:8a:8f:c1:
                    1c:25:0d:71:62:ee:c8:ab:ef:8d:14:52:0d:9d:33:
                    b8:95:3f:2b:50:ef:06:d4:ce:23:d0:b7:5b:b8:5c:
                    74:de:71:65:5d:bb:1e:8e:53:4f:14:35:c6:2f:24:
                    b7:fc:ea:b7:0a:8c:fc:34:80:3a:72:5f:b9:c6:f1:
                    3b:2f:e7:ba:2e:2c:28:ae:2d:52:52:93:70:f3:f5:
                    73:82:ec:94:b1:62:f3:57:f4:48:db:d0:5f:37:0f:
                    b7:12:69:0f:88:c2:91:23:79:14:31:a1:b5:c8:99:
                    82:18:73:33:73:38:4d:46:5d:08:13:ef:14:a0:8f:
                    31:e4:36:f2:1a:40:71:77:48:7c:64:23:b4:2c:d4:
                    f3:cb:10:70:c2:2c:26:12:e7:cd:d7:e5:00:f7:47:
                    7f:50:8a:6a:20:cc:e6:33:5b:0f:62:c4:78:df:f0:
                    7e:ba:4e:28:4b:ef:0f:98:c3:da:c6:b5:06:0c:7c:
                    10:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0B:1B:88:FE:43:3E:3B:F9:65:76:E5:C2:EB:30:18:E5:CE:34:1C
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a3a2f33322d3332203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:c5:36:ec:28:a6:b7:b4:78:d5:38:57:05:7b:ee:c0:98:44:
         e7:e6:32:19:16:5b:39:8f:9d:75:94:41:16:2b:4b:49:b1:b1:
         ce:b3:3a:c1:da:2a:71:b1:d3:1e:d0:bb:9a:91:a3:44:ee:72:
         e8:94:22:07:64:3b:ff:ad:c4:52:a9:33:0b:b3:84:86:e2:10:
         30:1f:bd:b2:23:41:3c:2b:70:21:d0:05:f7:79:10:ab:b5:e3:
         f7:64:aa:7e:92:76:60:7f:6a:74:e6:03:72:7b:a9:db:3f:58:
         30:31:31:8b:ef:3a:15:7d:9e:69:e0:08:70:41:fd:99:9e:2a:
         2f:9a:f6:4e:da:cb:84:48:96:65:2a:f5:cc:07:01:b2:00:80:
         81:90:07:10:f5:ae:07:8e:11:df:d7:25:0a:c1:18:f3:26:69:
         f7:2d:98:c7:ea:13:31:14:49:df:43:d7:17:27:c7:b0:a2:e5:
         61:c5:9e:53:bc:95:51:5b:f6:79:02:b0:e2:97:46:50:0d:89:
         2a:43:8f:97:9b:ce:f3:bb:d2:6b:37:67:a8:6b:24:b9:47:7c:
         d9:57:84:30:d1:29:e3:48:4e:5a:e4:c9:46:bd:68:70:cd:28:
         43:6c:94:5c:a1:66:5d:05:bc:8c:95:1b:8e:65:dd:05:40:8d:
         c2:52:9a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:37:36 2026 by rpki-client