Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a3a2f33332d3333203d3e20323634393936.roa
File:                     323830343a333132343a3a2f33332d3333203d3e20323634393936.roa (raw, json)
Hash identifier:          o9AJaZNMAKvjJFYnXtLJK1qEk9a2Ty6thLjPbXxHmmg=
Subject key identifier:   45:28:E1:A4:65:EF:07:13:A8:51:50:AE:2E:AC:CF:2B:3C:33:08:4D
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       15EC08F782EC9B047A2297AE9445534AD5C10D3B
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a3a2f33332d3333203d3e20323634393936.roa
Signing time:             Thu 05 Feb 2026 09:43:50 +0000
ROA not before:           Thu 05 Feb 2026 09:38:50 +0000
ROA not after:            Thu 04 Feb 2027 09:43:50 +0000
asID:                     264996
IP address blocks:        2804:3124::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ec:08:f7:82:ec:9b:04:7a:22:97:ae:94:45:53:4a:d5:c1:0d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Feb  5 09:38:50 2026 GMT
            Not After : Feb  4 09:43:50 2027 GMT
        Subject: CN=4528E1A465EF0713A85150AE2EACCF2B3C33084D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ae:da:6b:a5:39:a5:04:32:73:db:81:49:cb:
                    52:88:b0:d2:4d:14:c9:0b:88:42:66:3f:ff:51:eb:
                    c9:db:4c:d8:c6:63:99:24:e3:bf:3e:6a:b5:73:ed:
                    36:85:45:74:47:34:55:3e:70:9c:17:de:c8:0a:b1:
                    e5:a1:bd:0e:6f:99:ca:af:a4:b6:f2:b6:5a:3d:f4:
                    8a:0d:9a:a9:e0:f0:85:79:5b:21:c8:50:6d:2b:17:
                    14:2b:4d:b4:e6:43:62:11:1a:4a:8b:df:4f:1a:95:
                    aa:43:3d:12:41:95:dc:d8:be:70:2b:fd:99:17:25:
                    44:47:29:f6:02:73:e5:1a:77:99:90:82:c0:18:fb:
                    b9:ee:d0:7e:5c:f7:64:23:1c:28:3a:47:59:1d:3a:
                    bf:da:e7:d8:d7:8b:ef:b0:34:17:bb:ef:3c:70:f8:
                    ef:55:13:6b:b1:ce:43:1e:fb:7b:55:4c:a6:67:67:
                    a0:73:db:f2:a6:1b:5a:64:cc:49:c1:e2:d1:67:24:
                    d6:ca:7d:cf:66:77:1d:34:65:a3:36:b2:9e:f5:6a:
                    d3:5e:87:6d:1e:3b:45:7b:c5:2f:e3:27:36:5a:2d:
                    ad:4c:f5:b3:62:2c:70:87:65:96:58:16:3d:fc:6b:
                    72:04:9e:48:25:bb:2e:0f:61:bb:58:77:d2:1f:3a:
                    4d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:28:E1:A4:65:EF:07:13:A8:51:50:AE:2E:AC:CF:2B:3C:33:08:4D
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a3a2f33332d3333203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124::/33

    Signature Algorithm: sha256WithRSAEncryption
         48:79:4c:d6:da:4a:27:58:fe:cc:98:39:61:20:11:35:88:1f:
         bc:44:4c:03:56:2b:6e:44:25:58:a8:47:1a:b1:1e:a5:b4:15:
         38:01:20:c5:09:5d:f4:98:70:11:ba:1f:ee:2a:4c:44:ff:f6:
         6f:f6:c6:a5:a3:72:5e:d0:b5:41:1c:82:2b:3c:09:6d:ac:3d:
         d4:0b:0f:fa:66:fd:94:19:1f:ee:2f:c6:a4:ee:f0:9f:e1:68:
         dc:46:0c:6f:f2:e4:64:a5:16:5f:48:08:4a:b9:8a:0e:25:eb:
         7e:1d:e5:84:b6:93:e6:f6:81:14:4c:99:2f:82:93:4c:1d:87:
         d6:36:a1:11:59:33:53:67:dc:fe:26:54:0f:6a:59:ba:42:0b:
         c9:9d:79:88:ae:60:30:21:26:d8:38:d6:e8:0b:87:5d:7f:32:
         6d:f9:c3:f5:d9:d5:fb:4c:a3:0e:cf:fa:49:77:55:d4:08:88:
         6f:3f:de:ca:76:e1:93:18:c9:18:67:2f:67:21:e7:c7:2a:54:
         9a:92:cb:07:08:a2:39:bd:c3:37:ac:24:a2:6d:c3:ac:2a:a2:
         72:cc:0b:33:39:dd:8b:03:bf:c3:79:04:6d:7c:59:84:68:76:
         f6:a0:bb:2b:b7:31:4d:0e:15:38:0d:2d:7d:fd:a0:be:41:b3:
         69:d1:c2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:17 2026 by rpki-client