Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/323830343a313732343a3a2f33322d3332203d3e20323633313236.roa
File:                     323830343a313732343a3a2f33322d3332203d3e20323633313236.roa (raw, json)
Hash identifier:          vVV22j58Yfsh1Qfzn7vhAD/HigVdo4SwqakmT60rrPs=
Subject key identifier:   D9:FE:CB:7E:B1:12:E0:44:D7:EA:D7:88:D0:9C:48:DA:12:AA:19:F9
Certificate issuer:       /CN=4CA21A8D928CABC0C9EF13850635B31EAF3C2642
Certificate serial:       66029064FF1CCB6324D0AC3F3AD724962F5495D6
Authority key identifier: 4C:A2:1A:8D:92:8C:AB:C0:C9:EF:13:85:06:35:B3:1E:AF:3C:26:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/323830343a313732343a3a2f33322d3332203d3e20323633313236.roa
Signing time:             Wed 04 Feb 2026 20:00:11 +0000
ROA not before:           Wed 04 Feb 2026 19:55:11 +0000
ROA not after:            Wed 03 Feb 2027 20:00:11 +0000
asID:                     263126
IP address blocks:        2804:1724::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl
                          rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:02:90:64:ff:1c:cb:63:24:d0:ac:3f:3a:d7:24:96:2f:54:95:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CA21A8D928CABC0C9EF13850635B31EAF3C2642
        Validity
            Not Before: Feb  4 19:55:11 2026 GMT
            Not After : Feb  3 20:00:11 2027 GMT
        Subject: CN=D9FECB7EB112E044D7EAD788D09C48DA12AA19F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:33:44:74:84:13:a5:36:f8:ff:08:22:c5:38:
                    1b:27:cc:5e:0a:f9:17:93:99:06:15:0e:33:d0:f4:
                    69:bf:c3:04:da:c2:07:ec:7d:38:80:ca:33:d0:80:
                    c1:85:5a:1d:20:f7:65:5e:d7:5b:f8:d6:7a:d6:ca:
                    87:80:85:9d:f8:ea:ae:40:2f:e7:28:c0:85:c0:de:
                    bc:ec:46:69:22:f1:4f:19:c4:3e:8b:58:7c:cb:42:
                    3b:78:ac:17:71:58:2c:67:eb:2a:ab:9d:9b:73:04:
                    23:c2:34:79:a7:ea:17:05:66:1d:26:7c:c1:88:05:
                    b2:f1:f2:e2:4e:fb:e2:4e:cc:ff:e5:73:9f:4e:d5:
                    9a:84:d4:b2:8e:b7:aa:ba:94:75:65:40:3a:b2:f6:
                    7f:b8:f4:9d:ff:99:d4:2c:33:fa:1c:5a:71:fe:b2:
                    22:e3:a2:22:88:87:04:58:1c:d1:92:22:74:98:9e:
                    e7:65:a0:0c:e3:bc:d8:1f:e0:c1:0c:f5:2e:d2:ac:
                    7b:fc:82:78:13:f3:22:f7:70:f0:d4:9a:bd:0c:3e:
                    85:53:43:d8:4c:85:6e:eb:86:00:c5:8c:e6:5e:06:
                    2a:3b:c4:7d:f4:06:67:8a:06:67:ed:55:5e:fa:9e:
                    d6:49:05:87:16:33:36:16:f9:bd:fa:eb:0b:90:f9:
                    53:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FE:CB:7E:B1:12:E0:44:D7:EA:D7:88:D0:9C:48:DA:12:AA:19:F9
            X509v3 Authority Key Identifier:
                keyid:4C:A2:1A:8D:92:8C:AB:C0:C9:EF:13:85:06:35:B3:1E:AF:3C:26:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/323830343a313732343a3a2f33322d3332203d3e20323633313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1724::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:6e:e9:bd:e3:3a:c9:c0:e7:62:4f:37:39:0f:f6:65:c2:53:
         f3:f5:d6:5f:07:72:09:f5:6f:b0:9b:d5:e9:f3:f0:55:25:18:
         2d:73:48:ae:3b:c9:f2:d0:15:eb:36:e4:74:6f:95:f5:43:2d:
         1c:d4:34:0b:76:25:05:00:ba:83:b7:ab:71:e9:4a:4e:2e:c8:
         df:c6:76:d2:ea:c8:53:8e:a7:d1:5d:62:19:2b:03:18:4a:1a:
         e8:64:40:62:cd:1c:ae:71:fe:0f:1d:2e:3c:1b:b4:12:18:be:
         c2:fa:53:82:b0:f0:73:fe:39:d0:4e:f3:53:01:09:1b:69:40:
         db:a4:99:95:ed:09:a2:ef:eb:9c:a6:3d:ad:d9:cd:78:2c:0a:
         6b:c0:b4:df:fd:77:94:fd:6b:4a:a9:3b:ee:84:b2:27:3a:c5:
         b2:0b:77:d1:24:ad:c1:83:7a:b5:6e:65:e0:99:37:c9:e7:5f:
         8c:be:c9:c7:c0:33:a3:94:9a:77:f2:a8:50:dc:5d:0d:65:da:
         cb:ba:c7:22:ee:b5:6e:0c:34:8a:69:74:46:eb:d7:1d:e6:c9:
         54:2e:6a:1f:a4:07:f5:e9:71:4b:7b:3b:c7:97:50:13:88:06:
         92:35:c8:bf:4d:7d:fe:1b:3c:10:cf:39:22:e2:5e:0d:0e:4f:
         13:c4:ac:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:41:54 2026 by rpki-client