Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/323830343a323265303a3a2f33322d3333203d3e20323634313238.roa
File:                     323830343a323265303a3a2f33322d3333203d3e20323634313238.roa (raw, json)
Hash identifier:          i5kqMJj5Re9MKG4bCJb0tSLu8Htz6jaaK0aM4n5iUzk=
Subject key identifier:   55:1F:A0:D5:6F:68:FA:65:9D:43:BF:A9:03:8E:43:D3:AD:03:FC:BD
Certificate issuer:       /CN=E3C11484C8B4CD3F766170F9E324672A733D9604
Certificate serial:       4683A0219B027737D5355A85C0668FE3F2A782B5
Authority key identifier: E3:C1:14:84:C8:B4:CD:3F:76:61:70:F9:E3:24:67:2A:73:3D:96:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3C11484C8B4CD3F766170F9E324672A733D9604.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/323830343a323265303a3a2f33322d3333203d3e20323634313238.roa
Signing time:             Thu 05 Feb 2026 10:55:13 +0000
ROA not before:           Thu 05 Feb 2026 10:50:13 +0000
ROA not after:            Thu 04 Feb 2027 10:55:13 +0000
asID:                     264128
IP address blocks:        2804:22e0::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.crl
                          rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3C11484C8B4CD3F766170F9E324672A733D9604.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:55:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:83:a0:21:9b:02:77:37:d5:35:5a:85:c0:66:8f:e3:f2:a7:82:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3C11484C8B4CD3F766170F9E324672A733D9604
        Validity
            Not Before: Feb  5 10:50:13 2026 GMT
            Not After : Feb  4 10:55:13 2027 GMT
        Subject: CN=551FA0D56F68FA659D43BFA9038E43D3AD03FCBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bb:c7:71:d3:8f:ea:04:05:c8:58:0b:0f:04:
                    56:db:f0:1a:26:b0:3c:2d:14:02:53:50:43:dd:06:
                    37:76:26:bf:fb:b6:ef:ea:f0:5c:c5:03:5b:f2:18:
                    53:a9:33:d7:a7:dd:43:cc:bf:4e:b9:51:bb:cd:4e:
                    a9:c2:84:00:57:1c:40:62:e7:18:c9:09:5e:bb:87:
                    f2:96:e7:8d:aa:67:1c:60:02:dd:97:8b:7f:8d:10:
                    83:84:04:91:51:43:5a:71:1e:62:83:24:0e:0b:4b:
                    95:e0:8c:c8:75:30:1a:35:11:94:58:aa:e0:28:41:
                    9f:7f:14:11:e3:d3:46:40:7a:2c:1a:aa:cc:f1:40:
                    1c:24:5b:00:68:fe:1c:ce:57:32:e4:8d:23:6d:ef:
                    5d:b4:86:e6:86:36:2e:c1:43:6c:f3:6c:53:27:37:
                    34:31:bf:bc:3b:45:56:c6:74:33:a2:33:e1:98:03:
                    cf:76:37:7f:66:6f:31:3b:08:7d:52:8d:3b:65:42:
                    a9:37:67:75:4e:23:67:c4:5d:3a:b2:d7:ff:c0:5e:
                    40:76:09:d6:94:f5:0b:f0:ab:af:5d:de:22:96:03:
                    45:72:83:86:5d:40:4a:83:8f:c3:26:ed:a8:b7:f3:
                    ea:f3:66:83:03:ba:64:e1:d7:00:2d:62:c6:50:36:
                    03:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1F:A0:D5:6F:68:FA:65:9D:43:BF:A9:03:8E:43:D3:AD:03:FC:BD
            X509v3 Authority Key Identifier:
                keyid:E3:C1:14:84:C8:B4:CD:3F:76:61:70:F9:E3:24:67:2A:73:3D:96:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3C11484C8B4CD3F766170F9E324672A733D9604.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/323830343a323265303a3a2f33322d3333203d3e20323634313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:a1:c1:f0:44:8c:58:c5:7f:d1:a9:8e:0c:20:4e:dd:d9:26:
         1b:f1:13:4a:db:f9:da:96:b8:52:28:b8:90:2e:43:74:70:79:
         bb:2b:d0:7d:1f:3c:8c:17:0b:18:85:fa:10:da:a5:72:35:8c:
         75:c7:41:09:d2:fb:73:b0:dc:d7:27:9b:cc:b5:0e:d0:ae:00:
         ca:38:cb:29:8e:7f:f2:f8:96:f1:09:cd:c3:04:4a:95:7c:2d:
         2d:fa:0d:ee:69:7b:7c:ac:d3:47:c0:6f:89:b6:de:78:c6:f7:
         98:ac:5f:66:9d:cd:ff:35:76:2e:d7:20:28:3f:c1:ee:82:22:
         d3:ba:1b:0d:f8:8a:56:0a:f0:57:76:ae:45:97:19:0b:c5:f5:
         20:b6:b1:bc:19:eb:2a:69:f5:0c:97:f5:73:04:7a:34:97:30:
         f4:0c:0b:ea:59:a9:c0:28:66:f7:97:1a:4a:16:97:f3:aa:97:
         61:88:2c:90:e6:44:c6:80:c3:b0:32:95:52:06:d2:b7:02:4a:
         a8:15:f9:65:fe:cf:6f:6b:9e:09:84:6a:44:b8:a4:ae:32:74:
         38:c0:c0:ed:28:2c:26:1d:b2:e8:6c:b7:74:67:db:28:9e:86:
         f9:22:b1:7c:59:67:ba:f8:5a:e3:14:16:a1:60:d5:c0:a6:d4:
         f4:af:23:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:01:53 2026 by rpki-client