Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/323830343a323161303a3a2f33322d3438203d3e20323634353635.roa
File:                     323830343a323161303a3a2f33322d3438203d3e20323634353635.roa (raw, json)
Hash identifier:          lJcFKWsPgwGzvx2EWYMBKk/P8ls9fbPWHfgJAbojuCk=
Subject key identifier:   63:50:07:CD:92:6F:15:59:14:33:28:C1:F8:2A:BC:96:56:40:6B:5C
Certificate issuer:       /CN=AC40A1FA2C73E550F9412754FDDAA22E993A0D26
Certificate serial:       70E0B31724F839B4039FF99DC871145791AE9EF5
Authority key identifier: AC:40:A1:FA:2C:73:E5:50:F9:41:27:54:FD:DA:A2:2E:99:3A:0D:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/323830343a323161303a3a2f33322d3438203d3e20323634353635.roa
Signing time:             Fri 06 Feb 2026 00:46:42 +0000
ROA not before:           Fri 06 Feb 2026 00:41:42 +0000
ROA not after:            Fri 05 Feb 2027 00:46:42 +0000
asID:                     264565
IP address blocks:        2804:21a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl
                          rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e0:b3:17:24:f8:39:b4:03:9f:f9:9d:c8:71:14:57:91:ae:9e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC40A1FA2C73E550F9412754FDDAA22E993A0D26
        Validity
            Not Before: Feb  6 00:41:42 2026 GMT
            Not After : Feb  5 00:46:42 2027 GMT
        Subject: CN=635007CD926F1559143328C1F82ABC9656406B5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:15:c6:04:3c:96:cc:68:94:8d:9d:22:28:a1:
                    01:36:11:36:8c:19:5a:6e:76:70:05:55:1d:75:98:
                    14:0e:93:c4:3e:1c:bc:28:1c:a8:9c:1c:dd:88:ab:
                    dc:f6:19:f1:2f:f9:6f:4d:b1:8f:76:54:7b:d2:5a:
                    55:96:d4:f1:99:e3:94:1a:52:ed:a1:96:4f:87:d4:
                    30:9d:99:f1:00:c0:21:1b:15:90:0e:7f:3f:86:06:
                    ad:a7:31:b2:a0:0c:bb:88:4c:bd:db:cb:d7:2b:6c:
                    a3:6d:f9:21:32:fc:07:b5:99:38:f3:56:8f:32:1d:
                    58:53:cb:c1:de:73:35:b7:8e:09:b0:6f:f0:20:d9:
                    eb:fb:fc:ce:fc:8d:a5:c5:eb:6c:81:b8:1e:1a:bf:
                    e2:95:d2:b2:53:33:93:6a:64:0b:29:e0:ac:58:f0:
                    a5:de:c0:3d:67:c1:4f:1b:94:ed:76:96:d9:14:8f:
                    78:42:25:f4:64:d9:75:fa:b9:c2:f9:1b:6e:99:9f:
                    6f:4d:96:05:8e:68:c4:8c:42:8a:7b:2b:d4:94:91:
                    fe:06:2a:54:8c:98:29:6d:c5:46:c5:b3:9a:54:d9:
                    00:05:18:91:eb:36:dd:77:eb:ac:10:80:9b:0d:d2:
                    e6:3d:91:e1:c5:d8:ca:05:2b:50:4e:a8:c8:8e:84:
                    b7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:50:07:CD:92:6F:15:59:14:33:28:C1:F8:2A:BC:96:56:40:6B:5C
            X509v3 Authority Key Identifier:
                keyid:AC:40:A1:FA:2C:73:E5:50:F9:41:27:54:FD:DA:A2:2E:99:3A:0D:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/323830343a323161303a3a2f33322d3438203d3e20323634353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:f1:83:90:49:2e:71:7d:93:08:49:a7:0d:67:82:80:33:1c:
         45:af:c2:cb:9a:e7:59:a9:e3:54:aa:2b:94:a9:74:76:4e:fc:
         cf:90:12:b0:e7:c3:3a:02:f3:25:63:64:53:04:03:b6:7c:2c:
         eb:0f:07:e0:3a:6b:d8:82:94:d7:e7:2a:e3:ec:f1:a2:70:d2:
         7a:e1:56:5d:47:d9:f7:b0:04:51:43:9d:3f:f5:81:e7:b0:71:
         96:74:cb:42:19:4d:71:79:92:ac:0f:1a:a6:e2:41:98:3f:46:
         ee:d2:3f:c8:fe:ef:d9:36:2a:4e:67:ff:8b:86:7e:16:1b:2e:
         75:d7:70:d8:ac:45:26:50:f5:19:8d:a8:2f:a9:17:99:4a:41:
         3a:0a:90:24:1a:0f:27:1f:b5:ed:29:f1:9d:77:05:cd:72:30:
         75:e8:ea:54:44:da:03:94:b5:79:53:15:85:8c:89:73:bb:0c:
         b9:84:32:d5:44:64:6a:22:c0:ea:53:26:f5:cc:0b:db:e5:b3:
         a5:c4:5a:f0:65:32:64:ed:60:23:b3:5c:c7:bd:65:4d:0e:37:
         22:14:2c:18:96:65:e1:e6:1e:0c:97:56:d1:e1:92:4f:fc:6a:
         8f:75:73:2b:3b:36:0e:32:50:88:49:3b:a5:b9:e2:72:ab:d7:
         42:13:0e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:55:39 2026 by rpki-client