Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/323830343a6630383a3a2f33322d3332203d3e20323633353633.roa
File:                     323830343a6630383a3a2f33322d3332203d3e20323633353633.roa (raw, json)
Hash identifier:          KM6GmVsDuUBAnOX7bap7g00vfpQKCZCS9ES96r2AoWM=
Subject key identifier:   8F:B8:C9:4B:69:AF:02:76:87:2B:B3:8D:77:9A:2C:18:28:02:BB:E9
Certificate issuer:       /CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
Certificate serial:       0BFC1F421E6A00D7E8F858076F0BC7F873C47374
Authority key identifier: 8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/323830343a6630383a3a2f33322d3332203d3e20323633353633.roa
Signing time:             Thu 05 Feb 2026 15:10:27 +0000
ROA not before:           Thu 05 Feb 2026 15:05:27 +0000
ROA not after:            Thu 04 Feb 2027 15:10:27 +0000
asID:                     263563
IP address blocks:        2804:f08::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl
                          rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:15:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:fc:1f:42:1e:6a:00:d7:e8:f8:58:07:6f:0b:c7:f8:73:c4:73:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
        Validity
            Not Before: Feb  5 15:05:27 2026 GMT
            Not After : Feb  4 15:10:27 2027 GMT
        Subject: CN=8FB8C94B69AF0276872BB38D779A2C182802BBE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0c:f6:cf:50:27:c0:0f:00:3b:dc:84:c8:49:
                    7a:2c:b0:e9:d0:78:d8:f4:99:9c:0d:bc:fc:b9:41:
                    f3:0b:fb:34:38:48:ee:ed:46:8c:b8:91:69:52:6e:
                    48:40:bc:21:e5:d3:26:e8:aa:63:a9:be:76:c4:bb:
                    46:40:7e:99:a7:82:33:e3:d4:63:c4:c1:8a:f6:68:
                    9a:62:64:e3:59:3b:b6:86:ae:48:d7:1a:74:99:ec:
                    0a:c1:f8:60:ac:96:b6:54:7b:a9:9c:5b:d3:ff:c3:
                    d6:e0:b9:41:62:54:3f:47:4e:61:3d:91:f6:3d:27:
                    1b:1b:64:96:47:28:8c:d0:cb:8f:d3:f9:43:f1:6c:
                    31:e9:14:1f:17:a7:85:f8:ba:ff:80:ff:31:4c:a4:
                    39:17:09:d5:f7:06:05:34:84:24:4c:c0:4e:21:c9:
                    b2:8c:df:dd:63:26:a5:04:18:83:fe:ed:a8:e8:1d:
                    8e:72:6d:52:cf:e1:93:e9:38:7f:f4:06:57:72:8e:
                    2c:41:8d:b7:ad:88:87:e9:0c:18:c4:a3:38:49:45:
                    01:4c:92:93:4a:98:12:ef:18:15:18:40:a6:46:5a:
                    06:67:17:ae:7e:6a:3c:01:ac:0f:ba:ae:72:c9:6b:
                    68:bf:dc:f4:fb:cb:40:fc:52:c5:25:1b:87:1e:32:
                    da:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B8:C9:4B:69:AF:02:76:87:2B:B3:8D:77:9A:2C:18:28:02:BB:E9
            X509v3 Authority Key Identifier:
                keyid:8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/323830343a6630383a3a2f33322d3332203d3e20323633353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f08::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:8c:4b:d3:35:06:8f:dc:5b:cb:30:e0:5a:4e:4b:ef:3d:0b:
         5b:a9:21:b6:94:30:66:c0:b5:18:e7:0e:ef:1a:4e:10:e3:fc:
         7b:1a:9a:fd:ba:1e:16:0f:36:c0:48:67:80:b2:87:5f:5f:da:
         a6:49:52:cb:f8:0e:6b:bc:68:e4:b9:41:2b:66:8b:89:37:01:
         e8:48:fe:34:f4:2d:03:55:28:bb:7c:2a:d6:84:3f:9c:4e:b4:
         c5:bb:d2:ea:d3:a5:5c:f8:b2:78:cb:34:c8:5f:3e:ce:4c:bd:
         52:c5:e1:27:f4:64:53:05:98:3b:25:c8:27:0f:59:72:ab:5c:
         32:13:b9:7d:ec:7b:50:b8:92:8f:de:56:59:30:60:3b:8a:f5:
         67:4d:7e:74:5d:f1:70:72:ab:ff:18:6d:3f:c0:04:1c:e4:5c:
         a2:b4:d3:ea:df:00:3d:70:23:08:cc:1a:db:ef:98:90:ef:2b:
         99:ce:a5:c3:07:45:34:5e:8d:ef:26:1a:8e:ea:a2:ec:33:25:
         52:d4:8a:de:8e:1f:05:3e:02:e0:80:03:c4:03:df:7f:3c:bf:
         bc:cf:4e:70:b5:3d:f0:46:cb:87:13:25:37:ab:16:00:c8:50:
         83:66:e6:74:79:0a:75:cb:6c:d9:ec:03:56:d7:19:4d:94:c4:
         9f:61:de:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:39:57 2026 by rpki-client