Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/323830343a3164633a3a2f33322d3438203d3e203533323032.roa
File:                     323830343a3164633a3a2f33322d3438203d3e203533323032.roa (raw, json)
Hash identifier:          zzSay1aEVkCdcWyA0cE7AE1kWF31+mMRB6n/IEIA0ek=
Subject key identifier:   40:7F:22:C9:F2:42:EE:6F:3B:00:F5:D7:1C:4E:57:56:E7:33:59:7A
Certificate issuer:       /CN=FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA
Certificate serial:       430FE6BD24B376327D60EF523D40ADD2DF2536C0
Authority key identifier: FB:48:35:D4:1A:7B:3A:7F:4D:75:86:CB:20:38:F3:C8:2A:77:56:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/323830343a3164633a3a2f33322d3438203d3e203533323032.roa
Signing time:             Thu 05 Feb 2026 10:19:19 +0000
ROA not before:           Thu 05 Feb 2026 10:14:19 +0000
ROA not after:            Thu 04 Feb 2027 10:19:19 +0000
asID:                     53202
IP address blocks:        2804:1dc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.crl
                          rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:47:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:0f:e6:bd:24:b3:76:32:7d:60:ef:52:3d:40:ad:d2:df:25:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA
        Validity
            Not Before: Feb  5 10:14:19 2026 GMT
            Not After : Feb  4 10:19:19 2027 GMT
        Subject: CN=407F22C9F242EE6F3B00F5D71C4E5756E733597A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:71:1f:58:3c:49:66:20:7c:9b:4d:af:b7:4e:
                    30:04:dc:cb:70:1e:c5:35:07:5f:db:56:5c:ee:b3:
                    cc:48:8e:ad:36:a6:2b:e8:9f:73:5f:b3:7b:10:93:
                    85:ef:f9:82:aa:a2:90:bb:46:a1:d4:df:2b:24:fa:
                    08:a7:bb:4d:26:4d:9f:60:a9:d3:23:c0:f6:f8:a3:
                    19:59:88:c6:98:2a:36:ed:50:eb:b2:35:27:4e:8d:
                    be:d1:a4:94:fb:6e:3b:e6:50:57:a0:22:48:fe:f7:
                    4e:57:55:ff:e6:5d:57:8f:04:36:91:38:58:9d:94:
                    d8:6d:02:39:01:26:8a:fd:bf:43:b1:fc:32:9a:89:
                    6c:ba:26:c0:8d:62:a5:39:88:41:df:7e:2d:cb:4a:
                    6e:37:b6:9e:63:fe:5c:c2:4d:09:60:6c:f1:41:7c:
                    88:9e:16:e4:9a:10:b5:6e:ad:92:42:30:71:21:d0:
                    c0:58:5c:0d:1b:ed:60:46:dc:65:a7:3d:ed:b1:e0:
                    e4:1d:5a:aa:c1:45:35:fa:15:a5:04:39:46:71:57:
                    05:3b:23:63:c3:97:8c:68:d6:62:48:c3:b2:ed:02:
                    21:e4:16:de:f4:95:c9:3d:56:b6:8e:fa:79:0d:a5:
                    ba:6e:85:e9:8d:19:1d:8e:a1:73:fa:eb:a2:22:bc:
                    a2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7F:22:C9:F2:42:EE:6F:3B:00:F5:D7:1C:4E:57:56:E7:33:59:7A
            X509v3 Authority Key Identifier:
                keyid:FB:48:35:D4:1A:7B:3A:7F:4D:75:86:CB:20:38:F3:C8:2A:77:56:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/323830343a3164633a3a2f33322d3438203d3e203533323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:bf:97:30:31:3e:c8:6a:50:97:02:e4:70:cc:0d:db:ae:b6:
         d4:c4:d1:e9:c4:62:1f:31:5b:7d:7a:c8:d3:2b:ee:1a:d0:a0:
         49:59:e2:59:c7:2c:de:fc:ed:ab:4e:c4:78:66:2e:7b:f2:82:
         91:03:54:ee:b0:d5:ec:85:54:c4:ce:52:93:c3:4c:40:20:14:
         6a:58:aa:a6:87:40:76:88:f2:ef:42:7a:bd:8b:0c:23:82:fa:
         4f:64:63:88:fc:76:f4:50:24:59:e5:2b:eb:d1:32:28:c2:5c:
         ca:e3:3a:ca:35:d5:09:25:33:fe:c0:18:f6:6a:72:61:cc:be:
         9a:0b:a3:92:ac:7e:83:77:ee:4b:c6:ce:cd:1a:bc:58:c5:8b:
         c0:2e:47:b3:ef:74:b2:cd:eb:c2:8c:52:53:c8:fb:03:ab:c8:
         47:09:4a:1a:14:73:2a:2b:55:7c:cd:9c:9a:dc:84:de:8a:75:
         cc:7e:54:6f:db:55:b8:d1:0e:43:82:16:15:6b:3e:6f:52:78:
         1f:73:d3:3a:93:51:d1:58:71:c1:59:8a:ca:7f:7b:c8:70:b6:
         32:3b:05:8f:e0:33:85:25:d1:f3:82:68:32:c3:cb:60:1e:bb:
         db:17:d7:1f:51:40:45:49:87:c9:de:4b:7f:84:76:03:0d:42:
         1a:70:98:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:38:08 2026 by rpki-client