Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/323830343a323231303a383030303a3a2f33332d3333203d3e20323634353839.roa
File:                     323830343a323231303a383030303a3a2f33332d3333203d3e20323634353839.roa (raw, json)
Hash identifier:          86KhuW4r58Bd3ntJ3+W9VPub26mxDw3AeKe4X0bkqCg=
Subject key identifier:   A8:28:04:13:AC:E4:15:30:45:53:7C:AF:57:83:9A:3D:C2:5F:60:A1
Certificate issuer:       /CN=0E88601104C6C43AC785175C29585EFD06974620
Certificate serial:       682072BD276075CFF5D852526EE83114BF8D80BE
Authority key identifier: 0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/323830343a323231303a383030303a3a2f33332d3333203d3e20323634353839.roa
Signing time:             Thu 05 Feb 2026 09:43:55 +0000
ROA not before:           Thu 05 Feb 2026 09:38:55 +0000
ROA not after:            Thu 04 Feb 2027 09:43:55 +0000
asID:                     264589
IP address blocks:        2804:2210:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl
                          rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:20:72:bd:27:60:75:cf:f5:d8:52:52:6e:e8:31:14:bf:8d:80:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E88601104C6C43AC785175C29585EFD06974620
        Validity
            Not Before: Feb  5 09:38:55 2026 GMT
            Not After : Feb  4 09:43:55 2027 GMT
        Subject: CN=A8280413ACE4153045537CAF57839A3DC25F60A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bd:fc:75:4b:33:b3:ef:9e:5b:59:80:20:7c:
                    ca:21:b6:b9:ac:dc:d5:3e:e7:48:5d:38:35:9d:6a:
                    69:b6:a8:26:86:31:bc:d4:0c:7e:c1:8e:b5:06:84:
                    25:46:9a:03:95:25:2f:25:b4:1f:00:f8:66:4f:31:
                    e5:b0:c0:32:18:58:8e:5a:42:78:4d:ca:d4:dd:21:
                    ac:80:09:bd:bc:fd:06:44:25:b5:92:0d:a7:92:73:
                    13:80:41:1b:27:0b:31:26:d4:7f:3c:ad:03:3b:fd:
                    67:8c:85:48:ab:7b:e9:bc:90:73:1d:94:f5:d8:2d:
                    37:f8:11:fe:83:73:c1:be:98:c7:69:7a:86:96:8d:
                    7b:5b:c7:42:01:4e:bc:07:d8:84:12:19:8e:e0:9a:
                    e9:38:dc:bd:d4:e7:ae:1a:a7:7a:90:b2:56:79:96:
                    02:80:e3:6a:0a:af:65:cb:73:87:9e:9b:f0:71:6c:
                    67:35:10:91:2c:3e:3b:a8:db:80:dc:28:83:61:84:
                    24:98:da:db:aa:cf:df:ee:7d:a5:da:ce:31:cb:5f:
                    3f:5c:1c:0f:2f:42:a6:56:14:fe:aa:0d:4e:11:4c:
                    b4:cd:43:df:31:c9:4b:96:ee:4a:e8:c5:f2:f8:99:
                    51:68:a6:3a:fc:87:16:e2:4e:b3:2e:64:c3:06:f2:
                    69:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:28:04:13:AC:E4:15:30:45:53:7C:AF:57:83:9A:3D:C2:5F:60:A1
            X509v3 Authority Key Identifier:
                keyid:0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/323830343a323231303a383030303a3a2f33332d3333203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2210:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         3c:70:4a:1d:4f:04:84:59:0b:4c:69:f9:52:50:80:f4:22:4e:
         48:4a:c6:2d:ca:17:61:c6:02:e4:5c:91:41:ff:c4:c5:58:e9:
         cf:71:66:66:98:e8:fc:4f:06:ad:a4:1c:f3:ca:3a:15:c5:6f:
         8d:74:96:67:3d:c9:65:f1:4e:93:a3:5b:41:fb:91:30:5a:c0:
         be:a7:67:87:25:ef:c9:5a:01:72:b4:e9:b0:bf:34:66:bb:bb:
         73:d6:34:e0:f2:3b:e1:e4:c5:0f:44:50:a6:3a:93:3f:04:6a:
         c1:95:75:6d:da:d9:92:f9:2e:c7:db:4b:86:91:a8:e2:d5:3b:
         df:0c:74:4f:56:e5:69:be:47:9f:9c:6a:f5:71:fb:77:1c:ee:
         bf:76:6f:2b:aa:9e:2a:ce:ab:5a:27:c9:89:d4:03:cd:fb:8f:
         b2:8f:dd:0f:64:5b:46:b7:d7:e7:de:8a:17:f7:51:70:83:2e:
         49:f7:00:ed:5b:be:45:ab:45:4c:a8:a0:5e:bf:12:0a:9c:f9:
         3a:7d:0b:9f:ab:4c:e1:2f:68:81:26:a7:86:ec:ad:65:ae:1c:
         9c:db:3f:3d:2b:7d:1b:18:f0:c4:51:b9:77:81:dc:d8:9c:2b:
         ee:cf:dd:09:a4:07:a3:29:01:b4:5b:f0:27:a8:97:57:23:a5:
         7b:ef:7f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:02:04 2026 by rpki-client