Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/323830343a323231303a383030303a3a2f33342d3334203d3e20323634353839.roa
File:                     323830343a323231303a383030303a3a2f33342d3334203d3e20323634353839.roa (raw, json)
Hash identifier:          qIDqj0+MHuylRVmWsfabBOl0J0WnaOV9Y2r+cNjI5Sc=
Subject key identifier:   54:7E:8C:BD:CC:9C:8B:F4:37:00:8F:26:9A:14:B3:B4:DC:94:93:51
Certificate issuer:       /CN=0E88601104C6C43AC785175C29585EFD06974620
Certificate serial:       23A3254FC3EF5DF91D94EB19021FD1052BDC8F39
Authority key identifier: 0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/323830343a323231303a383030303a3a2f33342d3334203d3e20323634353839.roa
Signing time:             Thu 05 Feb 2026 09:43:54 +0000
ROA not before:           Thu 05 Feb 2026 09:38:54 +0000
ROA not after:            Thu 04 Feb 2027 09:43:54 +0000
asID:                     264589
IP address blocks:        2804:2210:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl
                          rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a3:25:4f:c3:ef:5d:f9:1d:94:eb:19:02:1f:d1:05:2b:dc:8f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E88601104C6C43AC785175C29585EFD06974620
        Validity
            Not Before: Feb  5 09:38:54 2026 GMT
            Not After : Feb  4 09:43:54 2027 GMT
        Subject: CN=547E8CBDCC9C8BF437008F269A14B3B4DC949351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cd:09:66:6b:27:97:be:05:8f:15:af:f4:b2:
                    75:60:79:61:7e:bc:ad:90:b1:1e:28:2e:01:d7:bb:
                    0d:00:28:9f:f8:52:43:4d:86:50:3a:38:a6:ae:8d:
                    84:fd:09:b6:a9:92:31:f0:69:3b:02:7c:88:84:2a:
                    2a:b4:66:11:f0:d5:2a:42:a5:73:b1:8b:a0:7a:3d:
                    67:34:0c:1f:bb:b0:55:20:b0:7a:7a:1f:5e:8f:10:
                    01:84:8c:80:89:09:d2:f9:fe:95:29:3f:70:b1:48:
                    84:72:34:71:23:f2:82:c0:c3:2c:8d:c2:9b:61:3b:
                    18:5c:fd:91:46:87:39:97:79:9a:d0:05:c2:37:18:
                    6a:1b:b2:44:27:e9:2d:f7:ce:98:9f:00:cf:94:92:
                    b6:00:b3:95:53:7a:1b:fa:56:ad:8f:34:90:1f:c9:
                    2e:c2:27:2f:a4:f8:7b:81:ca:db:c8:61:29:ff:2f:
                    4f:ef:00:90:c9:bf:6a:82:b2:20:fd:a6:ea:d8:e2:
                    74:fa:76:8e:14:4b:a6:e8:5b:8e:81:f0:b1:84:b9:
                    d2:af:68:f4:cb:22:9f:06:6b:9d:82:4b:2d:08:75:
                    06:8d:8e:85:67:af:80:21:e1:5e:4d:e8:cf:db:fe:
                    94:ea:c9:9e:18:34:ac:50:9b:09:98:81:ac:b4:90:
                    a0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7E:8C:BD:CC:9C:8B:F4:37:00:8F:26:9A:14:B3:B4:DC:94:93:51
            X509v3 Authority Key Identifier:
                keyid:0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/323830343a323231303a383030303a3a2f33342d3334203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2210:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ad:37:45:ce:b1:ba:a1:98:5a:c4:25:25:b4:78:0c:73:02:90:
         7a:bc:96:da:05:f3:c7:cc:0b:55:fc:ea:7f:f3:6c:c8:2d:b2:
         82:fb:93:7d:db:3f:2e:7a:17:59:3c:4d:46:d1:2b:c8:06:ab:
         bc:0d:a5:28:2a:45:77:e5:e2:26:97:09:22:cd:d4:d6:3f:db:
         0b:b2:59:e2:86:8f:76:b1:65:a5:de:4d:9f:a6:3d:6a:9b:6b:
         a4:22:3a:6a:3f:19:58:84:4d:a2:90:aa:86:cf:29:a0:5f:6a:
         6e:48:85:e2:a7:ab:18:50:8a:88:0c:3c:8d:21:a2:7e:d6:8d:
         d3:6b:c6:6f:07:63:af:4d:96:13:0c:17:ed:d4:b6:71:62:9b:
         22:50:51:1e:a4:3b:f0:75:35:fc:1e:28:e3:88:bb:e7:89:6d:
         f1:7d:25:72:66:5e:14:c0:be:e1:b7:8c:e3:32:40:37:04:f0:
         d8:3b:47:90:6f:39:56:cc:9b:8a:92:97:c0:df:de:24:55:b6:
         55:de:1c:d9:1f:51:2c:26:26:15:3c:d2:88:55:41:fe:d2:3d:
         f0:ce:3a:99:58:ab:05:e7:36:6f:73:fa:93:46:42:af:cf:99:
         9b:e2:33:da:ba:04:2c:ea:92:bf:d6:8e:67:88:77:1c:06:e3:
         ce:53:cd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:02:11 2026 by rpki-client