Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/323830343a316131303a3a2f33322d3438203d3e203631383334.roa
File:                     323830343a316131303a3a2f33322d3438203d3e203631383334.roa (raw, json)
Hash identifier:          uebMC3u6k8f1xHjt5Qk6HDog8ghPzw/JJjGAnJV/s9Q=
Subject key identifier:   A8:52:9A:80:36:F6:2B:A7:AD:00:C3:15:D9:5E:43:A5:7E:61:2D:70
Certificate issuer:       /CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A
Certificate serial:       760DDEB6ADE87BC2A9CCBC4022F6522A217F3EF4
Authority key identifier: C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/323830343a316131303a3a2f33322d3438203d3e203631383334.roa
Signing time:             Thu 05 Feb 2026 09:50:48 +0000
ROA not before:           Thu 05 Feb 2026 09:45:48 +0000
ROA not after:            Thu 04 Feb 2027 09:50:48 +0000
asID:                     61834
IP address blocks:        2804:1a10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl
                          rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 10:27:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:0d:de:b6:ad:e8:7b:c2:a9:cc:bc:40:22:f6:52:2a:21:7f:3e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A
        Validity
            Not Before: Feb  5 09:45:48 2026 GMT
            Not After : Feb  4 09:50:48 2027 GMT
        Subject: CN=A8529A8036F62BA7AD00C315D95E43A57E612D70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0d:44:0f:fa:16:0d:2c:2b:44:96:c0:3a:45:
                    57:eb:37:4f:0d:af:ac:87:5d:22:2d:9e:27:48:d7:
                    69:8d:33:3b:5a:fd:9a:9f:fa:44:b3:8f:f5:9b:f1:
                    e3:7a:fa:76:bb:3d:10:f9:b4:e6:04:a2:5d:05:90:
                    4d:4b:7d:72:33:71:4f:10:2e:29:22:b9:bc:41:97:
                    c5:cb:be:81:fd:57:02:ae:d3:79:a2:bd:2d:ab:83:
                    8a:87:f0:68:03:49:ef:6f:d9:6f:ee:86:a2:ea:74:
                    11:65:5c:b5:47:b0:ea:ee:79:bb:45:80:ee:5a:a7:
                    0b:fa:2a:6d:f4:3b:f6:42:06:b6:4d:c4:ce:1e:3a:
                    23:3d:e2:38:1a:78:a3:7c:a3:b4:3d:2c:1c:70:e5:
                    12:15:95:ae:7d:67:99:90:d8:5a:ab:20:39:7c:bc:
                    2f:5a:f1:90:1a:4b:0a:16:42:1c:2e:1e:97:03:f4:
                    ae:9b:bf:32:3a:da:8f:c3:f3:d7:9d:65:95:9d:ff:
                    d2:cc:33:d6:90:7e:71:d4:88:ca:af:13:a1:85:6b:
                    4f:c5:b7:ac:8a:65:05:4f:7b:c8:7b:73:6d:8b:88:
                    c1:57:96:5a:7b:d1:16:d8:0f:be:cf:24:05:2f:a6:
                    f1:0d:af:73:d7:98:4d:c3:0e:2a:1e:ff:a8:c7:f4:
                    65:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:52:9A:80:36:F6:2B:A7:AD:00:C3:15:D9:5E:43:A5:7E:61:2D:70
            X509v3 Authority Key Identifier:
                keyid:C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/323830343a316131303a3a2f33322d3438203d3e203631383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:42:2d:69:07:c5:a6:ea:4b:ec:75:be:08:d2:2d:01:ff:64:
         18:f9:c4:1e:a7:09:d6:0d:07:79:51:41:37:e8:22:b4:1c:bb:
         0d:c9:ff:cf:76:2e:a2:e1:89:d6:ef:91:18:2c:51:24:1f:4a:
         a4:93:af:8b:aa:78:20:99:3a:01:f4:be:e5:27:fa:00:ba:3c:
         3f:22:58:be:73:ec:c8:6b:cc:c6:9b:4a:3e:db:f3:0f:5f:82:
         6e:bd:45:25:0f:53:c8:bb:61:9b:d9:6d:4a:49:d1:bb:1c:93:
         76:d3:52:23:b1:a3:58:53:c6:24:37:c2:e8:c4:a2:2a:0b:2d:
         c5:ac:56:27:e9:2f:f9:06:1c:6a:67:2c:bd:86:24:34:81:ec:
         f7:54:f7:27:f0:da:86:e7:3f:e4:95:cf:b2:1c:1f:3d:44:c1:
         59:00:73:9f:04:b1:96:bd:28:62:94:2f:51:c5:7b:4e:05:d9:
         ca:98:9e:36:69:02:88:0f:36:89:89:e3:ff:09:d1:bc:cd:e7:
         78:81:27:d4:78:ae:34:df:83:52:62:9d:50:78:06:e3:8e:3f:
         4a:fc:a5:c3:33:80:2f:4c:83:95:60:01:d0:b9:ee:0e:de:e3:
         73:63:dc:1c:8d:eb:7e:3b:c8:49:dc:f8:c7:fd:04:f6:50:26:
         78:94:f8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:13:58 2026 by rpki-client