Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/1/323830343a356264633a3a2f33322d3438203d3e20323638383733.roa
File:                     323830343a356264633a3a2f33322d3438203d3e20323638383733.roa (raw, json)
Hash identifier:          Xf8T3rWe+FxTjr8ikC7NfvGxMKx5T5Gk+SabBMwokBU=
Subject key identifier:   E4:2D:40:8B:5C:8C:F7:7B:5D:0B:63:89:8F:2A:6E:4E:45:5F:5E:42
Certificate issuer:       /CN=7C2CFE10218610C1D6F2FB199A3A9B97D15A495F
Certificate serial:       77AAB2CC983D758853C1CD34318F8DFAA31624DE
Authority key identifier: 7C:2C:FE:10:21:86:10:C1:D6:F2:FB:19:9A:3A:9B:97:D1:5A:49:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C2CFE10218610C1D6F2FB199A3A9B97D15A495F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/1/323830343a356264633a3a2f33322d3438203d3e20323638383733.roa
Signing time:             Thu 05 Feb 2026 08:50:47 +0000
ROA not before:           Thu 05 Feb 2026 08:45:47 +0000
ROA not after:            Thu 04 Feb 2027 08:50:47 +0000
asID:                     268873
IP address blocks:        2804:5bdc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/1/7C2CFE10218610C1D6F2FB199A3A9B97D15A495F.crl
                          rsync://rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/1/7C2CFE10218610C1D6F2FB199A3A9B97D15A495F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C2CFE10218610C1D6F2FB199A3A9B97D15A495F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:45:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:aa:b2:cc:98:3d:75:88:53:c1:cd:34:31:8f:8d:fa:a3:16:24:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C2CFE10218610C1D6F2FB199A3A9B97D15A495F
        Validity
            Not Before: Feb  5 08:45:47 2026 GMT
            Not After : Feb  4 08:50:47 2027 GMT
        Subject: CN=E42D408B5C8CF77B5D0B63898F2A6E4E455F5E42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f4:6b:0f:68:05:26:fe:24:31:f8:73:6c:97:
                    87:22:ec:5a:ac:b9:77:51:6c:08:ef:91:16:c4:6a:
                    0c:63:46:e6:da:92:ce:50:4e:e1:f9:f5:c2:d4:c0:
                    fa:38:d3:fc:ad:19:59:2d:b2:67:b0:a7:2b:7c:de:
                    2d:3a:e8:fa:f0:dd:09:ca:8c:05:80:ff:a2:57:61:
                    ad:fb:62:87:22:58:e7:56:e9:44:37:4d:57:bb:f4:
                    3f:1b:02:3c:be:77:7a:eb:eb:bc:86:f3:a9:c0:6f:
                    a9:4e:65:16:72:bb:53:a2:93:75:a8:d1:90:cc:7f:
                    dc:f6:c3:20:c1:b9:42:0e:a6:25:1e:70:fe:8a:3f:
                    07:cf:83:55:dd:dc:01:9b:3f:16:d0:b9:bc:4f:0b:
                    83:ea:1b:92:50:f9:88:3b:08:0a:0a:fc:9e:e9:f7:
                    84:93:26:1d:06:c4:5f:ef:43:b0:4f:4f:b2:f1:28:
                    43:10:48:de:db:00:aa:f3:84:61:23:de:19:85:0c:
                    51:7f:d5:98:a4:2a:7e:c4:95:53:86:b7:66:70:a1:
                    b2:c2:f1:6a:2e:41:f5:68:bc:80:7c:44:f3:23:25:
                    9e:aa:81:c1:bd:4c:be:6c:9e:92:ab:cf:01:63:39:
                    c3:a0:28:cd:f3:62:43:93:1b:d2:a8:75:44:42:0a:
                    c5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2D:40:8B:5C:8C:F7:7B:5D:0B:63:89:8F:2A:6E:4E:45:5F:5E:42
            X509v3 Authority Key Identifier:
                keyid:7C:2C:FE:10:21:86:10:C1:D6:F2:FB:19:9A:3A:9B:97:D1:5A:49:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/1/7C2CFE10218610C1D6F2FB199A3A9B97D15A495F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C2CFE10218610C1D6F2FB199A3A9B97D15A495F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/1/323830343a356264633a3a2f33322d3438203d3e20323638383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:9c:5d:b3:08:fb:c6:8c:f6:50:73:d4:3a:56:87:4e:c1:f1:
         8a:ad:ce:11:cf:e2:b0:5d:ea:4f:3d:04:27:52:d7:f7:df:4a:
         50:40:a5:92:d3:e0:34:f4:ba:d8:76:58:52:dc:33:ba:92:c3:
         0b:81:32:fc:77:54:51:f6:b5:63:8c:39:9c:71:78:9d:b5:70:
         e6:ca:69:f6:f1:01:e7:d1:15:fc:3c:1a:c9:38:a3:f2:be:55:
         33:2d:1b:a3:c7:6b:84:62:6f:c4:75:9a:4e:f6:3a:98:c2:00:
         5c:e6:bd:8f:16:f8:15:c6:18:f9:eb:f2:44:e8:46:bb:23:5c:
         59:b4:0c:7c:1c:b9:ba:6a:b9:0d:46:e2:33:54:0c:0f:e2:b5:
         b6:fb:a5:a9:b9:04:fc:b0:74:eb:9d:00:2f:36:3a:85:1a:dc:
         62:05:59:45:6e:d9:05:10:ba:80:41:35:bf:6a:07:b1:af:71:
         1e:4a:e0:f4:90:b4:01:2a:d2:0c:41:39:0c:a4:a8:5a:05:6a:
         d7:3d:be:d4:37:67:b3:85:a5:f5:01:7d:3c:01:09:24:b1:10:
         08:b8:b3:f6:e2:ef:08:66:3c:2a:73:da:a9:cb:6b:db:aa:13:
         76:cb:90:2b:ed:a2:ff:8b:b0:ca:66:99:f8:43:6e:57:32:d6:
         98:7e:0d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:28 2026 by rpki-client