Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/323830343a346431383a3a2f33332d3333203d3e20323637343132.roa
File:                     323830343a346431383a3a2f33332d3333203d3e20323637343132.roa (raw, json)
Hash identifier:          HfCkDnPigmhuegfVPtp3C7dKrMu8NyfGlzZO53gNIc0=
Subject key identifier:   E9:FA:56:DC:09:9C:B5:8B:0D:33:4D:3C:5A:E3:B2:BA:A4:75:5A:EB
Certificate issuer:       /CN=07FCA7D1215090422388794719E04DCE9A5F39AA
Certificate serial:       60AD41A82E7DD96063002BB0A3C43D09EFDBD9B7
Authority key identifier: 07:FC:A7:D1:21:50:90:42:23:88:79:47:19:E0:4D:CE:9A:5F:39:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/323830343a346431383a3a2f33332d3333203d3e20323637343132.roa
Signing time:             Mon 05 Jan 2026 18:46:48 +0000
ROA not before:           Mon 05 Jan 2026 18:41:48 +0000
ROA not after:            Mon 04 Jan 2027 18:46:48 +0000
asID:                     267412
IP address blocks:        2804:4d18::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.crl
                          rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ad:41:a8:2e:7d:d9:60:63:00:2b:b0:a3:c4:3d:09:ef:db:d9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07FCA7D1215090422388794719E04DCE9A5F39AA
        Validity
            Not Before: Jan  5 18:41:48 2026 GMT
            Not After : Jan  4 18:46:48 2027 GMT
        Subject: CN=E9FA56DC099CB58B0D334D3C5AE3B2BAA4755AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a3:e7:aa:c4:4e:c3:92:82:23:7c:a0:ef:1d:
                    44:40:57:9d:ae:95:91:6a:04:30:e2:3d:91:de:a5:
                    59:9c:cc:c8:bf:42:2b:f5:e8:57:a5:6a:94:01:54:
                    be:c1:58:64:53:cd:a5:76:87:27:16:70:40:a6:fa:
                    cf:a2:f2:5c:21:69:3b:e4:d5:d4:8b:10:48:c8:c7:
                    0f:c9:2f:88:e2:d6:43:12:65:9c:50:1e:08:e3:bf:
                    91:bb:a0:4e:b7:47:0e:3c:79:60:aa:8d:54:bb:99:
                    82:30:44:c9:63:3f:2b:ef:02:da:84:82:27:14:b7:
                    20:8c:17:62:93:93:d9:31:33:82:28:b6:66:6f:11:
                    52:ee:17:26:c7:21:37:e2:30:e5:9f:dd:61:65:e0:
                    78:a3:27:b9:39:93:6f:84:e2:48:65:f0:b6:83:f7:
                    61:06:89:98:bc:f7:4f:25:55:82:e6:dc:d3:6c:b9:
                    7e:73:90:a2:a4:9d:d3:48:e0:3d:55:e6:6f:43:03:
                    f1:d5:c3:f3:a3:7a:30:ba:5b:56:f0:85:70:af:f3:
                    bd:14:05:80:42:ca:ec:5b:ff:3c:dc:ff:84:9a:85:
                    83:99:68:5f:85:4e:19:59:e5:be:81:67:17:bf:9b:
                    7f:4b:7b:69:47:62:c5:98:a9:b0:cd:e3:8b:b0:a6:
                    25:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FA:56:DC:09:9C:B5:8B:0D:33:4D:3C:5A:E3:B2:BA:A4:75:5A:EB
            X509v3 Authority Key Identifier:
                keyid:07:FC:A7:D1:21:50:90:42:23:88:79:47:19:E0:4D:CE:9A:5F:39:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/323830343a346431383a3a2f33332d3333203d3e20323637343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d18::/33

    Signature Algorithm: sha256WithRSAEncryption
         96:e1:2f:3e:50:d1:15:8a:32:3e:c3:3d:31:d6:b8:29:7c:93:
         e7:4b:c2:2f:a8:b8:bc:bb:2a:d9:52:c8:13:00:86:dd:03:ba:
         4a:01:b5:8b:ca:a6:8f:5d:55:51:82:d0:00:13:ef:9e:50:02:
         31:cc:77:cf:d5:08:68:81:e1:a7:23:f9:f5:92:61:c5:58:f7:
         88:89:90:67:36:54:65:c6:1a:07:f9:34:d0:64:bf:a9:b5:b3:
         81:19:92:84:18:90:5d:24:da:a4:79:c2:af:c2:0a:cf:67:40:
         ed:b2:30:b7:ac:64:c3:2b:9c:7d:51:10:ee:a9:38:14:5c:40:
         52:4b:e6:cb:9b:ee:14:16:6c:64:c4:71:13:eb:22:5a:c3:da:
         d2:35:18:9e:fa:40:cb:4a:74:d2:78:95:97:e1:40:17:56:55:
         01:28:8d:32:20:ec:ce:0c:de:f7:97:52:8e:ec:16:63:92:0d:
         81:89:fc:bf:e3:c1:b7:c9:70:97:17:2a:2f:96:04:d8:4b:eb:
         60:59:aa:95:6a:97:27:cb:c0:da:3a:68:0c:34:ca:41:e4:a8:
         77:dd:4e:1d:15:4e:d8:1f:e8:51:ec:b9:df:53:c3:cc:be:4b:
         22:74:e8:d8:6b:82:b6:b5:d6:a2:ee:26:2a:fb:26:9b:20:a3:
         bc:65:53:32
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYK1BqC592WBjACuwo8Q9Ce/b2bcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdGQ0E3RDEyMTUwOTA0MjIzODg3OTQ3MTlFMDREQ0U5
QTVGMzlBQTAeFw0yNjAxMDUxODQxNDhaFw0yNzAxMDQxODQ2NDhaMDMxMTAvBgNV
BAMTKEU5RkE1NkRDMDk5Q0I1OEIwRDMzNEQzQzVBRTNCMkJBQTQ3NTVBRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCo+eqxE7DkoIjfKDvHURAV52u
lZFqBDDiPZHepVmczMi/Qiv16FelapQBVL7BWGRTzaV2hycWcECm+s+i8lwhaTvk
1dSLEEjIxw/JL4ji1kMSZZxQHgjjv5G7oE63Rw48eWCqjVS7mYIwRMljPyvvAtqE
gicUtyCMF2KTk9kxM4IotmZvEVLuFybHITfiMOWf3WFl4HijJ7k5k2+E4khl8LaD
92EGiZi8908lVYLm3NNsuX5zkKKkndNI4D1V5m9DA/HVw/OjejC6W1bwhXCv870U
BYBCyuxb/zzc/4SahYOZaF+FThlZ5b6BZxe/m39Le2lHYsWYqbDN44uwpiUhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6fpW3AmctYsNM008WuOyuqR1WuswHwYDVR0j
BBgwFoAUB/yn0SFQkEIjiHlHGeBNzppfOaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVQ2RkE1dk42VXkzTTFnZzRhYmNScGJKdW44VHlBTDllN0M4ZGhyS2Nh
Q0IvMC8wN0ZDQTdEMTIxNTA5MDQyMjM4ODc5NDcxOUUwNERDRTlBNUYzOUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA3RkNBN0QxMjE1MDkwNDIy
Mzg4Nzk0NzE5RTA0RENFOUE1RjM5QUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVUNkZBNXZONlV5M00xZ2c0YWJjUnBiSnVuOFR5QUw5ZTdDOGRocktjYUNCLzAv
MzIzODMwMzQzYTM0NjQzMTM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM3
MzQzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARNGAAwDQYJKoZIhvcNAQELBQADggEBAJbhLz5Q
0RWKMj7DPTHWuCl8k+dLwi+ouLy7KtlSyBMAht0DukoBtYvKpo9dVVGC0AAT755Q
AjHMd8/VCGiB4acj+fWSYcVY94iJkGc2VGXGGgf5NNBkv6m1s4EZkoQYkF0k2qR5
wq/CCs9nQO2yMLesZMMrnH1REO6pOBRcQFJL5sub7hQWbGTEcRPrIlrD2tI1GJ76
QMtKdNJ4lZfhQBdWVQEojTIg7M4M3veXUo7sFmOSDYGJ/L/jwbfJcJcXKi+WBNhL
62BZqpVqlyfLwNo6aAw0ykHkqHfdTh0VTtgf6FHsud9Tw8y+SyJ06Nhrgra11qLu
Jir7Jpsgo7xlUzI=
-----END CERTIFICATE-----
Generated at Thu Feb 19 11:38:11 2026 by rpki-client