Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/323830343a346431383a3a2f33342d3334203d3e20323637343132.roa
File:                     323830343a346431383a3a2f33342d3334203d3e20323637343132.roa (raw, json)
Hash identifier:          Fzmm0aHqi+f+RdHnLE7wJissmQaCZI+XxQCKdEF9p40=
Subject key identifier:   B7:44:BF:43:EE:D5:97:7F:26:CA:C9:F5:D2:59:89:4E:D5:6B:3A:FA
Certificate issuer:       /CN=07FCA7D1215090422388794719E04DCE9A5F39AA
Certificate serial:       2484B839ED072FB8E9C7CEA0823418AF0D252489
Authority key identifier: 07:FC:A7:D1:21:50:90:42:23:88:79:47:19:E0:4D:CE:9A:5F:39:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/323830343a346431383a3a2f33342d3334203d3e20323637343132.roa
Signing time:             Mon 05 Jan 2026 18:46:47 +0000
ROA not before:           Mon 05 Jan 2026 18:41:47 +0000
ROA not after:            Mon 04 Jan 2027 18:46:47 +0000
asID:                     267412
IP address blocks:        2804:4d18::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.crl
                          rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:84:b8:39:ed:07:2f:b8:e9:c7:ce:a0:82:34:18:af:0d:25:24:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07FCA7D1215090422388794719E04DCE9A5F39AA
        Validity
            Not Before: Jan  5 18:41:47 2026 GMT
            Not After : Jan  4 18:46:47 2027 GMT
        Subject: CN=B744BF43EED5977F26CAC9F5D259894ED56B3AFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f6:c2:cd:17:ed:1e:53:5b:83:3e:2a:2f:78:
                    2e:47:ea:8b:b4:e5:d9:1b:17:7c:f4:70:03:21:70:
                    f3:c9:23:ce:18:9c:98:34:79:d2:51:c0:f6:28:b1:
                    f9:01:95:a4:a8:53:2d:e2:fd:7c:fd:c9:01:69:7a:
                    22:0e:64:66:56:11:48:db:52:03:9a:4b:bd:8a:54:
                    c9:51:a3:12:85:50:ce:23:c7:e9:99:66:ce:bd:c0:
                    a3:3a:51:81:04:ce:88:24:be:09:0a:ac:0a:85:c9:
                    1e:ba:55:dd:86:81:40:b4:02:e7:c6:15:f7:a2:d8:
                    e0:1f:4b:42:82:c8:dd:45:23:6f:ab:ce:48:56:a7:
                    a7:02:72:bf:d1:b8:50:31:ad:4e:32:64:9a:4d:85:
                    b1:0f:87:66:85:4c:26:52:d2:84:97:1e:99:e9:d8:
                    fa:30:e3:f1:fb:d7:9c:91:8f:44:63:88:86:54:db:
                    60:bf:98:3c:64:e8:cf:41:f9:3a:5e:40:58:2c:7c:
                    e2:51:95:3e:17:e4:55:d2:59:9f:34:03:13:90:fd:
                    fd:b0:11:29:25:f6:54:a5:c3:f6:8c:2a:25:3b:f1:
                    41:e5:0d:b2:3b:57:93:c8:c3:69:a5:3b:8b:0f:ad:
                    c0:81:84:82:2c:1a:f0:5f:03:2e:5d:b7:f4:60:a3:
                    ba:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:44:BF:43:EE:D5:97:7F:26:CA:C9:F5:D2:59:89:4E:D5:6B:3A:FA
            X509v3 Authority Key Identifier:
                keyid:07:FC:A7:D1:21:50:90:42:23:88:79:47:19:E0:4D:CE:9A:5F:39:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/323830343a346431383a3a2f33342d3334203d3e20323637343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d18::/34

    Signature Algorithm: sha256WithRSAEncryption
         d4:0b:7d:bf:e3:37:74:01:f1:f2:cf:ec:d3:28:67:2c:cf:c9:
         a3:53:55:00:3a:9b:9d:3a:c4:ff:d0:fd:1f:dc:89:d9:4f:f0:
         ff:71:51:40:53:7d:f3:a6:b9:c7:33:8c:73:d5:73:de:c3:74:
         69:12:bd:0b:67:a9:e0:06:2f:a2:d6:c3:5e:0c:32:41:91:fb:
         6e:9c:f9:40:1d:e4:48:62:fb:fc:46:81:6c:9c:dd:e3:67:8b:
         1d:79:ae:43:c0:74:9d:8f:b6:0c:a0:4d:29:7e:7b:56:c1:7a:
         32:de:c3:fd:6d:0c:e7:03:67:5c:1c:10:81:73:91:82:56:8f:
         0a:be:7b:38:c9:62:2e:35:a6:a3:b0:b4:c7:7e:e2:87:1a:62:
         f5:07:51:c5:ca:71:b2:97:0d:0a:29:da:fa:35:07:eb:ec:64:
         d7:00:d6:13:22:ab:16:65:a4:8b:a9:06:af:dd:24:8b:4f:98:
         32:c9:f4:69:11:6b:f5:f0:d0:40:fc:8f:9f:59:d6:f1:81:74:
         52:5d:77:c1:70:ee:a3:c1:f7:d6:96:04:cc:b5:97:59:cf:5c:
         52:2d:dd:1a:58:aa:f2:03:5c:1d:cc:6b:e8:a4:fe:08:53:b3:
         e9:93:e3:4f:2a:72:ca:51:b8:ec:dd:cc:12:37:a9:7b:b6:75:
         d0:c2:d1:de
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJIS4Oe0HL7jpx86ggjQYrw0lJIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdGQ0E3RDEyMTUwOTA0MjIzODg3OTQ3MTlFMDREQ0U5
QTVGMzlBQTAeFw0yNjAxMDUxODQxNDdaFw0yNzAxMDQxODQ2NDdaMDMxMTAvBgNV
BAMTKEI3NDRCRjQzRUVENTk3N0YyNkNBQzlGNUQyNTk4OTRFRDU2QjNBRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC69sLNF+0eU1uDPioveC5H6ou0
5dkbF3z0cAMhcPPJI84YnJg0edJRwPYosfkBlaSoUy3i/Xz9yQFpeiIOZGZWEUjb
UgOaS72KVMlRoxKFUM4jx+mZZs69wKM6UYEEzogkvgkKrAqFyR66Vd2GgUC0AufG
Ffei2OAfS0KCyN1FI2+rzkhWp6cCcr/RuFAxrU4yZJpNhbEPh2aFTCZS0oSXHpnp
2Pow4/H715yRj0RjiIZU22C/mDxk6M9B+TpeQFgsfOJRlT4X5FXSWZ80AxOQ/f2w
ESkl9lSlw/aMKiU78UHlDbI7V5PIw2mlO4sPrcCBhIIsGvBfAy5dt/Rgo7rTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUt0S/Q+7Vl38mysn10lmJTtVrOvowHwYDVR0j
BBgwFoAUB/yn0SFQkEIjiHlHGeBNzppfOaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVQ2RkE1dk42VXkzTTFnZzRhYmNScGJKdW44VHlBTDllN0M4ZGhyS2Nh
Q0IvMC8wN0ZDQTdEMTIxNTA5MDQyMjM4ODc5NDcxOUUwNERDRTlBNUYzOUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA3RkNBN0QxMjE1MDkwNDIy
Mzg4Nzk0NzE5RTA0RENFOUE1RjM5QUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVUNkZBNXZONlV5M00xZ2c0YWJjUnBiSnVuOFR5QUw5ZTdDOGRocktjYUNCLzAv
MzIzODMwMzQzYTM0NjQzMTM4M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM3
MzQzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARNGAAwDQYJKoZIhvcNAQELBQADggEBANQLfb/j
N3QB8fLP7NMoZyzPyaNTVQA6m506xP/Q/R/cidlP8P9xUUBTffOmucczjHPVc97D
dGkSvQtnqeAGL6LWw14MMkGR+26c+UAd5Ehi+/xGgWyc3eNnix15rkPAdJ2Ptgyg
TSl+e1bBejLew/1tDOcDZ1wcEIFzkYJWjwq+ezjJYi41pqOwtMd+4ocaYvUHUcXK
cbKXDQop2vo1B+vsZNcA1hMiqxZlpIupBq/dJItPmDLJ9GkRa/Xw0ED8j59Z1vGB
dFJdd8Fw7qPB99aWBMy1l1nPXFIt3RpYqvIDXB3Ma+ik/ghTs+mT408qcspRuOzd
zBI3qXu2ddDC0d4=
-----END CERTIFICATE-----
Generated at Thu Feb 19 15:49:53 2026 by rpki-client