Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/323830343a353766343a3a2f33322d3335203d3e20323638303937.roa
File:                     323830343a353766343a3a2f33322d3335203d3e20323638303937.roa (raw, json)
Hash identifier:          4FWpf+mDOmBY8pF+JOZacsfH6jfsyoe02kfbljtgJyY=
Subject key identifier:   47:2E:CA:BC:55:4C:0B:BB:0C:A9:D2:3F:3B:57:F0:03:C2:9C:38:E7
Certificate issuer:       /CN=A0C2C9C26175F7213ADA72D8BFF2959A6D661C60
Certificate serial:       73D018EC856A4DC4FEF9829F8A501A041AD6F4B3
Authority key identifier: A0:C2:C9:C2:61:75:F7:21:3A:DA:72:D8:BF:F2:95:9A:6D:66:1C:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/323830343a353766343a3a2f33322d3335203d3e20323638303937.roa
Signing time:             Thu 05 Feb 2026 10:46:18 +0000
ROA not before:           Thu 05 Feb 2026 10:41:18 +0000
ROA not after:            Thu 04 Feb 2027 10:46:18 +0000
asID:                     268097
IP address blocks:        2804:57f4::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.crl
                          rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:58:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d0:18:ec:85:6a:4d:c4:fe:f9:82:9f:8a:50:1a:04:1a:d6:f4:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0C2C9C26175F7213ADA72D8BFF2959A6D661C60
        Validity
            Not Before: Feb  5 10:41:18 2026 GMT
            Not After : Feb  4 10:46:18 2027 GMT
        Subject: CN=472ECABC554C0BBB0CA9D23F3B57F003C29C38E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5a:0c:87:55:5e:13:3d:c6:f5:b1:65:30:61:
                    8b:48:a4:ce:bb:79:2d:66:b0:5b:b0:0e:ae:23:9d:
                    7e:5c:58:54:64:16:10:de:06:8d:16:2b:f1:5e:25:
                    3e:60:63:2e:50:a9:7b:ed:55:d2:ca:34:b9:d1:d6:
                    e1:ab:58:25:e4:c1:ce:68:0b:85:f0:32:02:c6:b9:
                    4d:cd:0c:5f:9b:b1:84:1a:31:28:2a:61:92:c4:67:
                    ca:96:cd:66:1b:2b:81:c9:8a:4a:6d:76:88:bc:f6:
                    14:cb:bf:1e:8c:07:fa:65:1b:ef:4d:47:86:5a:8b:
                    ac:28:b1:2e:76:d8:36:bb:4b:7b:ce:db:58:13:7c:
                    82:1a:93:44:25:62:38:b0:f1:1d:af:0c:0c:1a:8a:
                    78:cb:44:fa:fb:5f:fc:93:01:f4:44:de:88:24:d8:
                    31:eb:98:41:0e:de:a4:be:bd:86:7c:44:b5:a4:ce:
                    98:75:b1:8b:ca:ca:7d:55:4d:0e:b4:cb:7b:29:46:
                    5e:89:e1:6e:de:84:de:33:d3:94:87:58:8d:1a:c3:
                    b1:ed:15:09:25:5d:cb:ba:68:d4:a3:f0:9d:ad:6f:
                    f0:92:f1:2f:22:07:a7:7e:ff:df:ff:95:0c:1f:97:
                    47:c1:12:8e:eb:bb:fe:0b:b8:bd:ca:a5:6c:26:21:
                    fd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2E:CA:BC:55:4C:0B:BB:0C:A9:D2:3F:3B:57:F0:03:C2:9C:38:E7
            X509v3 Authority Key Identifier:
                keyid:A0:C2:C9:C2:61:75:F7:21:3A:DA:72:D8:BF:F2:95:9A:6D:66:1C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/323830343a353766343a3a2f33322d3335203d3e20323638303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:23:51:67:63:98:25:72:76:8a:6a:4d:84:65:d8:6a:b0:26:
         7d:69:fd:02:71:78:b9:8a:96:34:ca:99:b1:05:4a:5b:7b:81:
         56:17:0b:3e:af:5a:a3:57:cf:37:c3:65:b9:59:e1:94:01:07:
         c1:57:73:a9:a3:0d:d9:3b:aa:ff:a0:26:31:c7:2b:e9:b7:8c:
         70:93:0f:ee:87:c5:80:d9:1e:0c:35:f3:7e:f7:69:05:b9:fb:
         cb:ac:52:28:3a:18:b5:0d:45:4e:86:f1:74:18:39:c8:cd:e7:
         f3:39:c4:9f:4f:4a:aa:0b:a3:3c:29:d9:19:34:94:f8:4f:ca:
         98:61:7a:b6:60:d2:67:f6:61:15:72:90:64:3e:c4:8e:53:3c:
         3b:f5:82:d5:3d:9e:f1:c1:30:e1:c2:96:8e:e2:1a:b7:ec:ae:
         0f:c1:61:34:c8:99:d6:eb:a9:4a:db:1d:3b:1c:ee:a0:61:ba:
         61:72:59:06:d5:25:e2:01:7f:6a:d9:8f:94:68:32:c4:35:3f:
         8f:7d:e6:86:38:94:14:44:c6:06:fb:db:b1:67:dc:f5:6a:58:
         71:7e:2b:b8:9a:3c:c7:1f:f4:b0:d8:8e:36:7c:de:13:ac:0b:
         d3:11:6b:41:c5:51:b0:a6:9f:80:ba:3e:02:82:69:76:21:af:
         0a:0a:b0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:20 2026 by rpki-client