Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/323830313a38343a3a2f33322d3438203d3e20323633333030.roa
File:                     323830313a38343a3a2f33322d3438203d3e20323633333030.roa (raw, json)
Hash identifier:          xwA5rRlbKUqHSisD8UuYgSs4BgCju2s8Z8jsbWZ8acY=
Subject key identifier:   38:C9:3D:E4:A1:E0:21:83:9F:58:4F:4D:CD:12:A3:C4:24:B8:87:A6
Certificate issuer:       /CN=E566AB13DF19F2E8935CAFB119E40308D0A08146
Certificate serial:       3F685400E904D41CD194253E14A4D67EF4838A73
Authority key identifier: E5:66:AB:13:DF:19:F2:E8:93:5C:AF:B1:19:E4:03:08:D0:A0:81:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/323830313a38343a3a2f33322d3438203d3e20323633333030.roa
Signing time:             Wed 04 Feb 2026 20:53:26 +0000
ROA not before:           Wed 04 Feb 2026 20:48:26 +0000
ROA not after:            Wed 03 Feb 2027 20:53:26 +0000
asID:                     263300
IP address blocks:        2801:84::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.crl
                          rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:41:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:68:54:00:e9:04:d4:1c:d1:94:25:3e:14:a4:d6:7e:f4:83:8a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E566AB13DF19F2E8935CAFB119E40308D0A08146
        Validity
            Not Before: Feb  4 20:48:26 2026 GMT
            Not After : Feb  3 20:53:26 2027 GMT
        Subject: CN=38C93DE4A1E021839F584F4DCD12A3C424B887A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3b:38:f9:e9:54:5e:88:da:c8:93:0f:7d:95:
                    b8:41:ef:6c:90:c6:58:ae:13:45:7d:ae:94:aa:f5:
                    37:56:fb:df:62:c6:b4:b1:ca:b3:74:1a:06:3f:af:
                    5c:ac:41:5e:45:6d:2a:44:ac:b6:6e:7a:45:67:48:
                    7f:02:3e:35:3d:97:e1:6e:24:eb:bb:ad:58:72:d5:
                    69:19:93:a2:fa:dc:0d:86:af:0f:ce:14:ab:35:2f:
                    4f:9b:fa:52:57:59:cb:aa:2a:cc:fc:dd:46:b7:3c:
                    06:ac:b1:26:98:1a:1d:de:fc:f4:63:6c:bb:56:20:
                    f9:36:7f:71:30:d1:cd:04:63:c6:a1:a4:ec:89:51:
                    60:2e:fa:c6:fb:a0:43:e2:36:47:4d:5f:fd:b7:1c:
                    ba:10:c8:3e:a9:81:ba:0f:1b:7d:a6:3d:7a:03:5c:
                    f0:3a:71:d0:78:be:07:69:72:ec:a0:38:c5:f9:32:
                    16:87:c6:fd:85:ed:43:0a:d9:cc:c8:63:f9:55:1c:
                    f0:31:e6:f4:f3:dd:ab:98:e4:89:f4:de:1b:f9:29:
                    03:0e:13:12:74:16:45:71:7d:6a:dd:00:c7:fd:9e:
                    42:c5:fa:5a:32:48:fa:da:9d:18:49:ca:46:07:50:
                    7a:c0:a5:68:b1:81:13:c4:c5:8a:7d:17:50:c0:e9:
                    c8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C9:3D:E4:A1:E0:21:83:9F:58:4F:4D:CD:12:A3:C4:24:B8:87:A6
            X509v3 Authority Key Identifier:
                keyid:E5:66:AB:13:DF:19:F2:E8:93:5C:AF:B1:19:E4:03:08:D0:A0:81:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/323830313a38343a3a2f33322d3438203d3e20323633333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:84::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:0f:57:46:b8:2b:d3:dd:f9:a1:29:d8:23:f9:01:ca:c4:66:
         af:79:58:ff:f7:86:3b:73:ee:65:d5:1b:dd:de:d8:1a:4f:37:
         69:61:01:68:1a:d2:9f:6c:ca:9c:58:97:77:cd:ae:9d:f1:28:
         a8:43:92:33:f2:98:32:ae:79:28:c1:19:98:35:1e:b4:a2:86:
         72:6f:89:4d:ee:8b:e5:50:78:08:e2:10:c5:79:80:ee:84:65:
         9d:e7:ef:3c:bc:ce:2b:da:f5:51:40:6d:23:c3:ce:8a:03:34:
         19:4b:a1:67:a3:84:99:26:29:d5:c7:59:9e:fd:f7:f7:37:57:
         f3:ae:af:89:76:6c:0b:d9:51:29:76:3e:fa:dd:6b:76:b3:b1:
         ea:f9:23:fe:75:52:ca:a7:1e:89:c2:eb:98:23:7d:bf:b3:27:
         84:50:e5:8c:b4:85:ad:c7:69:b5:96:c8:2d:96:33:e1:8b:71:
         6b:0b:c1:a9:f2:f0:03:c1:bf:77:67:c1:e1:76:dd:3d:e4:47:
         98:53:95:cd:eb:88:30:37:df:5a:26:a0:58:65:44:7d:ed:c6:
         a7:9a:52:e1:cf:40:ea:d8:96:8b:1b:4c:2d:5d:86:f0:ac:d7:
         fe:ad:f5:de:7f:6c:7f:d0:d8:64:95:e2:cb:e9:e3:d0:3c:c2:
         7b:8e:e5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:22:41 2026 by rpki-client