Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/323830343a323064343a3a2f33322d3438203d3e203238323637.roa
File:                     323830343a323064343a3a2f33322d3438203d3e203238323637.roa (raw, json)
Hash identifier:          8SZLYboRMyOv+dF9jPikWAwQ4nHX+/17KdaQ2UesFQU=
Subject key identifier:   29:FF:9D:6E:0D:84:99:94:A2:88:AC:05:A0:27:33:82:EC:9D:E2:FC
Certificate issuer:       /CN=FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0
Certificate serial:       2088884DC071DD439FB9AC5BC0D467AA43EFFEC2
Authority key identifier: FA:97:6E:B7:9B:C9:FD:D1:D7:28:3B:D5:CE:10:AC:B2:2C:1B:98:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/323830343a323064343a3a2f33322d3438203d3e203238323637.roa
Signing time:             Thu 05 Feb 2026 16:07:22 +0000
ROA not before:           Thu 05 Feb 2026 16:02:22 +0000
ROA not after:            Thu 04 Feb 2027 16:07:22 +0000
asID:                     28267
IP address blocks:        2804:20d4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.crl
                          rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:88:88:4d:c0:71:dd:43:9f:b9:ac:5b:c0:d4:67:aa:43:ef:fe:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0
        Validity
            Not Before: Feb  5 16:02:22 2026 GMT
            Not After : Feb  4 16:07:22 2027 GMT
        Subject: CN=29FF9D6E0D849994A288AC05A0273382EC9DE2FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0c:8d:1b:81:f6:1d:c3:cb:4e:f2:0c:7d:96:
                    20:8c:46:f5:71:41:c0:7f:71:90:24:62:3e:70:67:
                    ce:f6:a8:05:97:35:63:2d:0b:12:1d:80:1e:40:31:
                    d1:b3:e5:21:91:c3:f5:f4:85:f0:e4:65:40:fc:db:
                    79:d0:81:62:cd:4f:44:69:d2:49:aa:5a:67:53:bd:
                    71:3a:66:75:37:b9:83:70:b8:ed:bb:79:3c:5b:da:
                    26:5d:b7:58:8c:49:af:f4:5f:c1:e1:df:bd:b5:89:
                    ca:e4:6c:a7:5a:70:8a:38:5b:91:3b:af:a4:a1:28:
                    55:0b:de:d6:1a:cd:7b:ca:ec:fc:d1:5d:db:40:1c:
                    91:21:f8:50:0d:de:12:f3:6b:f3:ce:9a:16:4c:e2:
                    c3:da:c6:d1:41:b3:0b:d8:0c:b2:da:80:d0:0b:9b:
                    ca:f8:e7:b8:52:b8:5e:05:17:74:e0:b7:3d:77:48:
                    b8:d3:2b:3d:8c:24:53:87:2a:3f:2b:36:44:a9:46:
                    85:82:4a:e1:3a:53:8d:25:87:82:fb:37:7d:dd:d5:
                    64:db:bf:cc:09:18:56:f6:0b:52:14:2d:70:a7:fc:
                    ee:81:c9:ca:8c:17:b2:4e:13:e9:83:ab:ae:c7:58:
                    f5:6a:36:ed:a6:d7:90:fa:63:cc:ee:34:c3:25:2c:
                    2e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FF:9D:6E:0D:84:99:94:A2:88:AC:05:A0:27:33:82:EC:9D:E2:FC
            X509v3 Authority Key Identifier:
                keyid:FA:97:6E:B7:9B:C9:FD:D1:D7:28:3B:D5:CE:10:AC:B2:2C:1B:98:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/323830343a323064343a3a2f33322d3438203d3e203238323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:2a:f8:41:7d:c6:f0:2e:bf:24:a8:e9:d7:53:1f:c7:d4:73:
         56:5a:48:94:4a:58:90:0c:03:db:8e:dd:5c:c7:00:d4:bf:8e:
         f6:a9:a1:bb:ba:18:62:4f:7a:d5:2b:7c:12:ee:cb:18:a6:dc:
         6f:d5:16:5d:42:b4:1d:46:61:5b:d6:55:5b:bd:b4:56:fc:d9:
         97:a3:68:d2:2f:b3:02:d4:ee:93:d0:d7:ae:69:64:41:af:18:
         93:86:f2:25:57:5a:86:d7:d4:5d:f4:56:24:b3:d3:3b:5b:35:
         a4:26:f5:de:c1:cd:d9:76:ce:20:1c:b6:a4:e9:9b:c3:72:e8:
         02:20:21:25:47:98:fe:85:1c:58:36:03:e9:45:cf:2d:32:fb:
         7b:dc:be:d6:f4:d9:fc:ff:b2:b6:7e:73:a4:92:b6:b7:0a:1b:
         37:47:74:35:94:24:18:3b:66:80:67:b9:df:bd:fc:36:eb:00:
         f4:8d:d4:d1:88:0c:3c:da:d8:ac:63:ca:84:87:8a:e6:94:45:
         f9:7d:63:ce:3e:30:5b:10:f3:e4:91:25:2b:66:ed:87:05:1e:
         4c:35:f8:7d:4e:b5:39:5a:96:6d:6a:98:33:e7:44:fe:5a:c3:
         5c:66:ee:12:5e:3a:ca:ec:77:34:34:59:ba:20:59:bb:3a:a5:
         3f:e0:7c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:19:19 2026 by rpki-client