Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/323830343a313362343a3a2f33322d3438203d3e20323632323838.roa
File:                     323830343a313362343a3a2f33322d3438203d3e20323632323838.roa (raw, json)
Hash identifier:          6PxD2CEvAsrbKMJGxsI+i3mLbXWt3MxVA/wj1rohZxI=
Subject key identifier:   EB:01:53:57:E7:D1:4C:D7:65:B4:CA:A1:CD:5A:A8:E5:BB:25:D9:84
Certificate issuer:       /CN=DC4760B481E70FA8E13E470458ED532F02330CBE
Certificate serial:       671BEBD1A5B6C9827A93F3EDEBE7059BC26D016B
Authority key identifier: DC:47:60:B4:81:E7:0F:A8:E1:3E:47:04:58:ED:53:2F:02:33:0C:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4760B481E70FA8E13E470458ED532F02330CBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/323830343a313362343a3a2f33322d3438203d3e20323632323838.roa
Signing time:             Fri 06 Feb 2026 06:08:46 +0000
ROA not before:           Fri 06 Feb 2026 06:03:46 +0000
ROA not after:            Fri 05 Feb 2027 06:08:46 +0000
asID:                     262288
IP address blocks:        2804:13b4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/DC4760B481E70FA8E13E470458ED532F02330CBE.crl
                          rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/DC4760B481E70FA8E13E470458ED532F02330CBE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4760B481E70FA8E13E470458ED532F02330CBE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:42:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1b:eb:d1:a5:b6:c9:82:7a:93:f3:ed:eb:e7:05:9b:c2:6d:01:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC4760B481E70FA8E13E470458ED532F02330CBE
        Validity
            Not Before: Feb  6 06:03:46 2026 GMT
            Not After : Feb  5 06:08:46 2027 GMT
        Subject: CN=EB015357E7D14CD765B4CAA1CD5AA8E5BB25D984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d2:dd:0c:1d:f9:23:dd:88:fa:fb:da:35:77:
                    58:e4:38:72:05:4d:99:9b:fc:c3:89:ba:b1:c9:b7:
                    63:1f:03:2a:de:2f:16:5b:e0:b4:df:a4:ad:71:d8:
                    b8:0d:55:d7:70:e5:c6:05:0b:f2:58:09:92:81:fd:
                    11:09:bf:88:8c:e8:3c:ad:8d:92:bb:6c:42:f0:df:
                    19:2d:c8:aa:06:65:a8:c0:7d:91:da:6e:92:e9:8c:
                    72:2d:02:57:1f:13:0e:dc:47:21:c9:57:98:2c:46:
                    22:32:ea:33:87:91:5f:62:76:87:14:0e:ff:82:bc:
                    9e:da:25:5e:b0:41:e6:4c:d2:1b:b1:b8:9b:f1:ca:
                    16:f1:6f:2a:c1:85:97:d3:be:a8:82:3a:15:9a:83:
                    ba:45:70:4e:a5:63:f5:7a:ae:60:fd:5f:6c:17:cb:
                    0a:b4:20:a7:11:37:57:cf:0a:89:13:0b:01:4e:c1:
                    d3:09:c4:83:77:0f:a2:5c:54:86:d0:87:1d:74:08:
                    f6:22:5e:30:85:48:c7:8b:1d:40:c4:60:00:8e:38:
                    fa:58:2e:4e:46:14:34:f8:9f:fd:c4:8c:14:18:34:
                    7a:bb:05:c4:3f:81:fe:43:df:7b:b6:53:0f:00:52:
                    d3:ae:9c:72:e5:ce:b2:95:9f:31:64:0f:e8:f6:cf:
                    f7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:01:53:57:E7:D1:4C:D7:65:B4:CA:A1:CD:5A:A8:E5:BB:25:D9:84
            X509v3 Authority Key Identifier:
                keyid:DC:47:60:B4:81:E7:0F:A8:E1:3E:47:04:58:ED:53:2F:02:33:0C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/DC4760B481E70FA8E13E470458ED532F02330CBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4760B481E70FA8E13E470458ED532F02330CBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/323830343a313362343a3a2f33322d3438203d3e20323632323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:13b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:b0:2a:88:e4:a2:8a:ed:19:b9:d4:ce:b5:35:ba:4c:fa:01:
         c1:42:cc:49:a8:fd:de:28:96:27:df:de:c9:a7:c8:ae:4c:5f:
         9f:d2:2b:e9:45:a3:92:5d:bf:3c:af:3e:4f:77:38:a8:ea:b9:
         78:b9:45:3e:26:88:5e:64:52:87:48:e9:5e:17:7c:f0:ab:d9:
         87:77:9c:51:f9:b6:5a:15:77:b3:dc:58:91:73:92:6a:07:cd:
         8b:12:de:27:a7:c3:4a:54:56:50:ff:6f:45:8b:0f:ed:ad:27:
         01:ed:17:8e:cb:a7:33:18:b8:23:f5:57:3c:0f:6c:c7:83:22:
         b5:43:60:f0:56:86:99:72:59:b6:44:73:52:57:fc:32:da:1f:
         ac:20:48:90:7c:e8:07:9a:be:4a:ff:94:c0:50:59:08:30:f2:
         cd:d9:e8:a2:18:aa:58:5e:78:1e:8a:de:d9:5f:31:1c:21:41:
         27:68:ba:6a:11:9e:af:4e:61:e3:be:00:b0:43:08:e3:71:85:
         f9:35:88:8e:73:23:15:28:bf:3a:a3:d1:40:ae:6d:a1:67:67:
         2d:9c:ad:56:b8:ba:8a:d7:ea:7a:86:d0:4d:b0:ca:92:64:43:
         cf:91:02:26:b9:e7:1b:bb:10:02:e8:2b:97:eb:68:0c:8c:9d:
         53:0b:fa:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:27:56 2026 by rpki-client