Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a636330303a3a2f34362d3436203d3e20323636363233.roa
File:                     323830343a336564343a636330303a3a2f34362d3436203d3e20323636363233.roa (raw, json)
Hash identifier:          BsW4ec7/mjxQ/8ZHZNpO2CqCq3Zn9ZqfeWJy+o0GkH4=
Subject key identifier:   40:43:FA:51:46:C8:19:04:4D:0C:F8:4B:48:7D:DE:D1:2B:86:86:6A
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       740455DD4800EF4C042035FBF65D37F8105F516A
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a636330303a3a2f34362d3436203d3e20323636363233.roa
Signing time:             Wed 04 Feb 2026 20:00:16 +0000
ROA not before:           Wed 04 Feb 2026 19:55:16 +0000
ROA not after:            Wed 03 Feb 2027 20:00:16 +0000
asID:                     266623
IP address blocks:        2804:3ed4:cc00::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:04:55:dd:48:00:ef:4c:04:20:35:fb:f6:5d:37:f8:10:5f:51:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Feb  4 19:55:16 2026 GMT
            Not After : Feb  3 20:00:16 2027 GMT
        Subject: CN=4043FA5146C819044D0CF84B487DDED12B86866A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3c:74:c3:42:b0:01:91:29:c0:5d:a4:9a:af:
                    39:24:17:28:75:1f:c3:01:aa:9b:44:90:fc:14:77:
                    2a:31:c4:36:d8:c2:bb:b3:a5:52:50:dc:00:e6:2a:
                    d4:69:7c:85:22:10:49:40:18:2f:ad:c8:2f:86:f7:
                    48:7d:46:91:43:13:50:af:dc:9a:9e:73:5d:3b:26:
                    9c:94:7f:67:04:94:aa:51:3b:19:4f:5d:9c:cb:16:
                    6b:c4:ab:5b:bd:ea:12:d3:a3:17:d0:2a:42:d3:a2:
                    7e:c5:c7:51:16:9c:40:cf:f9:7f:5c:75:48:9d:aa:
                    12:a1:a8:d0:a9:6a:bc:6f:0d:48:ac:8a:78:2d:e2:
                    f0:96:0a:51:3b:0e:e3:7d:e3:f2:39:10:67:d7:1f:
                    d7:e5:f5:d5:5b:1c:00:ba:30:80:fc:11:9a:7b:4a:
                    41:40:3a:89:fb:3b:a3:68:78:10:d4:5c:39:79:0c:
                    ff:b5:ea:55:e8:53:11:d6:40:b8:cb:bb:00:44:a1:
                    dc:e9:dd:30:d2:ad:9c:27:2f:bc:26:26:39:10:9d:
                    43:af:d2:fe:68:9d:80:5d:35:0f:03:42:55:6c:72:
                    10:b1:d4:1f:50:06:79:f5:98:cd:cd:d2:f1:39:4b:
                    38:6a:2f:7c:dc:42:06:85:c0:eb:4f:12:ea:2e:22:
                    1f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:43:FA:51:46:C8:19:04:4D:0C:F8:4B:48:7D:DE:D1:2B:86:86:6A
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a636330303a3a2f34362d3436203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:cc00::/46

    Signature Algorithm: sha256WithRSAEncryption
         51:52:be:62:de:f8:d9:75:65:a1:4a:b4:e4:61:f3:11:ed:5f:
         c7:af:cb:dd:17:06:2f:06:de:ab:a6:50:8c:b1:6c:6d:85:b6:
         06:b8:90:5b:a1:51:45:f3:d1:0b:9e:bb:f5:de:34:2c:71:d6:
         96:fe:23:79:6a:c9:19:a5:60:8e:28:c2:e9:bb:13:54:81:13:
         46:f1:40:43:ab:bc:07:33:d8:5c:89:5a:0a:d5:93:84:ef:aa:
         f9:aa:d1:65:44:43:b2:49:ed:ac:eb:2e:0d:30:b3:64:e0:22:
         97:14:37:b2:d5:ff:6d:b9:f5:5d:9c:37:ab:5d:0d:4d:68:89:
         fa:c5:e2:e7:b1:3f:6c:50:06:10:5e:93:e7:af:ca:34:f8:11:
         d2:30:49:eb:a3:24:72:df:a7:b8:4b:d0:5b:a5:19:3d:91:c8:
         be:b2:bf:0e:70:7e:7c:32:12:8e:48:c9:af:f8:4f:46:40:9e:
         26:16:12:3c:97:26:2b:8a:cc:8b:29:28:3d:b4:5c:95:5e:dd:
         aa:c4:ac:d8:31:91:b3:c8:7e:4f:88:68:2b:c0:2f:c2:ec:5f:
         78:69:bb:9b:c7:00:e8:b9:7b:13:f5:74:fb:73:0f:2a:19:5b:
         01:99:82:a2:2b:1c:ed:12:88:c2:27:2c:ca:bf:4c:3b:e5:95:
         2d:30:23:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:49:47 2026 by rpki-client