Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/323830343a313434303a3a2f33322d3334203d3e20323633333231.roa
File:                     323830343a313434303a3a2f33322d3334203d3e20323633333231.roa (raw, json)
Hash identifier:          32GBqRpXtUgfA3lskeZxN9CfSiT31wviw3IVcI1OAkA=
Subject key identifier:   43:FC:5A:4D:64:F0:3F:E1:D7:6E:B2:8E:86:A8:5E:6E:DA:2C:F1:29
Certificate issuer:       /CN=B8BF0367B559121777A21A84D953A717D6E82AEA
Certificate serial:       15ACE9857DCCAA8A416DA0085C79E7DD6155EC6B
Authority key identifier: B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/323830343a313434303a3a2f33322d3334203d3e20323633333231.roa
Signing time:             Thu 05 Feb 2026 06:12:00 +0000
ROA not before:           Thu 05 Feb 2026 06:07:00 +0000
ROA not after:            Thu 04 Feb 2027 06:12:00 +0000
asID:                     263321
IP address blocks:        2804:1440::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl
                          rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ac:e9:85:7d:cc:aa:8a:41:6d:a0:08:5c:79:e7:dd:61:55:ec:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BF0367B559121777A21A84D953A717D6E82AEA
        Validity
            Not Before: Feb  5 06:07:00 2026 GMT
            Not After : Feb  4 06:12:00 2027 GMT
        Subject: CN=43FC5A4D64F03FE1D76EB28E86A85E6EDA2CF129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c9:de:81:e9:a5:3a:49:2d:5d:70:99:97:52:
                    81:7a:75:41:7e:9b:b4:59:a2:d1:f1:e0:88:7e:ec:
                    60:27:d0:92:b9:3f:b9:c5:f6:08:4c:2b:0a:a3:80:
                    a6:94:50:a7:1b:42:1c:5d:33:65:92:71:d1:84:7a:
                    2c:df:d7:08:39:b3:f4:9d:31:fe:73:e6:97:36:de:
                    57:2b:65:e2:7b:42:c1:dd:c9:72:30:11:f1:01:a6:
                    8c:4d:04:e9:d8:3f:c3:00:9b:e5:3f:9c:15:1d:19:
                    3f:ef:da:a6:77:13:d2:03:7d:aa:d4:de:47:50:7f:
                    2d:1f:d8:bc:05:46:a7:2c:9f:5e:1e:04:fc:c9:ec:
                    8b:d2:66:ed:b6:52:17:db:fc:5b:36:98:78:c1:9a:
                    20:80:13:52:ac:75:a9:a4:78:6e:e2:f6:be:fe:00:
                    55:ca:4b:11:e4:f3:87:85:c5:c1:f8:bd:32:83:c3:
                    90:97:ee:cd:a4:e5:df:e6:0b:31:95:4c:bd:f8:0c:
                    93:13:bd:36:aa:4e:45:97:93:f6:42:37:b2:e3:91:
                    33:d5:a3:5e:83:eb:e2:8f:d9:39:b1:9e:f5:58:58:
                    bf:45:2b:bb:48:cb:20:58:c2:da:fb:b5:71:6b:00:
                    6f:04:9e:97:1f:6f:d9:a7:5d:81:b3:1b:de:cb:38:
                    b4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FC:5A:4D:64:F0:3F:E1:D7:6E:B2:8E:86:A8:5E:6E:DA:2C:F1:29
            X509v3 Authority Key Identifier:
                keyid:B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/323830343a313434303a3a2f33322d3334203d3e20323633333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1440::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:df:8f:cb:56:db:b4:ad:91:06:36:89:fd:ae:f0:6e:79:75:
         83:79:c7:d2:bf:a6:94:6c:66:0b:e6:29:b1:17:e0:fb:9a:22:
         cd:7f:ef:75:85:6d:8e:68:89:81:42:a7:76:b1:2b:e6:94:3c:
         13:df:09:5a:8f:fe:f0:bc:78:30:3b:86:5e:3c:1f:c6:44:e6:
         d4:f3:c4:74:24:8e:ad:72:c2:c6:01:a0:ae:82:ce:db:b1:fb:
         75:dc:9b:c4:9d:8b:bb:f2:7f:1a:5f:d2:07:33:80:72:5d:4d:
         1f:be:35:58:48:de:02:38:72:a8:46:26:4c:2d:a0:e3:0d:6c:
         ab:af:ed:28:2f:01:02:6a:ed:b1:db:f2:c4:a9:95:2e:ff:6f:
         19:a0:6a:9c:d2:21:29:4b:f4:95:70:ed:ee:62:b8:cc:ea:c4:
         70:1b:fc:4e:28:d6:46:06:11:bb:f0:8d:a6:b3:d5:4a:0d:8d:
         d0:e2:6a:6b:ac:c2:92:bb:1e:f7:5f:8e:06:11:dc:85:7c:02:
         29:36:4f:4b:49:02:d5:a4:91:fc:40:9b:49:96:2f:a4:c7:7c:
         ff:20:d0:18:8e:1f:7f:c6:2c:36:97:43:cc:ef:c7:0f:d0:6b:
         12:e0:74:47:21:c9:21:eb:ca:d1:57:0e:92:52:49:3b:91:5b:
         9b:3f:34:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:20 2026 by rpki-client