Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/323830343a343363383a3a2f33322d3336203d3e20323637353839.roa
File:                     323830343a343363383a3a2f33322d3336203d3e20323637353839.roa (raw, json)
Hash identifier:          B7GOxylY6FVXV1v+bmDDWLNR2ojABmwThNErrOZyKjM=
Subject key identifier:   CB:EF:00:AB:1B:93:B8:04:1B:CF:A0:3E:4A:89:58:8C:B8:15:CB:89
Certificate issuer:       /CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC
Certificate serial:       0653FE71382A5D06E0E6363507C2724D6A4ACA90
Authority key identifier: AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/323830343a343363383a3a2f33322d3336203d3e20323637353839.roa
Signing time:             Thu 05 Feb 2026 22:25:32 +0000
ROA not before:           Thu 05 Feb 2026 22:20:32 +0000
ROA not after:            Thu 04 Feb 2027 22:25:32 +0000
asID:                     267589
IP address blocks:        2804:43c8::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl
                          rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 17:49:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:53:fe:71:38:2a:5d:06:e0:e6:36:35:07:c2:72:4d:6a:4a:ca:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC
        Validity
            Not Before: Feb  5 22:20:32 2026 GMT
            Not After : Feb  4 22:25:32 2027 GMT
        Subject: CN=CBEF00AB1B93B8041BCFA03E4A89588CB815CB89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:0c:09:33:24:95:1a:3c:80:97:f3:63:be:0e:
                    23:65:b8:e1:d6:c5:ae:28:08:b0:6c:53:3b:59:35:
                    a4:01:f3:39:26:70:c1:ca:90:58:d3:a5:55:25:6d:
                    e8:34:a9:17:59:44:7a:cd:44:42:73:15:40:60:1c:
                    9f:74:c3:38:7c:5f:c5:7e:69:f7:9d:46:da:ea:82:
                    bf:7b:4b:49:01:b3:ea:fa:27:23:79:c4:1e:f1:4a:
                    d7:0c:28:26:8a:9d:8e:b9:c7:c7:2a:e4:6f:7b:6e:
                    4e:82:58:63:af:55:4a:2e:6c:aa:a9:db:c2:6d:69:
                    30:18:78:ae:96:71:dd:b0:38:2e:ee:41:8a:88:3f:
                    32:0a:b9:6f:09:e9:f2:3e:18:31:c7:1e:26:eb:b5:
                    7c:6a:7c:d4:f7:d8:22:95:d7:d0:2c:07:ef:a5:f7:
                    08:6e:99:b8:96:04:13:cb:94:33:fa:ab:2f:08:96:
                    e6:f3:76:e1:8a:70:e6:db:ac:81:4a:27:0e:c3:0e:
                    03:84:8b:53:20:e6:87:73:ef:52:fa:68:da:5d:02:
                    ac:bf:b7:dc:68:e7:1f:ec:a4:3c:14:09:9e:02:5d:
                    be:cf:94:da:8a:a7:f1:ad:ac:5b:28:d8:56:a1:7a:
                    d8:a4:51:c3:c4:36:48:ef:be:28:a6:2a:74:ef:dd:
                    00:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EF:00:AB:1B:93:B8:04:1B:CF:A0:3E:4A:89:58:8C:B8:15:CB:89
            X509v3 Authority Key Identifier:
                keyid:AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/323830343a343363383a3a2f33322d3336203d3e20323637353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:8a:d1:7f:96:2c:b8:f9:15:3d:6c:29:77:f3:fe:0d:1a:c9:
         03:c3:ee:da:8c:43:6c:b7:f0:81:29:bb:5b:cf:a2:0c:ca:30:
         11:aa:37:66:1f:26:0e:16:ba:fd:b3:c3:b5:2e:1c:79:05:ff:
         d6:67:eb:14:6a:aa:9c:b1:da:7f:3c:bf:31:c9:ff:de:19:41:
         cf:ce:84:0e:b6:24:df:98:e2:3e:d5:6e:a6:da:f3:1c:31:8d:
         3b:1a:d4:c9:27:f3:95:6c:05:10:a0:73:86:98:13:17:d7:61:
         dd:ce:07:69:5a:02:cb:9e:78:e9:3e:89:5f:bd:b9:fd:68:26:
         c8:1e:d4:29:c6:50:df:c1:89:a6:e4:34:43:dd:25:8c:73:b3:
         27:76:2f:42:44:48:fb:07:7e:1f:6b:99:82:74:79:a7:da:26:
         3c:b2:d4:50:f1:87:d0:66:e5:df:d9:6f:38:f7:a8:e4:a2:3f:
         58:39:58:75:c3:a0:a1:fd:cb:17:13:22:12:44:db:5e:e2:6b:
         ec:84:95:c5:92:c0:37:00:33:b6:71:13:33:1f:83:9a:5c:39:
         cf:96:cb:e6:73:63:d3:c6:d1:9a:8d:b2:dd:f4:61:e9:2d:d3:
         56:dd:6b:7a:b8:6c:6d:0d:38:56:0f:3c:3e:1c:63:d5:98:57:
         4c:ab:b7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:56:11 2026 by rpki-client