Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/323830343a313539343a383030303a3a2f33332d3333203d3e20323633333936.roa
File:                     323830343a313539343a383030303a3a2f33332d3333203d3e20323633333936.roa (raw, json)
Hash identifier:          hLzqmsCKgsDSOYYsfd9uplhuDbU2l7wN+x1Gqbuga7Y=
Subject key identifier:   27:9B:D7:AC:CF:00:3A:18:98:01:E3:F0:D6:F2:52:E1:58:83:01:8C
Certificate issuer:       /CN=40636332B02FA344DE75686E874C7425B2C58624
Certificate serial:       7A20BE9507641DFC78491666A8EE8AE49D927D9B
Authority key identifier: 40:63:63:32:B0:2F:A3:44:DE:75:68:6E:87:4C:74:25:B2:C5:86:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/323830343a313539343a383030303a3a2f33332d3333203d3e20323633333936.roa
Signing time:             Thu 05 Feb 2026 20:16:17 +0000
ROA not before:           Thu 05 Feb 2026 20:11:17 +0000
ROA not after:            Thu 04 Feb 2027 20:16:17 +0000
asID:                     263396
IP address blocks:        2804:1594:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl
                          rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 21:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:20:be:95:07:64:1d:fc:78:49:16:66:a8:ee:8a:e4:9d:92:7d:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40636332B02FA344DE75686E874C7425B2C58624
        Validity
            Not Before: Feb  5 20:11:17 2026 GMT
            Not After : Feb  4 20:16:17 2027 GMT
        Subject: CN=279BD7ACCF003A189801E3F0D6F252E15883018C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:75:4f:8d:8a:bf:fe:db:c5:f1:8f:48:01:b7:
                    68:a1:30:ed:9d:d7:45:44:99:ad:75:29:41:21:be:
                    5b:40:ce:3a:18:a6:20:a2:9a:e3:8c:6b:74:49:26:
                    dc:6e:7c:0d:6e:89:74:73:bb:36:b0:51:0f:a5:58:
                    73:93:b1:a9:92:34:33:f9:67:7a:f3:c8:b3:8c:b6:
                    aa:f8:bf:4c:19:fc:4e:f4:8a:90:e5:14:b7:2d:2d:
                    4b:aa:c0:82:a2:e3:b4:57:b9:00:37:1a:98:39:9e:
                    41:76:13:ea:04:55:4b:f8:69:ac:4f:a7:7b:94:c4:
                    2d:1c:4a:5a:6b:9a:19:f9:c0:ce:0f:38:11:3f:ea:
                    44:d7:e7:c7:05:d0:40:d1:d8:95:65:6a:ce:51:0e:
                    c7:3b:06:f1:47:3e:7c:87:83:8e:56:ef:a0:d9:6c:
                    f8:a5:1e:40:74:67:91:41:91:6b:b6:3b:6b:45:55:
                    55:4b:18:e6:08:6b:97:76:ce:dd:a7:6e:42:6a:a3:
                    87:71:ef:4d:6d:38:52:1c:dc:02:2f:27:e9:6e:eb:
                    18:a7:ab:b8:f0:c2:b0:95:53:64:94:8e:de:23:7d:
                    f8:2f:fc:3e:eb:20:50:59:a4:d7:96:95:8b:46:f0:
                    f0:da:13:0e:4c:80:02:20:a3:86:37:cc:4a:d9:80:
                    e2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9B:D7:AC:CF:00:3A:18:98:01:E3:F0:D6:F2:52:E1:58:83:01:8C
            X509v3 Authority Key Identifier:
                keyid:40:63:63:32:B0:2F:A3:44:DE:75:68:6E:87:4C:74:25:B2:C5:86:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/323830343a313539343a383030303a3a2f33332d3333203d3e20323633333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1594:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         5a:b3:98:62:91:11:ec:34:aa:65:fc:67:77:98:43:f9:34:22:
         61:a3:65:73:2e:74:59:1a:bf:d0:da:72:a5:aa:74:6c:cc:b9:
         07:93:43:c8:2b:17:5e:d6:45:ef:7f:b0:d3:da:fb:bb:35:33:
         54:8e:32:8d:36:8d:c6:42:a8:5a:f1:aa:a0:59:c0:87:44:05:
         8d:38:8e:7a:2c:c7:eb:8a:0d:b0:dd:35:49:aa:ab:48:f5:ae:
         d6:6d:d4:1b:31:4c:61:d2:ad:bc:29:7b:78:32:58:0f:a9:7f:
         0e:7c:29:e6:92:5c:94:7f:3c:86:09:b2:89:91:13:e9:e3:41:
         72:f5:0e:0a:e6:8f:09:e4:86:3c:08:e9:8b:09:ff:73:85:6c:
         31:71:a7:b3:01:a2:91:be:69:68:4d:cd:52:42:95:f4:cb:60:
         ec:d7:82:e9:05:78:86:5c:e8:58:e6:4e:73:9e:1d:c4:7c:d7:
         b6:43:8e:49:47:bc:a6:c8:40:33:40:c5:6e:40:19:5b:6a:74:
         d3:d0:93:64:cb:b5:0b:6c:11:56:05:1d:cd:f1:cb:37:6b:d1:
         5f:f4:a4:56:9e:49:c5:9a:7f:97:71:56:bb:33:32:22:95:65:
         a8:e6:b0:1c:0c:9e:77:25:d6:68:e1:2e:3e:1c:f0:82:8e:4e:
         0c:d4:db:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:37:47 2026 by rpki-client