Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a336539343a3a2f34382d3438203d3e20323632373133.roa
File:                     323830343a3634303a336539343a3a2f34382d3438203d3e20323632373133.roa (raw, json)
Hash identifier:          WfQV6TyXx5NTESxYPT0nAZ5WCSfiGytIH5LNPH+eEfE=
Subject key identifier:   9B:78:DD:0E:55:63:75:C6:BA:B0:FB:A0:C4:57:43:FF:F5:D9:10:FD
Certificate issuer:       /CN=E93268A3714096FCDDC12A8EEEA393524021C87B
Certificate serial:       18E6E1E3ACB49EDCEED079D5EE1B8166235D07F9
Authority key identifier: E9:32:68:A3:71:40:96:FC:DD:C1:2A:8E:EE:A3:93:52:40:21:C8:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a336539343a3a2f34382d3438203d3e20323632373133.roa
Signing time:             Thu 22 Jan 2026 19:02:49 +0000
ROA not before:           Thu 22 Jan 2026 18:57:49 +0000
ROA not after:            Thu 21 Jan 2027 19:02:49 +0000
asID:                     262713
IP address blocks:        2804:640:3e94::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.crl
                          rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 17:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e6:e1:e3:ac:b4:9e:dc:ee:d0:79:d5:ee:1b:81:66:23:5d:07:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E93268A3714096FCDDC12A8EEEA393524021C87B
        Validity
            Not Before: Jan 22 18:57:49 2026 GMT
            Not After : Jan 21 19:02:49 2027 GMT
        Subject: CN=9B78DD0E556375C6BAB0FBA0C45743FFF5D910FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c2:83:08:72:ae:77:1c:cd:1f:ff:ce:ae:d2:
                    20:03:4b:65:ee:96:da:46:20:d5:0f:ae:9c:3f:60:
                    c9:a5:d7:6a:af:bd:30:15:47:5c:a4:07:f3:fa:72:
                    3d:4c:40:9e:cf:b5:c6:5f:6d:93:86:cd:c5:0d:5b:
                    fa:96:81:89:2f:ce:a1:50:ee:4c:77:0b:ec:55:9e:
                    03:fa:51:e5:4f:50:54:be:f2:81:45:7c:0b:74:09:
                    43:e5:c0:2f:9c:5b:40:a1:80:28:b7:8f:bb:05:9f:
                    e9:63:16:d7:20:b4:85:06:56:32:47:92:0a:36:b3:
                    e2:84:36:ae:e4:4f:9c:dc:89:ca:97:00:84:19:aa:
                    fc:fe:8f:98:9c:3b:6f:0c:7b:71:a3:be:c6:63:27:
                    05:35:35:d5:c8:12:38:f6:a5:92:e3:09:b0:4c:16:
                    6e:7f:74:11:0b:a8:18:95:6c:3e:12:8e:ac:9c:df:
                    43:44:f4:62:b1:df:78:a2:ea:ad:64:38:16:9f:18:
                    10:4c:04:82:d0:0c:0f:99:a5:99:8e:49:31:b7:46:
                    60:90:d1:d4:19:86:98:dc:5c:0b:f4:fa:2f:15:d3:
                    e3:48:c2:88:2c:0e:09:3b:3d:c5:a3:6c:6a:ee:8e:
                    c6:5f:68:d0:cc:e7:d7:15:54:62:70:f8:86:41:8f:
                    53:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:78:DD:0E:55:63:75:C6:BA:B0:FB:A0:C4:57:43:FF:F5:D9:10:FD
            X509v3 Authority Key Identifier:
                keyid:E9:32:68:A3:71:40:96:FC:DD:C1:2A:8E:EE:A3:93:52:40:21:C8:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a336539343a3a2f34382d3438203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:640:3e94::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:a0:df:da:40:fe:2e:16:a4:a9:fd:2c:46:6a:4c:09:d3:64:
         13:c9:51:b5:38:29:f7:e3:9b:00:21:9b:be:1b:d4:9e:55:39:
         1b:5a:2c:de:1c:23:a8:20:d2:71:d1:5a:2d:ad:a8:33:8f:30:
         35:c0:70:b2:0a:c2:a9:0d:a4:07:86:9c:83:0f:bc:fb:6f:f9:
         d0:7b:fd:0d:69:f4:dd:b8:93:5b:cc:b8:58:33:c2:83:9e:f7:
         56:06:6e:56:95:da:27:70:49:f4:66:96:99:4c:ac:fd:0d:73:
         45:08:8b:e0:1f:17:96:dc:f2:cd:c6:07:fa:7d:35:25:c1:39:
         f7:e8:66:be:29:2c:44:28:6b:47:7d:0a:52:c6:c5:9f:a2:72:
         b1:f1:25:b4:ed:ae:06:f4:f7:a8:41:2b:43:4c:a8:20:2d:db:
         a3:de:15:3b:66:35:08:ef:6b:27:0f:0f:ec:51:fe:23:c9:9f:
         56:f0:16:6d:66:bb:18:b0:b5:26:bd:3a:ca:ac:d2:f8:39:ca:
         cd:53:ed:e8:e0:56:70:39:95:87:e4:b8:d1:c8:52:04:5a:67:
         f8:5d:b3:95:b4:00:91:cd:b5:55:f9:e6:9b:ab:0e:7d:bc:8b:
         a7:a8:92:aa:ac:45:6e:e3:1d:9e:da:b8:1c:5a:df:e1:a9:7d:
         de:f3:75:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:16:22 2026 by rpki-client