Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a633030303a3a2f34302d3430203d3e20323636363335.roa
File:                     323830343a336630383a633030303a3a2f34302d3430203d3e20323636363335.roa (raw, json)
Hash identifier:          Ag3aBvoBLxCRSyxLpvZH7fnRRxXy7jgRMGnwG9U8bvk=
Subject key identifier:   42:A2:A0:D1:E9:95:7A:1F:46:B5:08:25:0C:5A:91:E7:E1:48:FB:82
Certificate issuer:       /CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
Certificate serial:       7D378F9AA9D7FB1F3A845805B42F3C0661ABA450
Authority key identifier: EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a633030303a3a2f34302d3430203d3e20323636363335.roa
Signing time:             Thu 05 Feb 2026 03:00:08 +0000
ROA not before:           Thu 05 Feb 2026 02:55:08 +0000
ROA not after:            Thu 04 Feb 2027 03:00:08 +0000
asID:                     266635
IP address blocks:        2804:3f08:c000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl
                          rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:37:8f:9a:a9:d7:fb:1f:3a:84:58:05:b4:2f:3c:06:61:ab:a4:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
        Validity
            Not Before: Feb  5 02:55:08 2026 GMT
            Not After : Feb  4 03:00:08 2027 GMT
        Subject: CN=42A2A0D1E9957A1F46B508250C5A91E7E148FB82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8c:50:1a:ce:58:ad:f1:e5:1d:cf:f3:47:08:
                    d6:59:61:6d:2e:98:60:4f:fd:15:b6:bb:54:15:52:
                    9a:f7:d3:94:b6:28:4d:2c:f9:f5:c2:2e:e6:4c:49:
                    8d:c4:71:f0:6a:ff:67:e1:37:1d:54:07:16:70:f3:
                    c8:35:06:d1:e9:34:64:d7:c7:4a:b3:93:e0:69:44:
                    1e:23:50:ad:e5:c1:62:95:3e:bf:5e:c1:94:80:b1:
                    52:f9:bb:3c:bb:a1:9e:51:df:cb:b7:db:3d:df:6e:
                    3c:32:ff:ed:1e:2b:ee:eb:f5:6d:32:8e:e6:c1:c0:
                    76:f7:8b:d4:e0:97:09:17:e4:d7:36:2e:79:32:b8:
                    04:5f:55:db:70:e6:7d:e2:70:a5:41:64:7d:d0:87:
                    98:76:32:c4:22:5d:cb:10:6d:76:b4:f8:ff:0a:eb:
                    5c:4b:c8:ae:fd:37:5a:35:3b:39:eb:e6:ef:c4:30:
                    75:5a:de:87:23:1c:db:c0:da:29:b7:9e:43:e0:5b:
                    2e:e7:b3:6d:02:10:e5:48:21:e5:23:49:91:19:98:
                    f4:af:18:11:be:d7:79:25:e9:1d:0c:1f:b8:95:19:
                    a1:90:6f:3e:76:7f:44:fe:ae:f8:4b:2a:0b:7b:68:
                    23:f3:ab:18:0d:bd:23:30:12:e6:ca:7f:80:59:83:
                    dc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A2:A0:D1:E9:95:7A:1F:46:B5:08:25:0C:5A:91:E7:E1:48:FB:82
            X509v3 Authority Key Identifier:
                keyid:EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a633030303a3a2f34302d3430203d3e20323636363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f08:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         7b:01:ba:b2:77:9a:33:1c:7e:87:33:24:51:98:66:44:78:2b:
         43:d8:fb:6d:93:c6:d7:b2:7a:08:6e:2c:59:e0:b2:67:ba:62:
         f6:a6:cd:17:dc:b2:33:88:09:fe:82:69:4c:34:d2:49:b3:8e:
         9c:fa:0a:5c:95:ac:b6:72:c3:5e:18:84:49:53:5d:ed:a1:d9:
         ab:95:d4:56:05:c6:e3:e0:02:28:6e:9e:19:c7:40:2f:11:19:
         61:1c:69:03:a0:be:86:ac:8b:ca:57:f4:36:b1:67:ff:1d:87:
         e7:cc:19:5d:59:0a:75:c2:8d:7b:8f:67:5f:41:4b:9f:4e:34:
         a2:c6:de:b6:b1:70:d9:04:18:21:19:17:c0:02:be:8b:e4:37:
         d5:38:6d:5d:36:d7:58:66:6c:45:0f:7e:bc:c6:38:46:e2:e2:
         1b:7c:bc:bc:a6:52:ab:79:94:c5:36:fd:8f:ab:72:2d:dd:54:
         d0:29:84:1d:3a:91:49:80:29:f9:3d:25:6f:d1:e8:31:4b:dd:
         21:79:24:58:c7:75:ef:38:d0:9c:d9:74:00:fa:c8:7f:4e:91:
         d7:bf:35:6d:f6:03:64:65:0f:c4:2f:71:7e:f8:2e:15:6a:69:
         64:39:59:ee:92:d9:d1:fc:27:11:6f:02:de:a0:43:f5:8a:ee:
         a8:61:63:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:30:50 2026 by rpki-client