Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/323830343a3433633a3a2f33322d3430203d3e20323632343232.roa
File:                     323830343a3433633a3a2f33322d3430203d3e20323632343232.roa (raw, json)
Hash identifier:          3FoLqlqYpxS/JqKsSghKf2ICxhEnf/apjoaAR93CCd0=
Subject key identifier:   C7:F5:C7:4A:F8:46:F1:BC:DD:B5:0D:3F:0E:F9:99:97:79:53:A2:77
Certificate issuer:       /CN=244388DDFE9A99D71CEB27CDB6C76637D22CAB8F
Certificate serial:       4394E622B9ED1D72A221F19B76CCAD8E05D52D69
Authority key identifier: 24:43:88:DD:FE:9A:99:D7:1C:EB:27:CD:B6:C7:66:37:D2:2C:AB:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/323830343a3433633a3a2f33322d3430203d3e20323632343232.roa
Signing time:             Wed 04 Feb 2026 21:00:01 +0000
ROA not before:           Wed 04 Feb 2026 20:55:01 +0000
ROA not after:            Wed 03 Feb 2027 21:00:01 +0000
asID:                     262422
IP address blocks:        2804:43c::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.crl
                          rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:27:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:94:e6:22:b9:ed:1d:72:a2:21:f1:9b:76:cc:ad:8e:05:d5:2d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=244388DDFE9A99D71CEB27CDB6C76637D22CAB8F
        Validity
            Not Before: Feb  4 20:55:01 2026 GMT
            Not After : Feb  3 21:00:01 2027 GMT
        Subject: CN=C7F5C74AF846F1BCDDB50D3F0EF999977953A277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c3:74:c8:54:80:38:a1:3d:3a:c1:c0:1b:25:
                    3e:af:35:27:d8:54:82:11:c1:30:7a:e3:a2:9b:84:
                    d8:ff:db:5b:44:30:aa:8e:e6:0e:bb:b4:cc:83:96:
                    57:e6:92:5d:88:5f:10:8c:fd:cb:0d:e9:d0:b4:0c:
                    be:14:12:fc:fc:e3:8f:98:1b:97:2e:e7:8b:25:ee:
                    2d:eb:42:3d:d0:96:6d:a7:da:2a:b4:61:b0:fc:28:
                    be:a4:3a:ed:5e:98:ab:4b:ef:46:43:7e:49:01:0d:
                    04:f8:23:c1:b6:45:cb:b5:00:ed:1d:1b:54:58:9d:
                    36:85:35:22:bf:5c:87:4b:e5:a5:7f:db:6f:36:d5:
                    2b:20:a1:3d:fd:f8:b4:f2:42:f9:25:0e:d0:35:ca:
                    ce:a1:63:78:0d:8e:43:0c:b7:f4:38:13:85:74:80:
                    3d:87:2c:dc:1c:93:cd:40:4f:d5:f5:09:9a:62:3e:
                    16:c9:55:51:86:6f:d6:89:84:3a:36:83:26:15:a8:
                    a0:44:33:7b:ca:43:1f:19:ab:70:74:28:7b:10:4b:
                    52:0d:a1:fa:5e:70:0e:29:d4:2b:22:35:a3:35:e6:
                    e8:57:83:f0:23:f8:71:db:d6:24:48:9e:9d:52:34:
                    24:e8:be:21:c5:71:f7:9e:44:d8:7d:c6:c5:74:63:
                    00:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F5:C7:4A:F8:46:F1:BC:DD:B5:0D:3F:0E:F9:99:97:79:53:A2:77
            X509v3 Authority Key Identifier:
                keyid:24:43:88:DD:FE:9A:99:D7:1C:EB:27:CD:B6:C7:66:37:D2:2C:AB:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/323830343a3433633a3a2f33322d3430203d3e20323632343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:6a:ac:65:6a:51:7d:05:fd:32:36:71:fd:21:b5:ae:2d:f9:
         6e:2d:92:cc:8a:03:1e:84:4e:44:7b:bb:08:e0:e7:0a:ff:bc:
         16:87:d4:5c:ea:55:d8:68:6e:b9:91:88:b4:a3:31:b8:8d:b7:
         cc:fd:60:6d:2e:f0:a7:78:8d:1c:69:d1:de:a0:e7:5e:c9:1e:
         9c:db:af:a9:db:5b:00:6b:8c:15:7f:c4:a5:92:42:28:df:18:
         31:88:d3:82:7b:98:49:c7:da:88:db:23:9c:61:3d:df:36:b2:
         ea:17:47:b5:06:cf:af:02:ee:50:7c:12:b6:ed:d9:56:38:1a:
         66:0b:cb:44:d0:8e:98:20:0d:77:8c:7f:4c:a0:b7:9e:93:9e:
         07:bc:8e:b4:02:ab:40:17:fb:c8:d3:bc:40:9b:92:94:cd:43:
         55:56:a7:f8:91:90:c7:b4:ed:dc:6b:9a:96:f5:eb:ee:cf:52:
         10:35:4e:30:da:ce:b6:b1:ae:d9:af:42:44:26:9e:08:79:b8:
         1d:a3:aa:e3:b1:d0:26:d1:46:c8:66:34:63:9e:d9:eb:25:40:
         45:a2:1a:95:4e:f6:5f:b1:fa:a8:97:98:71:63:26:2f:2d:32:
         48:66:a0:df:ae:bd:5c:cd:04:01:17:60:57:89:e7:ca:da:43:
         43:8c:c6:b9
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUQ5TmIrntHXKiIfGbdsytjgXVLWkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQ0Mzg4RERGRTlBOTlENzFDRUIyN0NEQjZDNzY2MzdE
MjJDQUI4RjAeFw0yNjAyMDQyMDU1MDFaFw0yNzAyMDMyMTAwMDFaMDMxMTAvBgNV
BAMTKEM3RjVDNzRBRjg0NkYxQkNEREI1MEQzRjBFRjk5OTk3Nzk1M0EyNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMw3TIVIA4oT06wcAbJT6vNSfY
VIIRwTB646KbhNj/21tEMKqO5g67tMyDllfmkl2IXxCM/csN6dC0DL4UEvz844+Y
G5cu54sl7i3rQj3Qlm2n2iq0YbD8KL6kOu1emKtL70ZDfkkBDQT4I8G2Rcu1AO0d
G1RYnTaFNSK/XIdL5aV/22821SsgoT39+LTyQvklDtA1ys6hY3gNjkMMt/Q4E4V0
gD2HLNwck81AT9X1CZpiPhbJVVGGb9aJhDo2gyYVqKBEM3vKQx8Zq3B0KHsQS1IN
ofpecA4p1CsiNaM15uhXg/Aj+HHb1iRInp1SNCToviHFcfeeRNh9xsV0YwB3AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUx/XHSvhG8bzdtQ0/DvmZl3lToncwHwYDVR0j
BBgwFoAUJEOI3f6amdcc6yfNtsdmN9Isq48wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2Vrb0FxUWVYek5LRUFYcUdNZHdxWmY5VGc3TmRKUXJiU2FlaHgxZEtn
bWcvMS8yNDQzODhEREZFOUE5OUQ3MUNFQjI3Q0RCNkM3NjYzN0QyMkNBQjhGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0NDM4OERERkU5QTk5RDcx
Q0VCMjdDREI2Qzc2NjM3RDIyQ0FCOEYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzdla29BcVFlWHpOS0VBWHFHTWR3cVpmOVRnN05kSlFyYlNhZWh4MWRLZ21nLzEv
MzIzODMwMzQzYTM0MzM2MzNhM2EyZjMzMzIyZDM0MzAyMDNkM2UyMDMyMzYzMjM0
MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEBDwwDQYJKoZIhvcNAQELBQADggEBAJtqrGVqUX0F
/TI2cf0hta4t+W4tksyKAx6ETkR7uwjg5wr/vBaH1FzqVdhobrmRiLSjMbiNt8z9
YG0u8Kd4jRxp0d6g517JHpzbr6nbWwBrjBV/xKWSQijfGDGI04J7mEnH2ojbI5xh
Pd82suoXR7UGz68C7lB8Erbt2VY4GmYLy0TQjpggDXeMf0ygt56Tnge8jrQCq0AX
+8jTvECbkpTNQ1VWp/iRkMe07dxrmpb16+7PUhA1TjDazraxrtmvQkQmngh5uB2j
quOx0CbRRshmNGOe2eslQEWiGpVO9l+x+qiXmHFjJi8tMkhmoN+uvVzNBAEXYFeJ
58raQ0OMxrk=
-----END CERTIFICATE-----
Generated at Thu Feb 19 10:21:01 2026 by rpki-client