Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/323830343a313763303a3a2f33322d313238203d3e20323633313535.roa
File:                     323830343a313763303a3a2f33322d313238203d3e20323633313535.roa (raw, json)
Hash identifier:          r5G+E6FUK9KFyFIKdYjdhJISjKa66nEAe0SqnaUjmJw=
Subject key identifier:   CD:D3:C2:F1:69:D4:78:C6:7B:25:59:FF:73:24:A6:69:F5:2E:A7:87
Certificate issuer:       /CN=B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8
Certificate serial:       56B8756C0A2C9D36D740C04ADBF370C4B6CB5079
Authority key identifier: B6:EB:3D:EA:1B:11:3D:80:89:F2:EB:7F:26:A5:2C:BA:BA:6D:F2:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/323830343a313763303a3a2f33322d313238203d3e20323633313535.roa
Signing time:             Wed 04 Feb 2026 23:24:21 +0000
ROA not before:           Wed 04 Feb 2026 23:19:21 +0000
ROA not after:            Wed 03 Feb 2027 23:24:21 +0000
asID:                     263155
IP address blocks:        2804:17c0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.crl
                          rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b8:75:6c:0a:2c:9d:36:d7:40:c0:4a:db:f3:70:c4:b6:cb:50:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8
        Validity
            Not Before: Feb  4 23:19:21 2026 GMT
            Not After : Feb  3 23:24:21 2027 GMT
        Subject: CN=CDD3C2F169D478C67B2559FF7324A669F52EA787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:10:a0:08:f5:4f:02:c7:bd:c9:56:5a:da:75:
                    7c:b4:07:1d:84:ee:ec:22:59:ff:fc:fc:39:17:e2:
                    ff:57:7d:80:4f:9f:ae:ee:d9:52:76:ce:37:ec:18:
                    76:91:a7:67:2e:2e:ba:2d:d2:fd:19:a1:90:20:29:
                    cb:39:3c:52:33:48:fc:d1:4f:d2:d8:b1:25:02:14:
                    dd:d1:fd:3a:7e:d8:5d:6b:59:40:01:f5:30:07:bd:
                    03:b9:06:13:1a:a4:13:13:d0:2f:3d:d9:74:e4:6d:
                    46:19:9a:ed:22:d9:c1:05:9b:eb:d1:12:54:47:f2:
                    0f:1e:a9:cf:49:fa:31:fa:56:fe:08:3f:82:44:88:
                    9a:03:8f:38:6f:67:da:d8:0b:bf:8b:80:2d:e4:d3:
                    75:22:2a:02:1b:94:7d:ee:1d:3b:c5:af:4c:f0:75:
                    cb:1e:3f:03:0c:33:ec:7f:d0:98:0d:1e:d0:e7:7c:
                    ca:a7:f8:f2:ec:44:4d:8e:50:75:43:db:d7:bf:8c:
                    90:d6:ca:f7:9b:47:b8:0e:ac:17:77:b5:4c:d3:ee:
                    54:e0:ef:a1:92:b8:24:5d:8f:4c:62:94:d7:74:92:
                    f9:76:a6:f2:24:11:86:a0:35:27:72:f4:e1:95:38:
                    4c:78:3c:8c:07:e3:6e:e6:34:a1:28:01:51:e5:78:
                    dc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D3:C2:F1:69:D4:78:C6:7B:25:59:FF:73:24:A6:69:F5:2E:A7:87
            X509v3 Authority Key Identifier:
                keyid:B6:EB:3D:EA:1B:11:3D:80:89:F2:EB:7F:26:A5:2C:BA:BA:6D:F2:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/323830343a313763303a3a2f33322d313238203d3e20323633313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:16:0c:aa:94:e8:88:3d:38:19:97:51:5d:f3:ae:97:d5:54:
         e1:db:7e:b2:dd:fe:0c:f3:08:c6:63:91:21:f6:b9:c7:1e:79:
         d6:35:98:58:a0:1f:ae:66:08:0e:0b:74:2f:e1:ee:19:99:68:
         ce:69:c4:32:30:91:17:49:a0:00:d2:05:ac:0e:e4:9f:39:6a:
         c0:ef:fe:e8:6f:dc:46:68:bc:cf:8e:64:da:f1:f4:72:bc:38:
         d9:69:1f:0b:db:79:f6:39:f4:c2:85:5a:d8:4d:2b:74:1d:79:
         63:15:83:fd:7c:da:e4:3f:75:53:f7:ad:e4:98:46:00:5b:16:
         0b:6e:b0:ac:43:50:95:21:11:d9:f9:ad:99:6e:09:a9:99:54:
         74:ca:a3:54:8a:0e:2a:19:27:55:b3:c4:56:16:b0:ff:01:55:
         34:f0:39:e6:77:71:6d:bd:96:b0:ac:aa:90:c3:88:4c:13:61:
         46:5f:72:06:9a:6f:64:14:0a:78:3c:db:2c:c9:63:18:5b:cf:
         3a:01:1c:2c:f2:e2:4a:4c:cf:62:c2:2f:64:47:31:6d:3d:fe:
         c0:d5:30:2a:85:50:d9:da:0e:fa:f9:85:b0:2c:58:e8:d7:29:
         43:72:85:b4:61:b2:da:3b:1d:b7:e9:b3:a2:b3:3a:ca:75:16:
         aa:15:d0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:53 2026 by rpki-client