Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a383030303a3a2f33332d3333203d3e20323639363437.roa
File:                     323830343a363762633a383030303a3a2f33332d3333203d3e20323639363437.roa (raw, json)
Hash identifier:          FLXGaKLJIXT/ztk+GQ6KZbmG3HuPwYPyDxg5J/txsdc=
Subject key identifier:   2B:38:CB:80:79:40:D1:06:5E:B9:FB:46:CF:E4:2C:27:35:5E:87:43
Certificate issuer:       /CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Certificate serial:       6FFEFCD0E274D24EE121AC77F6049218A85E28DC
Authority key identifier: D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a383030303a3a2f33332d3333203d3e20323639363437.roa
Signing time:             Thu 05 Feb 2026 09:00:30 +0000
ROA not before:           Thu 05 Feb 2026 08:55:30 +0000
ROA not after:            Thu 04 Feb 2027 09:00:30 +0000
asID:                     269647
IP address blocks:        2804:67bc:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
                          rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fe:fc:d0:e2:74:d2:4e:e1:21:ac:77:f6:04:92:18:a8:5e:28:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
        Validity
            Not Before: Feb  5 08:55:30 2026 GMT
            Not After : Feb  4 09:00:30 2027 GMT
        Subject: CN=2B38CB807940D1065EB9FB46CFE42C27355E8743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a8:c3:f1:a6:8e:9d:84:b5:5c:ef:e6:ce:b6:
                    f1:08:99:64:99:53:02:cf:36:da:cc:96:20:1e:e5:
                    b7:3e:07:d1:e3:ba:4d:fc:b1:49:e1:a7:f6:0c:b0:
                    61:5a:62:c5:67:05:1b:60:9e:80:4d:35:47:5d:2b:
                    7f:f1:e1:87:12:ee:d7:9b:99:bc:4e:90:17:ce:bb:
                    5c:a0:7a:ae:e2:d3:a7:a7:af:8e:0f:31:a8:9a:5e:
                    3b:cb:5c:a8:1b:97:39:30:63:01:b9:48:62:2f:4e:
                    9d:ca:40:6b:67:56:af:e2:2a:e0:1f:58:26:3e:5d:
                    27:50:ab:a4:e7:85:43:cf:ec:b8:65:2a:ba:f1:a8:
                    79:6f:a2:74:2a:91:b4:a8:f5:c3:c3:e1:33:98:5b:
                    dd:86:73:be:6e:c9:58:ac:95:3f:ab:c4:ac:02:9c:
                    74:c7:80:5f:df:8d:7f:2a:8f:0f:ff:52:b2:0a:d4:
                    a6:c9:55:4f:c7:51:33:99:b1:bc:ee:c4:20:86:4d:
                    e0:d8:5c:85:7d:32:83:c4:6b:81:02:56:75:d0:75:
                    20:1b:9f:66:9c:2e:14:8a:41:77:35:65:40:48:46:
                    2b:9f:30:d1:bb:6b:82:71:20:af:ec:c9:32:69:a1:
                    20:21:ad:81:68:35:e4:49:33:c0:82:bf:50:e4:61:
                    ee:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:38:CB:80:79:40:D1:06:5E:B9:FB:46:CF:E4:2C:27:35:5E:87:43
            X509v3 Authority Key Identifier:
                keyid:D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a383030303a3a2f33332d3333203d3e20323639363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67bc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a4:91:60:1c:e1:ae:85:57:4e:b6:42:47:0f:5c:1f:7c:52:4a:
         86:e8:ee:cf:4c:25:5d:62:48:5f:f8:c0:22:55:80:17:dd:00:
         f0:2d:bf:73:25:c8:dd:bc:92:80:16:e2:46:51:05:13:67:83:
         0f:bd:eb:97:68:bf:05:f3:c4:70:7c:93:d0:a3:63:ba:c5:08:
         8e:57:5b:7a:f5:cc:00:46:bc:cf:34:aa:45:d0:e8:c2:89:35:
         80:ae:93:4c:78:ac:63:02:a0:86:e7:60:3f:d9:ff:e0:1d:e4:
         9d:d5:2f:fa:1c:00:82:df:4c:ee:18:64:f7:f2:f3:12:e5:43:
         25:ce:54:58:19:c5:b8:e8:02:77:73:2c:f5:80:5d:19:d3:25:
         16:50:c0:6c:a1:f9:66:f1:a7:f3:7a:67:ec:87:2a:e0:1a:39:
         61:1d:38:ea:5c:1e:eb:05:5f:54:ad:fa:ad:87:8c:02:3f:2c:
         19:b1:2a:1a:d3:d5:b4:80:19:3c:6a:b9:6b:c4:b7:99:75:9e:
         dc:24:20:2c:e3:78:9a:dc:c6:b2:20:ba:50:df:04:96:f0:17:
         a8:2d:48:d0:ba:0c:ed:c8:7c:46:44:7b:ad:24:e6:43:f0:31:
         07:57:63:e2:7b:f5:af:eb:cf:93:b2:1b:e9:42:8e:73:f9:e8:
         5b:8c:83:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:37:53 2026 by rpki-client