Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/1/323830343a336333633a3a2f33322d3336203d3e20323636313938.roa
File:                     323830343a336333633a3a2f33322d3336203d3e20323636313938.roa (raw, json)
Hash identifier:          lEjR7ZTLPDLnepdW549St2ErpyrVgOI36U6IFUAkH8Q=
Subject key identifier:   0F:FD:09:18:C8:C8:59:70:8D:5F:0E:58:95:CC:4D:52:E4:16:14:E7
Certificate issuer:       /CN=7953D59AEF2A6773CA8535EBECC18720D7980989
Certificate serial:       3344219B38781E6DEC8A28B952A33DF170028DAA
Authority key identifier: 79:53:D5:9A:EF:2A:67:73:CA:85:35:EB:EC:C1:87:20:D7:98:09:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7953D59AEF2A6773CA8535EBECC18720D7980989.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/1/323830343a336333633a3a2f33322d3336203d3e20323636313938.roa
Signing time:             Thu 05 Feb 2026 19:25:25 +0000
ROA not before:           Thu 05 Feb 2026 19:20:25 +0000
ROA not after:            Thu 04 Feb 2027 19:25:25 +0000
asID:                     266198
IP address blocks:        2804:3c3c::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/1/7953D59AEF2A6773CA8535EBECC18720D7980989.crl
                          rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/1/7953D59AEF2A6773CA8535EBECC18720D7980989.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7953D59AEF2A6773CA8535EBECC18720D7980989.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:21:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:44:21:9b:38:78:1e:6d:ec:8a:28:b9:52:a3:3d:f1:70:02:8d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7953D59AEF2A6773CA8535EBECC18720D7980989
        Validity
            Not Before: Feb  5 19:20:25 2026 GMT
            Not After : Feb  4 19:25:25 2027 GMT
        Subject: CN=0FFD0918C8C859708D5F0E5895CC4D52E41614E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:ed:42:ba:1f:63:b0:04:1c:df:c2:33:01:
                    40:dc:70:45:5c:11:8c:16:3d:71:ed:00:67:d4:0c:
                    8e:0f:c6:6b:28:c5:4c:c6:db:0d:e9:c8:14:aa:26:
                    79:88:12:7b:14:2b:99:85:b5:d1:a9:5c:28:4c:ca:
                    cb:f7:f4:e7:1e:8d:ed:6a:71:36:e3:1e:c7:9b:0c:
                    6a:cd:b3:4f:cd:41:c9:13:bf:32:7a:89:69:46:13:
                    39:f7:2c:66:22:32:1c:ac:9c:cf:35:ba:98:76:7b:
                    41:9e:25:28:63:ed:65:a5:65:83:bd:42:21:a6:06:
                    2f:fb:c7:21:9d:5c:e1:e8:97:ba:ae:bc:18:0c:e0:
                    0e:a2:b3:6a:3b:02:57:14:ae:c5:87:8a:21:fd:3e:
                    af:05:19:72:6b:b9:01:03:8f:b1:54:cd:a2:31:d3:
                    9d:b7:c1:9d:48:e2:29:52:92:24:d1:8e:28:c6:25:
                    6e:2b:c9:25:a5:f7:e3:e2:b9:81:67:9b:98:73:5c:
                    d4:39:30:77:f8:3a:fb:0c:65:90:39:01:7f:db:f4:
                    70:b7:3e:ed:91:ac:58:5a:9a:20:08:6c:69:76:a3:
                    05:9c:57:7a:a0:35:e7:0b:46:53:5f:e2:18:5f:ad:
                    0c:6d:3c:03:2a:2c:b4:d1:95:ab:bb:0a:cc:67:27:
                    dd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FD:09:18:C8:C8:59:70:8D:5F:0E:58:95:CC:4D:52:E4:16:14:E7
            X509v3 Authority Key Identifier:
                keyid:79:53:D5:9A:EF:2A:67:73:CA:85:35:EB:EC:C1:87:20:D7:98:09:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/1/7953D59AEF2A6773CA8535EBECC18720D7980989.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7953D59AEF2A6773CA8535EBECC18720D7980989.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/1/323830343a336333633a3a2f33322d3336203d3e20323636313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:7f:ef:4f:0b:45:58:2b:64:8f:32:b7:94:b6:97:fe:58:54:
         8e:10:18:0f:40:cc:88:95:2a:d1:ec:b0:34:f2:0c:f4:d9:5c:
         c2:37:5a:6c:38:ba:c4:48:f2:70:2a:0d:4c:5b:95:d8:6a:60:
         3f:3b:a6:79:4f:d7:3d:3d:a0:83:f3:4b:41:76:a1:56:cb:fb:
         03:6b:e5:53:36:cd:c2:07:bd:1a:9d:fe:8e:9c:37:ae:60:06:
         10:fd:77:2b:1b:dc:83:a1:ce:27:1a:12:15:15:2e:1b:b1:e9:
         6c:55:1a:7d:30:de:a5:23:8c:2b:3b:fd:84:cb:6f:e6:29:d9:
         59:9b:c9:85:a3:69:2c:bd:1c:99:26:43:62:ea:be:57:f6:da:
         90:39:ec:e6:5c:3d:0c:ae:88:c7:9c:f0:ff:73:58:34:2d:e7:
         d5:c5:8e:ba:a2:2f:c8:2d:84:51:b8:01:25:1d:fa:16:be:25:
         b9:d2:b8:2c:a3:8d:e9:64:63:b7:cb:34:28:23:48:9e:69:85:
         a4:c3:a6:05:90:34:2f:8c:ce:23:8b:1a:e0:a2:4e:2b:6c:39:
         60:cc:c6:6c:23:a0:ee:01:13:c1:b6:85:b5:e0:58:18:83:3b:
         d4:b5:70:78:70:9b:f4:0c:f4:c5:35:12:d7:6d:11:a3:4a:53:
         28:91:e1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:25:39 2026 by rpki-client