Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/323830343a376138633a3a2f33322d3438203d3e20323731333738.roa
File:                     323830343a376138633a3a2f33322d3438203d3e20323731333738.roa (raw, json)
Hash identifier:          S30lArvBRQV34B5cGnIIyZxnEbLdm70YMT6HkKRvj9U=
Subject key identifier:   F8:AF:D2:8C:AD:63:A6:A5:96:80:32:B1:62:7B:12:CC:48:1B:F7:9D
Certificate issuer:       /CN=E2072C475E2925AB717FA25CB0C35668A240297C
Certificate serial:       331F222ABECD6CC2A9F21AECB080CFE84AFE0A0A
Authority key identifier: E2:07:2C:47:5E:29:25:AB:71:7F:A2:5C:B0:C3:56:68:A2:40:29:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2072C475E2925AB717FA25CB0C35668A240297C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/323830343a376138633a3a2f33322d3438203d3e20323731333738.roa
Signing time:             Thu 05 Feb 2026 02:50:44 +0000
ROA not before:           Thu 05 Feb 2026 02:45:44 +0000
ROA not after:            Thu 04 Feb 2027 02:50:44 +0000
asID:                     271378
IP address blocks:        2804:7a8c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/E2072C475E2925AB717FA25CB0C35668A240297C.crl
                          rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/E2072C475E2925AB717FA25CB0C35668A240297C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2072C475E2925AB717FA25CB0C35668A240297C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:19:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:1f:22:2a:be:cd:6c:c2:a9:f2:1a:ec:b0:80:cf:e8:4a:fe:0a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2072C475E2925AB717FA25CB0C35668A240297C
        Validity
            Not Before: Feb  5 02:45:44 2026 GMT
            Not After : Feb  4 02:50:44 2027 GMT
        Subject: CN=F8AFD28CAD63A6A5968032B1627B12CC481BF79D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:a7:d7:74:95:eb:75:e4:0c:3f:2e:72:6a:
                    ba:aa:6a:73:b1:1a:fc:73:83:87:e0:5f:0c:49:34:
                    4b:a2:7e:4f:43:cd:24:e6:4f:df:c6:a5:40:44:28:
                    dd:5e:d9:22:1e:b5:fb:9a:31:b6:cd:55:3d:b0:26:
                    de:55:77:8f:1d:8f:4d:dc:f9:68:0d:fc:6a:6f:b7:
                    0c:a3:f1:53:79:a6:ff:2a:8f:fe:2b:4c:07:22:9c:
                    f7:a0:6a:b6:a8:84:af:3f:08:9f:7d:89:50:8f:e6:
                    9a:68:ca:f7:4a:23:69:a1:3a:8b:6f:a2:30:1a:e9:
                    54:f2:7f:a6:b4:15:24:1e:aa:de:d8:26:53:f0:82:
                    34:83:74:84:cd:f3:07:c0:98:34:2f:09:b2:2d:57:
                    ad:94:44:ee:36:84:b8:47:28:0a:c9:d6:75:92:53:
                    2f:9f:c1:3e:fd:c2:56:1b:99:ff:f4:3a:1b:f7:8a:
                    c3:9d:4e:26:1e:cc:86:f5:ef:a7:67:bf:cb:fa:9e:
                    7e:5d:cc:ea:68:f3:9f:8f:2e:79:97:7b:2d:64:e8:
                    10:e0:a6:19:ca:3f:25:cd:f6:2f:b5:3c:2c:3c:81:
                    8d:d0:3b:da:a5:c3:28:6b:63:dd:12:bb:c8:a9:e1:
                    50:ec:df:32:0b:83:b9:9c:aa:ff:34:be:a9:88:e7:
                    56:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AF:D2:8C:AD:63:A6:A5:96:80:32:B1:62:7B:12:CC:48:1B:F7:9D
            X509v3 Authority Key Identifier:
                keyid:E2:07:2C:47:5E:29:25:AB:71:7F:A2:5C:B0:C3:56:68:A2:40:29:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/E2072C475E2925AB717FA25CB0C35668A240297C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2072C475E2925AB717FA25CB0C35668A240297C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/323830343a376138633a3a2f33322d3438203d3e20323731333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:a4:a1:94:eb:b0:bc:e0:52:27:64:e8:c0:f2:60:2d:43:ab:
         86:c1:5a:52:f5:f4:77:3a:d5:d5:43:59:5c:64:32:12:af:ae:
         98:82:52:99:ba:b6:39:85:90:81:5c:59:fa:79:8e:02:24:83:
         16:74:11:2c:a1:b1:95:a3:48:6e:56:45:cb:3c:50:f9:2e:bf:
         5f:a2:01:7c:2d:0e:bc:bd:c1:1d:61:a5:28:43:0e:4d:67:99:
         0b:51:80:68:c6:bc:71:48:7d:23:d9:df:54:7c:87:f8:a8:75:
         03:50:e1:e7:38:48:2d:4a:b9:b0:fd:98:12:bf:87:97:f4:7e:
         6f:1c:12:a5:b6:11:1c:b0:bc:1b:2c:b4:b1:bf:4c:18:c1:c2:
         c8:0c:0b:80:c5:4a:90:dd:68:fd:3f:0d:da:5a:8b:d8:c0:07:
         33:28:49:95:60:99:f5:f9:31:9c:c3:70:da:37:a8:f7:e8:69:
         46:9e:e2:fc:61:4b:92:71:20:aa:16:c8:0d:a7:f0:9a:d6:36:
         6d:85:94:dc:72:73:31:74:40:6f:f8:c4:3d:3e:06:9e:9b:ec:
         88:c1:1f:2a:0e:54:d1:b1:ec:03:74:69:54:40:ce:26:26:ff:
         da:f4:4e:6d:fd:4c:78:f5:da:4b:b9:69:06:1c:3b:ad:45:99:
         15:ee:bb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:11:25 2026 by rpki-client