Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/323830343a6162303a3a2f33322d313238203d3e203532393037.roa
File:                     323830343a6162303a3a2f33322d313238203d3e203532393037.roa (raw, json)
Hash identifier:          QVIcZqioBhcXAqcZvTgTwxiiMm3Yk0zlL1BWuuwAsIg=
Subject key identifier:   D9:97:F6:12:A9:72:48:6F:2D:8F:43:94:A4:BC:80:0F:B4:DC:F2:E7
Certificate issuer:       /CN=8547D0C1A84725BCC8A05B725C22293DAC420C79
Certificate serial:       2B9C74874E34D96312B36C54217A4A4A8FFAF864
Authority key identifier: 85:47:D0:C1:A8:47:25:BC:C8:A0:5B:72:5C:22:29:3D:AC:42:0C:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/323830343a6162303a3a2f33322d313238203d3e203532393037.roa
Signing time:             Thu 05 Feb 2026 03:59:37 +0000
ROA not before:           Thu 05 Feb 2026 03:54:37 +0000
ROA not after:            Thu 04 Feb 2027 03:59:37 +0000
asID:                     52907
IP address blocks:        2804:ab0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.crl
                          rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:9c:74:87:4e:34:d9:63:12:b3:6c:54:21:7a:4a:4a:8f:fa:f8:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8547D0C1A84725BCC8A05B725C22293DAC420C79
        Validity
            Not Before: Feb  5 03:54:37 2026 GMT
            Not After : Feb  4 03:59:37 2027 GMT
        Subject: CN=D997F612A972486F2D8F4394A4BC800FB4DCF2E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d9:10:bd:fa:43:e3:af:7b:26:7f:bc:02:88:
                    97:b9:83:13:91:5d:e0:d8:95:ea:f0:fd:65:43:77:
                    34:84:71:92:36:3c:03:38:2b:ee:13:3a:48:f6:95:
                    93:44:97:05:b7:ca:b1:d6:28:6f:74:0b:a4:81:88:
                    ff:ae:01:7b:9d:27:dd:d1:10:e0:a3:21:48:c8:ae:
                    9e:10:59:de:e7:9e:38:39:d3:b5:b0:79:01:71:01:
                    79:d9:14:5c:15:06:f0:b5:1e:64:6a:a4:65:70:1d:
                    13:94:39:94:d1:da:87:ae:6c:db:97:72:70:64:14:
                    69:ec:38:45:14:c8:d8:40:80:73:f4:24:b4:27:e4:
                    96:fc:36:38:2b:59:7b:e3:b6:27:eb:51:e6:48:38:
                    2a:56:a2:ef:a4:48:f7:48:68:ba:0d:dc:1d:50:19:
                    d1:f7:65:c3:c6:73:db:c4:df:83:3f:76:af:e3:67:
                    f5:54:1b:96:fe:26:4b:c7:ca:a8:5e:68:f1:86:c0:
                    fd:b7:96:fc:67:b9:59:79:1f:cd:3f:27:5c:b0:95:
                    db:94:6f:5b:ab:3f:58:a6:d6:98:39:e5:72:9a:85:
                    e3:5c:d7:00:6a:62:20:07:09:c3:10:39:f0:1e:48:
                    0a:70:85:7c:4e:b0:1e:15:37:55:8f:57:0e:27:07:
                    a1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:97:F6:12:A9:72:48:6F:2D:8F:43:94:A4:BC:80:0F:B4:DC:F2:E7
            X509v3 Authority Key Identifier:
                keyid:85:47:D0:C1:A8:47:25:BC:C8:A0:5B:72:5C:22:29:3D:AC:42:0C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/323830343a6162303a3a2f33322d313238203d3e203532393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ab0::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:db:88:68:5e:37:ca:e6:22:6a:c0:20:39:b7:ef:7e:0a:81:
         f6:9a:25:33:35:50:a8:e0:b0:74:cc:86:17:4f:0d:69:38:87:
         3b:8f:f8:23:8d:e1:24:ce:04:2e:29:a4:58:b6:62:c9:1a:38:
         e3:4f:44:3e:32:35:04:e2:93:05:a6:14:8e:b6:0f:dd:17:40:
         74:ee:32:de:69:c8:75:82:66:d1:94:99:37:1e:7b:cb:9c:8e:
         92:34:7f:da:2a:b0:f7:bc:e0:22:38:35:ea:ec:f6:de:96:e3:
         e0:ff:f3:1c:c5:7c:a0:c7:b6:fa:2e:3a:af:b0:c4:49:e2:71:
         1c:f0:71:2e:67:71:39:28:c3:c3:8b:8d:d1:44:17:48:b0:7a:
         96:59:af:6d:5a:f2:c4:55:bf:75:a4:f0:75:e0:79:7d:b0:c7:
         c8:a6:bc:57:6b:3a:9f:08:70:b7:24:9c:28:1d:38:87:da:83:
         84:4e:7d:bb:fb:aa:12:8d:d4:8e:b4:c4:13:b8:00:16:9d:1f:
         71:7e:76:58:6c:03:c3:f9:21:21:5e:a6:ce:ba:4e:c9:60:b7:
         58:5a:65:87:e0:92:87:de:d0:d7:55:67:ee:5b:d1:98:30:c9:
         70:33:76:e6:ae:72:fd:13:4d:0a:0b:93:03:33:9f:2b:f2:71:
         1b:7a:a8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:55:35 2026 by rpki-client