Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a3a2f33352d3335203d3e203631363337.roa
File:                     323830343a316331383a3a2f33352d3335203d3e203631363337.roa (raw, json)
Hash identifier:          L085gsRzbZR9/DxbC+iFDQoAMdvMHggbHv8F+of7R7g=
Subject key identifier:   8C:E8:30:5D:15:A8:44:27:4F:8E:76:F9:7C:32:A5:CF:E1:E2:77:4B
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       0B69667FC802A0CBF1B1A9BD8D7235248A8CCCF4
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a3a2f33352d3335203d3e203631363337.roa
Signing time:             Thu 05 Feb 2026 01:01:06 +0000
ROA not before:           Thu 05 Feb 2026 00:56:06 +0000
ROA not after:            Thu 04 Feb 2027 01:01:06 +0000
asID:                     61637
IP address blocks:        2804:1c18::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:36:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:69:66:7f:c8:02:a0:cb:f1:b1:a9:bd:8d:72:35:24:8a:8c:cc:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Feb  5 00:56:06 2026 GMT
            Not After : Feb  4 01:01:06 2027 GMT
        Subject: CN=8CE8305D15A844274F8E76F97C32A5CFE1E2774B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f3:5d:66:40:25:ca:9d:b8:d7:e7:56:f2:2e:
                    b0:00:3c:a9:cf:8a:3b:b9:b2:44:8a:e3:00:07:96:
                    cb:6f:34:9f:b3:01:17:5f:03:e2:93:13:fc:8f:24:
                    b8:c3:5a:40:d4:72:e8:ef:3b:af:6b:cf:05:7a:b4:
                    36:bc:21:48:da:fd:d0:43:cf:86:32:43:16:be:4f:
                    2f:9e:30:55:67:f1:da:d5:16:7f:77:a3:f7:af:12:
                    a0:34:a2:5d:6d:9e:6a:75:96:e2:45:6a:18:af:09:
                    b8:b9:44:da:89:49:56:d3:9a:1c:6b:e2:cf:8c:a5:
                    46:be:9c:bf:ef:34:db:c5:4c:43:63:c4:c7:d7:f6:
                    d9:b7:d9:06:b9:fa:e0:97:e7:2c:50:23:30:09:fe:
                    6b:f9:fa:48:40:2d:7c:c5:2d:25:15:97:de:de:e1:
                    12:53:ab:0a:02:5f:77:b3:54:43:88:ba:0e:ac:3a:
                    6a:cd:ee:20:f1:f3:44:bc:b4:1b:4b:af:d7:d8:ff:
                    6c:12:e9:d4:7e:ce:1e:88:fa:c4:fb:07:20:ce:59:
                    98:e2:70:e7:c5:1e:a1:7b:64:3b:95:15:00:24:c7:
                    48:55:9f:e6:13:bf:1e:a0:ec:53:6e:e1:81:7d:6f:
                    09:2c:fd:f2:d7:f7:f0:56:c3:fc:ab:7f:2a:53:9e:
                    80:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E8:30:5D:15:A8:44:27:4F:8E:76:F9:7C:32:A5:CF:E1:E2:77:4B
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a3a2f33352d3335203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18::/35

    Signature Algorithm: sha256WithRSAEncryption
         79:36:30:0f:8b:0e:6f:eb:6c:34:4d:f8:13:45:dc:2c:f4:d0:
         0f:c0:62:8f:1f:ba:7e:2c:4c:96:13:97:ae:58:06:ff:26:dd:
         0d:35:f0:2b:f7:18:78:55:b2:05:db:db:de:d0:ed:af:b7:53:
         89:94:96:ca:f0:b9:2a:ae:09:7c:59:ef:e2:0c:48:0c:37:2c:
         6d:ea:65:21:0c:a5:f5:8b:f5:c0:40:31:7e:f5:d7:ef:e5:e5:
         c7:d1:91:4f:2c:63:23:ca:4f:ff:ce:0f:76:e9:f5:80:29:b5:
         88:18:a3:66:47:47:16:c5:42:a6:a0:d7:b1:eb:10:93:d8:67:
         49:6c:a4:b1:5f:37:d3:51:b5:1a:92:b4:9e:38:80:dc:0c:02:
         ce:0b:ed:e1:70:af:2e:a4:4c:39:5b:e3:e2:ec:96:c4:5a:6b:
         ce:d6:15:27:89:43:99:11:f1:cd:84:0c:16:46:0f:2f:ed:30:
         64:87:cc:46:49:44:27:55:12:eb:b3:3f:63:65:4d:92:29:42:
         79:42:8b:49:c6:2b:e8:e4:e1:c7:6e:2b:83:2b:c0:41:1f:f1:
         ab:c9:61:c2:af:56:af:b2:f5:cf:6d:90:c2:31:76:ec:7b:5c:
         c7:a3:66:4e:e6:38:84:16:b0:b7:16:36:b8:07:64:58:ed:63:
         25:86:3a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:20:06 2026 by rpki-client