Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/1/323830343a376233343a3a2f33322d3431203d3e20323731343137.roa
File:                     323830343a376233343a3a2f33322d3431203d3e20323731343137.roa (raw, json)
Hash identifier:          ZdRV9O6UEAMUReaH46a7nvJRkDR7hUawIqlvB2xkGt0=
Subject key identifier:   8E:DA:02:AC:99:59:CE:D5:FD:D5:4F:82:E8:B1:BB:80:DE:07:3B:36
Certificate issuer:       /CN=BB0C335B8FAE649732EBF11CC0FEC64FC701798A
Certificate serial:       10E2DB86944AEDB86DE07BB798B6A08D4B259F8D
Authority key identifier: BB:0C:33:5B:8F:AE:64:97:32:EB:F1:1C:C0:FE:C6:4F:C7:01:79:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/1/323830343a376233343a3a2f33322d3431203d3e20323731343137.roa
Signing time:             Thu 05 Feb 2026 15:47:45 +0000
ROA not before:           Thu 05 Feb 2026 15:42:45 +0000
ROA not after:            Thu 04 Feb 2027 15:47:45 +0000
asID:                     271417
IP address blocks:        2804:7b34::/32 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.crl
                          rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 16:20:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e2:db:86:94:4a:ed:b8:6d:e0:7b:b7:98:b6:a0:8d:4b:25:9f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB0C335B8FAE649732EBF11CC0FEC64FC701798A
        Validity
            Not Before: Feb  5 15:42:45 2026 GMT
            Not After : Feb  4 15:47:45 2027 GMT
        Subject: CN=8EDA02AC9959CED5FDD54F82E8B1BB80DE073B36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d3:3c:ab:2b:15:11:f6:f4:aa:47:f5:b4:de:
                    80:b2:87:29:d5:6c:1d:78:96:bb:0f:56:aa:c2:39:
                    3e:2a:09:77:af:f3:12:fc:92:91:41:39:e9:ad:76:
                    98:a9:b3:f8:b5:3d:0a:52:19:52:b1:0f:de:bb:f8:
                    74:e8:b6:2c:b9:8f:81:99:03:b7:c3:cd:94:bb:c0:
                    e2:e3:ad:80:fc:37:19:e3:e2:ad:87:7d:0c:ff:25:
                    6f:b0:af:85:17:cb:37:a8:b5:3d:14:42:ba:e3:56:
                    e4:cf:08:0e:f5:16:be:d3:b2:0d:07:8e:61:64:36:
                    49:8c:32:9c:5a:df:f9:bd:04:a0:cd:76:a3:62:64:
                    e0:13:60:4f:dc:be:a4:6c:ab:8f:34:c4:fb:1a:1f:
                    e8:3b:bc:d5:d0:02:8c:d4:b6:29:63:f9:6f:e7:58:
                    e0:5c:2d:ee:17:1b:16:90:1a:03:62:9f:57:39:f1:
                    06:87:a6:79:3c:37:3e:6c:db:b0:d1:f4:99:5d:15:
                    5d:fe:f0:ce:b5:ad:83:26:e5:44:43:2d:b3:2f:24:
                    f3:0f:ca:b4:a6:53:73:10:a3:bd:1f:99:0c:99:79:
                    39:9f:7b:13:7a:c1:2a:65:4a:e2:e5:59:9f:0d:09:
                    c6:9a:5a:36:51:6b:ab:e1:d1:3e:f6:5f:9e:65:74:
                    4a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DA:02:AC:99:59:CE:D5:FD:D5:4F:82:E8:B1:BB:80:DE:07:3B:36
            X509v3 Authority Key Identifier:
                keyid:BB:0C:33:5B:8F:AE:64:97:32:EB:F1:1C:C0:FE:C6:4F:C7:01:79:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/1/323830343a376233343a3a2f33322d3431203d3e20323731343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b34::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:b9:a6:d7:0b:56:2c:fe:20:ce:d8:bc:be:ca:7f:06:92:8d:
         8f:26:ab:00:14:73:a8:59:21:65:a6:ae:61:4d:28:0e:75:66:
         0f:ca:f6:96:87:71:7b:0e:b1:93:91:9f:03:72:b2:09:0f:e2:
         37:66:eb:c5:0e:f9:88:96:ea:78:3b:e7:f7:51:d7:23:94:47:
         56:d2:ec:56:98:1a:0a:77:13:87:98:cc:6e:de:80:e3:dc:00:
         9f:b0:e2:75:16:f9:4b:d6:a4:8b:24:3d:03:9e:40:16:47:35:
         8e:c0:e5:3a:88:b9:e6:0d:53:17:54:a4:6e:f9:45:79:19:7d:
         d6:1a:1a:f3:e4:22:07:ff:81:73:fd:c5:95:57:68:cf:37:fe:
         d6:ab:0b:00:2f:0b:d2:ac:53:d5:c6:56:52:1a:3a:9f:8a:ec:
         f9:9a:16:c0:55:e1:e4:fd:ae:42:37:a5:07:3a:60:e9:ad:dc:
         b9:d4:45:ff:9d:51:8b:ce:f8:48:af:e9:9f:b2:80:79:5d:bc:
         e3:0c:db:fa:4f:19:2d:8b:ac:f8:80:08:be:a9:6b:68:cf:6f:
         5a:20:4e:5b:ab:bf:68:92:7d:f8:de:09:78:f9:c1:0a:ee:a5:
         84:f0:b3:17:e8:23:4f:3f:dd:42:e3:71:95:dc:65:fc:0c:c4:
         4e:5b:ac:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:35:14 2026 by rpki-client