Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/323830343a353162303a3a2f33322d313238203d3e20323638343730.roa
File:                     323830343a353162303a3a2f33322d313238203d3e20323638343730.roa (raw, json)
Hash identifier:          +m9YWZk3TMhLiqol4NpnwKiR2A38eOMIKyxmbrjEwwU=
Subject key identifier:   B8:67:4F:ED:B7:B0:FD:B7:CE:08:36:EC:20:D9:1C:1A:66:55:99:6C
Certificate issuer:       /CN=233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41
Certificate serial:       62CDE50C58FFBB52CD622DC03C6F85DDD8FAA056
Authority key identifier: 23:3C:0F:0B:57:1F:DA:1C:33:13:BF:8A:F7:D6:86:C7:4B:AF:CB:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/323830343a353162303a3a2f33322d313238203d3e20323638343730.roa
Signing time:             Thu 05 Feb 2026 03:20:34 +0000
ROA not before:           Thu 05 Feb 2026 03:15:34 +0000
ROA not after:            Thu 04 Feb 2027 03:20:34 +0000
asID:                     268470
IP address blocks:        2804:51b0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl
                          rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:29:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:cd:e5:0c:58:ff:bb:52:cd:62:2d:c0:3c:6f:85:dd:d8:fa:a0:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41
        Validity
            Not Before: Feb  5 03:15:34 2026 GMT
            Not After : Feb  4 03:20:34 2027 GMT
        Subject: CN=B8674FEDB7B0FDB7CE0836EC20D91C1A6655996C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:83:91:69:01:26:83:98:74:fa:80:58:b2:0e:
                    63:26:a1:d3:27:a4:c0:01:36:5b:9b:40:dc:ed:5c:
                    11:f8:4a:43:01:ff:c2:f7:3d:a0:e4:df:be:b6:95:
                    7f:ee:55:6a:dc:fa:61:c4:f4:6c:62:74:9d:c8:e5:
                    8f:3d:dc:89:2c:ed:e3:8d:e1:af:5c:9b:d0:8b:83:
                    93:7b:0a:4d:95:a7:9e:ce:f1:cb:d4:6f:e3:3d:aa:
                    9f:a0:1f:fb:c8:6f:f7:41:cb:75:a0:a0:ee:b5:ad:
                    c1:ea:92:1c:58:00:07:64:4f:49:dd:a0:09:a0:06:
                    76:bf:99:c9:25:7b:0a:06:d5:bc:ad:de:21:70:a4:
                    f5:f9:92:28:fb:e5:76:bb:b2:7c:0b:e0:85:53:1e:
                    25:ee:75:df:76:56:f8:31:5e:77:36:ff:22:b1:6a:
                    dd:36:71:9d:7e:30:d3:08:01:ff:7f:5f:c0:bf:11:
                    76:f5:e4:a7:d1:ec:fe:68:04:bc:28:e3:78:75:ad:
                    ae:16:c7:21:f7:6d:f3:ad:e8:68:a1:85:0b:91:79:
                    7a:a3:9e:49:e6:8b:1f:08:c0:ab:89:e9:f6:43:45:
                    ff:a1:84:ac:1e:3d:d6:c3:fb:a1:2c:8a:63:87:f8:
                    7e:89:fe:ad:ca:dd:cd:59:21:29:31:7e:b5:c4:db:
                    be:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:67:4F:ED:B7:B0:FD:B7:CE:08:36:EC:20:D9:1C:1A:66:55:99:6C
            X509v3 Authority Key Identifier:
                keyid:23:3C:0F:0B:57:1F:DA:1C:33:13:BF:8A:F7:D6:86:C7:4B:AF:CB:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/323830343a353162303a3a2f33322d313238203d3e20323638343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:f5:0e:3e:dd:d4:e8:ba:bc:6b:b6:b4:84:83:73:a2:4c:d3:
         c1:e7:3e:71:8d:de:d1:55:d1:4b:9a:0a:ea:ef:3e:ad:dd:df:
         88:f4:7a:00:77:6c:4b:d1:a5:67:92:45:ac:c9:4b:e4:23:c9:
         94:39:72:f3:9f:1e:6b:22:42:60:2e:60:a5:de:77:91:18:e6:
         f6:5c:ba:af:b7:6d:5f:8a:3d:b5:4c:2e:31:df:9f:11:66:12:
         09:36:93:7a:81:6b:43:eb:73:dd:88:07:de:4a:8a:c0:1d:4b:
         1f:4a:ae:3b:01:d8:7a:20:c8:36:4f:48:c7:47:b5:4e:55:99:
         4f:6e:40:d4:82:3f:62:b9:57:80:96:79:b6:d2:0d:ad:5b:f3:
         d8:5e:37:7b:1c:c7:7c:b4:e5:86:19:cf:73:3f:d4:4e:6e:35:
         8a:b6:9a:f2:c4:74:2b:eb:35:fa:9d:f2:08:6c:fc:69:0b:e8:
         c6:fc:2c:b9:63:a0:d6:1e:28:d1:2b:d8:d4:31:0b:ee:09:e8:
         c7:d5:fb:a9:46:3b:ad:34:7d:1e:69:34:75:94:ba:f7:cb:a5:
         6b:46:0d:f3:c4:dd:be:b8:72:7d:78:3f:91:15:69:d3:d2:51:
         fd:a4:88:7a:51:76:ca:a4:b8:3e:7c:15:74:f7:c6:e6:d7:2c:
         a2:de:3c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:22 2026 by rpki-client