Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a383730303a3a2f34302d3430203d3e20323632363837.roa
File:                     323830343a333835633a383730303a3a2f34302d3430203d3e20323632363837.roa (raw, json)
Hash identifier:          eCHbU5LGu4RW2YG/snsByIbIu3qzb5fNN3jhuC0FJdc=
Subject key identifier:   3F:61:A4:E7:77:A5:6E:BB:6B:7E:0E:6A:69:87:27:D6:95:F3:3A:69
Certificate issuer:       /CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
Certificate serial:       21908A25529A89D2BF1D85C8F26ED1A0B912A693
Authority key identifier: D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a383730303a3a2f34302d3430203d3e20323632363837.roa
Signing time:             Fri 30 Jan 2026 14:01:44 +0000
ROA not before:           Fri 30 Jan 2026 13:56:44 +0000
ROA not after:            Fri 29 Jan 2027 14:01:44 +0000
asID:                     262687
IP address blocks:        2804:385c:8700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 18:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:90:8a:25:52:9a:89:d2:bf:1d:85:c8:f2:6e:d1:a0:b9:12:a6:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
        Validity
            Not Before: Jan 30 13:56:44 2026 GMT
            Not After : Jan 29 14:01:44 2027 GMT
        Subject: CN=3F61A4E777A56EBB6B7E0E6A698727D695F33A69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:25:44:1d:8f:c2:3b:f0:c5:1e:a5:fc:10:94:
                    0b:c0:d5:9c:c9:43:c4:13:77:38:ec:72:6d:35:c7:
                    72:42:ca:de:bf:63:fa:ca:ac:eb:6a:c9:84:4b:7d:
                    a7:1c:77:e9:89:32:6c:7a:bc:c7:e1:52:5a:a5:01:
                    07:27:d7:56:26:21:91:d9:f3:60:3f:bb:5a:ed:37:
                    ee:a5:6d:1e:f5:f9:9c:bf:75:59:c6:65:1a:d8:03:
                    e8:07:e0:5e:09:c8:0c:07:c0:ac:29:4e:8a:58:02:
                    c2:e0:2b:d2:09:0b:83:d6:24:81:be:e4:9f:89:4c:
                    ad:ef:a9:d4:5d:46:64:55:1a:d3:60:05:11:9a:96:
                    46:60:a6:dd:06:16:d7:1a:84:eb:93:b6:13:17:08:
                    06:b9:0f:62:44:12:97:9f:fb:e1:64:c7:10:24:7d:
                    e8:5f:dc:a5:e0:e1:d2:fc:32:eb:31:41:2f:27:d7:
                    ca:2f:2c:35:d9:30:00:b8:40:ac:5c:e5:3d:7f:b7:
                    64:fe:28:ee:47:32:1d:a8:1f:9d:93:50:c1:eb:d0:
                    e1:01:f5:20:7c:91:20:ab:d6:0e:40:76:a6:8e:27:
                    48:d2:ba:35:7c:99:42:28:49:58:55:fe:a1:40:5f:
                    55:4d:46:d9:1f:dd:48:51:c4:e6:d5:d4:14:fd:7d:
                    d8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:61:A4:E7:77:A5:6E:BB:6B:7E:0E:6A:69:87:27:D6:95:F3:3A:69
            X509v3 Authority Key Identifier:
                keyid:D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a383730303a3a2f34302d3430203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:8700::/40

    Signature Algorithm: sha256WithRSAEncryption
         3b:78:97:8d:4f:cd:98:e1:50:03:2e:c7:f4:f1:d1:c8:0d:8e:
         86:f8:e3:e5:3d:9a:3e:40:65:e4:20:ce:ef:f2:b3:c8:8f:cc:
         bc:f7:b9:76:44:7b:0a:af:fa:87:09:a8:c2:3f:96:a5:f0:d1:
         ca:15:1c:f6:b5:fc:91:38:7d:4a:b9:b4:96:fd:fe:45:ec:53:
         d3:0d:44:49:eb:35:df:1f:f2:c5:c7:f1:76:84:38:1b:41:71:
         2b:46:48:b0:54:7f:6a:04:3f:07:13:eb:ec:c1:06:70:a0:cc:
         ac:32:c0:01:ad:f3:fd:64:f1:95:70:42:3b:12:9b:77:69:ac:
         71:6e:13:ee:01:bf:6c:47:3f:59:68:d7:40:59:f1:9f:57:72:
         84:31:33:53:1c:7e:65:e9:f1:2f:ae:00:0e:ef:61:d9:b0:00:
         58:3a:5b:05:32:7d:c4:bb:b9:ab:05:2a:81:9a:f9:24:71:24:
         a8:25:f9:20:2f:b0:2e:0c:9d:9c:5d:3f:75:eb:36:63:39:85:
         3f:14:81:66:1a:8e:10:76:ff:44:71:cd:9d:5f:01:d8:6c:bf:
         f6:7f:d9:d5:64:c7:55:01:1d:fe:03:d9:2e:b8:c2:ff:c3:01:
         4a:c1:ed:d6:ee:51:52:12:4c:a3:54:f4:cb:c7:34:24:4c:c9:
         94:9a:80:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:06:57 2026 by rpki-client