Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a3a2f33332d3333203d3e20323632363837.roa
File:                     323830343a333835633a3a2f33332d3333203d3e20323632363837.roa (raw, json)
Hash identifier:          XgQBa1UyNrv9EZ11XG0YYpKsmICp0Uz8cyuQviXb70c=
Subject key identifier:   F2:21:65:F3:0F:F6:9D:DF:CC:22:EC:42:8D:51:94:91:EF:C4:47:BD
Certificate issuer:       /CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
Certificate serial:       64A15CC37FB864916E70D06B2580D179B571287B
Authority key identifier: D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a3a2f33332d3333203d3e20323632363837.roa
Signing time:             Fri 30 Jan 2026 14:01:42 +0000
ROA not before:           Fri 30 Jan 2026 13:56:42 +0000
ROA not after:            Fri 29 Jan 2027 14:01:42 +0000
asID:                     262687
IP address blocks:        2804:385c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a1:5c:c3:7f:b8:64:91:6e:70:d0:6b:25:80:d1:79:b5:71:28:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
        Validity
            Not Before: Jan 30 13:56:42 2026 GMT
            Not After : Jan 29 14:01:42 2027 GMT
        Subject: CN=F22165F30FF69DDFCC22EC428D519491EFC447BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2b:66:01:83:a8:2f:68:37:9e:cc:e1:88:82:
                    fe:fb:dc:25:8e:01:b3:39:df:56:2c:ab:ad:34:71:
                    27:c2:9c:f1:a3:b5:d7:12:25:ee:ee:0f:55:dd:51:
                    d6:e8:ff:c1:86:0a:38:0b:79:61:e9:e8:65:29:36:
                    49:04:dd:bc:83:41:92:b9:79:c8:38:2b:00:ed:8f:
                    72:48:d7:dd:f4:6e:7d:74:e2:e2:8d:b3:ab:ab:44:
                    05:74:5a:1f:6b:39:28:27:58:08:8c:f8:6c:9b:b1:
                    63:e2:89:b9:ea:83:3f:8d:ca:cf:d2:c8:ab:44:b4:
                    0e:6f:8f:94:e2:af:f9:b3:d9:14:9b:eb:ec:4a:33:
                    8f:7d:4e:73:d8:53:ce:1c:53:bb:f4:d8:43:5c:ec:
                    e2:f4:13:b9:4c:11:b5:cb:35:bc:ef:bb:ef:c9:ac:
                    bb:74:15:c3:60:f8:05:b8:8b:15:28:0e:03:06:c5:
                    ef:04:82:db:85:2e:98:f7:30:84:e7:89:d2:5b:bf:
                    4d:5c:94:12:96:6f:b3:1d:e9:73:cb:8b:03:35:bc:
                    ef:3f:52:90:a6:97:7b:be:9a:ce:5a:57:f7:32:c7:
                    82:12:42:c5:30:2b:0b:31:14:2b:d2:b6:b1:43:b9:
                    3a:c2:0d:e7:e0:4d:f8:a4:98:5e:3d:7a:81:08:b6:
                    61:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:21:65:F3:0F:F6:9D:DF:CC:22:EC:42:8D:51:94:91:EF:C4:47:BD
            X509v3 Authority Key Identifier:
                keyid:D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a3a2f33332d3333203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c::/33

    Signature Algorithm: sha256WithRSAEncryption
         01:f0:2b:29:cd:7d:fb:1d:ef:d6:41:2f:5d:84:54:a2:c6:cd:
         d5:c4:18:9c:dc:bb:8a:c0:d5:54:d8:d2:97:e7:20:31:c7:4a:
         a6:39:3a:a3:0f:03:61:36:68:0f:5f:ed:da:0f:53:1d:ee:b2:
         a3:8f:81:7b:e1:39:0b:d3:0e:92:c2:ed:87:86:bc:a3:a7:77:
         15:9d:f5:a7:96:28:7a:4e:53:69:1f:c9:23:1e:bf:ca:0d:89:
         62:3c:00:06:01:99:8d:e8:93:a7:fe:fa:a4:d0:bb:b6:59:68:
         b2:c3:fc:83:23:81:fe:e5:62:8e:ee:0d:4e:d1:e2:d6:2f:d8:
         0e:ab:b9:df:7a:8a:3c:a9:39:2b:29:ff:88:ee:3c:78:24:77:
         d2:d0:8c:6e:a5:11:2e:6b:af:ac:bf:18:31:36:2a:85:e2:d9:
         f3:27:fd:6e:9a:ae:d7:7d:6a:b2:b8:b0:60:0e:6f:8c:5b:ac:
         07:12:a9:73:0b:bc:48:25:f9:f1:04:d7:d8:06:d4:f9:2a:84:
         ad:67:4f:61:3a:a8:05:35:e7:16:6f:4e:82:e8:68:ac:96:03:
         e5:8d:70:76:13:46:27:23:db:9a:47:70:79:94:c2:e3:9e:ef:
         c8:ef:30:ea:4e:28:bc:bb:2b:c5:e9:99:30:ad:04:d7:f1:ef:
         d6:09:dc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:56:51 2026 by rpki-client