Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a633030303a3a2f33342d3334203d3e20323731313137.roa
File:                     323830343a373638343a633030303a3a2f33342d3334203d3e20323731313137.roa (raw, json)
Hash identifier:          +EelTNN0QE17tbmt4yplZbOHW3zyApVSsft4dwkd94o=
Subject key identifier:   0B:40:38:20:43:C1:A8:80:9B:28:BF:2A:8A:07:EE:50:F7:E8:93:30
Certificate issuer:       /CN=62D01A32125D7B1F626C38C25BC340B899793CFA
Certificate serial:       1CE7AE5D9DBEC94796686ECFFEEEF3A3E6E81958
Authority key identifier: 62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a633030303a3a2f33342d3334203d3e20323731313137.roa
Signing time:             Thu 05 Feb 2026 22:12:20 +0000
ROA not before:           Thu 05 Feb 2026 22:07:20 +0000
ROA not after:            Thu 04 Feb 2027 22:12:20 +0000
asID:                     271117
IP address blocks:        2804:7684:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl
                          rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e7:ae:5d:9d:be:c9:47:96:68:6e:cf:fe:ee:f3:a3:e6:e8:19:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62D01A32125D7B1F626C38C25BC340B899793CFA
        Validity
            Not Before: Feb  5 22:07:20 2026 GMT
            Not After : Feb  4 22:12:20 2027 GMT
        Subject: CN=0B40382043C1A8809B28BF2A8A07EE50F7E89330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f8:4e:e7:31:2f:7b:56:aa:b5:57:d9:c1:9e:
                    91:3f:58:e1:4e:bd:47:1a:a6:f5:2f:df:ea:d7:54:
                    86:6e:29:06:b3:b6:25:f7:ba:6b:19:93:fb:6f:29:
                    ac:75:46:07:75:cf:ca:50:8c:4c:bb:5b:61:3d:6b:
                    79:81:27:79:4e:f5:00:e0:42:8d:56:d4:6c:c0:2b:
                    03:4a:fa:98:1b:b2:9a:71:23:26:e7:64:e2:21:76:
                    80:aa:12:27:12:85:10:e0:72:c3:7a:41:a4:8b:2a:
                    9a:62:71:36:e2:83:97:23:d9:a4:88:12:4e:01:aa:
                    dc:2e:4b:29:c0:6f:9b:e3:3f:11:8d:a3:5c:3f:49:
                    0b:d2:8f:b0:32:b4:51:b3:44:24:0d:ba:21:f9:04:
                    1c:ce:a1:8b:9e:46:f4:63:31:3f:c1:97:e9:f0:19:
                    10:26:73:48:be:a3:21:68:45:1f:3e:9e:4f:3e:59:
                    96:d2:87:b9:67:fa:7c:8f:50:8e:26:7e:29:c6:aa:
                    fd:70:e1:2c:79:b3:5b:9a:67:5f:b4:e4:87:37:b7:
                    b0:ec:40:d7:82:8e:d9:4c:1e:ba:d4:bb:01:f0:40:
                    c6:d8:64:7f:76:9b:b4:91:24:21:e4:9c:b3:e3:fa:
                    b9:c7:44:a7:38:40:85:13:ae:47:58:ae:39:4d:a9:
                    e0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:40:38:20:43:C1:A8:80:9B:28:BF:2A:8A:07:EE:50:F7:E8:93:30
            X509v3 Authority Key Identifier:
                keyid:62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a633030303a3a2f33342d3334203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7684:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         60:02:ed:ed:46:c4:e1:53:69:90:d7:45:09:1f:76:81:e1:47:
         d0:2a:e3:3c:a7:d3:ee:65:28:ff:89:4f:2c:33:9f:30:11:5d:
         ba:14:f3:66:2b:e1:f5:b8:4b:54:c9:8f:71:4a:6d:5b:af:62:
         24:7f:90:79:a5:d1:e6:81:b5:93:64:50:3d:8f:7c:bf:60:38:
         96:d1:93:eb:44:c7:9f:3c:af:7d:38:53:b6:53:e2:fa:12:1a:
         54:c1:bd:41:69:59:ea:b8:73:8f:67:31:de:fe:6b:04:3a:e2:
         cd:7b:e3:72:5c:85:b3:2b:a6:08:ef:a4:72:06:61:36:30:e8:
         76:b8:55:c1:fe:88:15:eb:cd:95:62:0b:45:c6:9b:0f:de:e3:
         a5:d5:c8:65:9f:e8:15:ae:1f:d6:67:31:c2:ff:50:3a:81:82:
         29:53:32:26:bc:b9:5e:33:b9:8c:ba:03:86:da:40:51:26:70:
         d7:30:c2:76:53:be:36:a4:78:c1:ae:38:38:54:1a:03:0f:8a:
         75:e3:9c:b4:a4:28:62:f7:54:57:d0:34:4f:b9:ea:6f:46:5b:
         9b:c3:89:da:21:11:56:26:4a:1d:0a:2f:83:d1:fd:20:90:be:
         b7:3c:39:39:97:6c:e1:51:0e:7f:61:ca:a2:36:a6:88:4b:ae:
         a0:13:8a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:39:08 2026 by rpki-client