Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/323830313a38613a3a2f33322d3333203d3e203533313837.roa
File:                     323830313a38613a3a2f33322d3333203d3e203533313837.roa (raw, json)
Hash identifier:          nXUG4YEw/iihQMl7z1MSriAGxGwT9DdDas33aOxPkzI=
Subject key identifier:   5C:35:61:8E:E4:E3:49:AF:7A:3F:52:07:B1:E7:36:26:0C:BD:3A:E7
Certificate issuer:       /CN=F0ADD6FFCDFB09210157372271C0B492767D7001
Certificate serial:       739112637D3D9F3D772467691369B5E67611D006
Authority key identifier: F0:AD:D6:FF:CD:FB:09:21:01:57:37:22:71:C0:B4:92:76:7D:70:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0ADD6FFCDFB09210157372271C0B492767D7001.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/323830313a38613a3a2f33322d3333203d3e203533313837.roa
Signing time:             Thu 05 Feb 2026 19:29:56 +0000
ROA not before:           Thu 05 Feb 2026 19:24:56 +0000
ROA not after:            Thu 04 Feb 2027 19:29:56 +0000
asID:                     53187
IP address blocks:        2801:8a::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/F0ADD6FFCDFB09210157372271C0B492767D7001.crl
                          rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/F0ADD6FFCDFB09210157372271C0B492767D7001.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0ADD6FFCDFB09210157372271C0B492767D7001.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:91:12:63:7d:3d:9f:3d:77:24:67:69:13:69:b5:e6:76:11:d0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0ADD6FFCDFB09210157372271C0B492767D7001
        Validity
            Not Before: Feb  5 19:24:56 2026 GMT
            Not After : Feb  4 19:29:56 2027 GMT
        Subject: CN=5C35618EE4E349AF7A3F5207B1E736260CBD3AE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:68:7e:07:b3:e0:c7:d0:b6:9f:4b:40:1b:
                    12:e8:e3:7e:9c:39:8a:29:75:17:a8:99:2c:0a:33:
                    60:7d:c3:7b:b3:bc:63:38:ae:ef:96:a5:1d:36:8b:
                    7e:1a:68:2f:2a:82:a5:5c:b5:1e:46:4b:ed:1c:65:
                    ca:fc:00:dd:98:80:58:a3:10:01:ff:fd:78:f3:c4:
                    c9:42:88:5a:3d:27:3e:3a:65:d0:60:63:b5:ff:98:
                    49:61:29:82:21:07:f2:16:97:04:c0:8a:74:94:53:
                    b8:c5:b3:d7:07:ad:27:62:3e:a9:43:10:d6:4f:df:
                    8c:68:81:16:c8:88:0f:1f:6b:28:81:6c:a7:76:5a:
                    f2:e8:d1:f1:e1:ed:fb:15:bf:c6:56:2c:b6:8c:a9:
                    88:f2:ca:be:fb:26:7d:55:62:1c:b6:8f:1d:c1:4d:
                    ea:1e:2a:05:72:11:0e:3d:41:4c:b7:49:73:ef:c0:
                    c1:23:dc:24:1c:01:05:3d:05:37:47:6f:ca:c3:1d:
                    ea:44:bb:d6:cc:af:55:c6:f9:02:60:d4:e9:38:94:
                    19:ef:83:b8:ab:77:df:38:7c:68:0f:c8:cb:96:5b:
                    a2:cf:f9:1a:a9:22:e3:12:1c:73:d2:ae:01:53:9b:
                    83:d9:9a:0e:68:6d:30:eb:fa:ec:96:de:1b:62:68:
                    70:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:35:61:8E:E4:E3:49:AF:7A:3F:52:07:B1:E7:36:26:0C:BD:3A:E7
            X509v3 Authority Key Identifier:
                keyid:F0:AD:D6:FF:CD:FB:09:21:01:57:37:22:71:C0:B4:92:76:7D:70:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/F0ADD6FFCDFB09210157372271C0B492767D7001.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0ADD6FFCDFB09210157372271C0B492767D7001.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/323830313a38613a3a2f33322d3333203d3e203533313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:8a::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:5b:5a:86:1c:83:af:36:b9:c2:21:a1:13:84:22:96:2b:42:
         d8:fc:aa:8b:f7:41:24:9f:60:82:a6:ee:a8:91:7b:73:1a:2b:
         df:db:9b:c2:33:f3:69:85:be:c9:45:bd:d5:18:00:6f:78:89:
         f0:2d:85:0a:6d:b9:91:8d:19:34:26:55:9d:f5:54:fb:76:f3:
         30:4e:63:6c:47:8b:a0:58:d2:70:78:46:cc:60:a6:37:00:8b:
         a3:ac:b5:7b:86:d6:f3:65:13:8d:5a:87:dc:16:40:2a:47:27:
         97:51:f2:20:10:a1:c9:f7:9b:7d:92:08:2f:e1:a4:bf:90:b8:
         9c:fb:b4:86:b7:14:95:c2:1c:bb:aa:25:b0:c0:30:92:73:c2:
         d2:cf:16:0b:b1:28:01:4f:6b:a7:cc:47:2f:a0:79:c5:63:c9:
         b4:79:0a:f2:8d:d5:29:a6:67:97:e2:21:37:2d:ee:10:8e:aa:
         a4:c9:54:86:8d:3f:f5:d0:ed:9f:26:8a:6d:81:2e:cb:be:96:
         b3:8a:96:cd:d0:db:d7:0e:53:2f:c5:2d:98:78:6e:56:4d:59:
         0d:ce:76:bb:6c:b4:1e:e3:34:61:c3:dd:c8:d6:1f:f8:85:a8:
         cb:1a:27:f6:fe:19:4f:e9:3a:a9:f4:8f:92:70:b3:fd:65:16:
         4a:ef:58:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:19:47 2026 by rpki-client