Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/323830343a316262633a3a2f33322d313238203d3e203631373436.roa
File:                     323830343a316262633a3a2f33322d313238203d3e203631373436.roa (raw, json)
Hash identifier:          49QrEB43xBHCt3dU0cobrKD22v8XrZzlb7N6OD+JiYo=
Subject key identifier:   BE:FB:1A:F9:D4:F1:FE:8A:15:15:21:D6:99:CB:70:CE:67:25:FB:25
Certificate issuer:       /CN=1C08F161D05B2B854FDA7F58471297A3DE6844FC
Certificate serial:       3C74792D14D8D445709D2CA00EC3DFA9E31A4CE5
Authority key identifier: 1C:08:F1:61:D0:5B:2B:85:4F:DA:7F:58:47:12:97:A3:DE:68:44:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/323830343a316262633a3a2f33322d313238203d3e203631373436.roa
Signing time:             Thu 05 Feb 2026 10:18:36 +0000
ROA not before:           Thu 05 Feb 2026 10:13:36 +0000
ROA not after:            Thu 04 Feb 2027 10:18:36 +0000
asID:                     61746
IP address blocks:        2804:1bbc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.crl
                          rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 20:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:74:79:2d:14:d8:d4:45:70:9d:2c:a0:0e:c3:df:a9:e3:1a:4c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C08F161D05B2B854FDA7F58471297A3DE6844FC
        Validity
            Not Before: Feb  5 10:13:36 2026 GMT
            Not After : Feb  4 10:18:36 2027 GMT
        Subject: CN=BEFB1AF9D4F1FE8A151521D699CB70CE6725FB25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:55:7a:c7:d9:d7:f6:39:85:f6:b3:d1:d4:6f:
                    59:2b:32:f5:8a:9b:a6:c1:91:70:9e:a0:01:0a:90:
                    98:f7:b4:18:be:3c:a0:8c:46:d3:42:fb:ff:7c:04:
                    6d:f3:4c:9e:91:43:60:e2:50:1a:f7:4d:e0:85:71:
                    e0:36:39:b0:d6:d8:e3:c8:09:9e:82:8f:c5:6f:80:
                    4a:53:3d:a7:e3:04:c3:0f:40:dd:f3:72:0b:d1:fe:
                    5c:d7:e1:7e:52:f3:e4:66:32:cd:f5:2e:8d:dd:04:
                    38:3d:f5:db:60:d2:07:d8:07:6f:0a:14:69:35:bd:
                    c8:24:9d:4c:bf:61:78:04:a1:20:3d:10:c0:f6:2a:
                    3b:89:11:35:60:67:56:01:d4:00:6c:39:c7:7d:cd:
                    ca:eb:10:af:0c:12:63:3f:69:45:60:0f:38:61:98:
                    a0:e7:5c:ea:6e:2d:a3:b6:3e:ef:28:00:66:1a:17:
                    f6:bc:b3:4b:21:44:9e:b8:5a:35:e2:96:e4:d1:40:
                    00:2c:ff:5b:6e:47:5a:b7:13:32:1e:d8:6b:4b:ec:
                    b1:f6:8b:13:96:f3:d1:ba:e0:b8:50:f0:79:cc:a6:
                    20:62:c6:18:a4:23:ed:14:16:b0:12:10:9b:14:2a:
                    a6:eb:27:aa:69:93:fc:fd:0b:4a:a9:da:5f:0a:09:
                    c0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FB:1A:F9:D4:F1:FE:8A:15:15:21:D6:99:CB:70:CE:67:25:FB:25
            X509v3 Authority Key Identifier:
                keyid:1C:08:F1:61:D0:5B:2B:85:4F:DA:7F:58:47:12:97:A3:DE:68:44:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/323830343a316262633a3a2f33322d313238203d3e203631373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1bbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:29:6e:52:cf:13:b6:59:b1:2f:9b:2a:4f:3c:f4:91:6c:49:
         ae:4b:10:f5:56:79:ad:1a:85:de:22:1d:8d:11:8e:10:bb:b7:
         4d:c7:04:df:50:ed:67:bb:5b:ce:ad:e7:ea:f1:1b:eb:94:b1:
         d7:9a:c1:69:48:99:60:73:41:a2:1c:dc:70:00:c6:fa:ab:ff:
         22:db:07:a1:37:90:fc:8a:78:92:97:a4:f7:2b:4a:4d:a3:83:
         a3:6d:24:83:c3:c3:61:01:3b:88:c9:33:04:bc:13:ac:35:2c:
         8f:89:46:0d:aa:6a:14:37:31:9d:fc:2d:84:00:df:07:9c:86:
         73:55:94:a9:13:3f:18:cf:70:6c:93:e7:30:2c:8c:ab:4c:cc:
         f1:4a:9a:62:c0:a6:3e:47:1c:48:a5:7f:8d:85:0c:7e:c0:40:
         1d:be:2d:37:ab:be:0e:c0:ee:80:22:ab:46:b4:b4:29:e6:d7:
         33:c5:6c:09:c1:d1:c4:b2:93:10:71:9a:4c:38:8f:f4:8c:eb:
         e3:c0:05:5e:0e:25:bd:cb:6a:92:fa:a2:b7:50:bc:df:f6:b6:
         bd:21:ca:77:e4:47:b3:53:3f:46:e2:b2:c6:a6:7c:87:eb:12:
         7d:de:8a:12:5d:8f:44:68:ba:ee:76:e1:87:2b:96:34:4d:37:
         b2:dc:7e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:38:07 2026 by rpki-client