Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/323830343a346532383a3a2f33322d313238203d3e20323638323433.roa
File:                     323830343a346532383a3a2f33322d313238203d3e20323638323433.roa (raw, json)
Hash identifier:          v8q/iUYydz7ftSo63L2d/tNrLfESlYbckeHSNS0gRxg=
Subject key identifier:   3B:ED:CB:13:8B:79:F9:02:81:5F:7F:98:AB:D5:B5:00:1A:88:A1:A8
Certificate issuer:       /CN=2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE
Certificate serial:       298F9950A143EFB48796007F3141DE03CAADAAA3
Authority key identifier: 2E:0D:8C:A9:FB:9B:93:5A:BD:E6:72:6B:E1:EA:2A:85:70:F4:EF:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/323830343a346532383a3a2f33322d313238203d3e20323638323433.roa
Signing time:             Thu 05 Feb 2026 17:09:22 +0000
ROA not before:           Thu 05 Feb 2026 17:04:22 +0000
ROA not after:            Thu 04 Feb 2027 17:09:22 +0000
asID:                     268243
IP address blocks:        2804:4e28::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.crl
                          rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 21:41:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:8f:99:50:a1:43:ef:b4:87:96:00:7f:31:41:de:03:ca:ad:aa:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE
        Validity
            Not Before: Feb  5 17:04:22 2026 GMT
            Not After : Feb  4 17:09:22 2027 GMT
        Subject: CN=3BEDCB138B79F902815F7F98ABD5B5001A88A1A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b7:91:b6:51:3d:38:6b:5f:1b:fe:25:23:9c:
                    1c:41:0d:50:d4:ed:b2:10:e0:c0:b8:6a:d1:e1:11:
                    08:be:89:ba:38:f6:f5:09:d1:76:07:33:0b:f9:e0:
                    eb:bd:83:ef:77:e6:e7:e4:bd:c0:a5:7a:4b:32:97:
                    27:03:33:79:1b:f7:24:58:cc:6f:10:e0:f1:b5:0c:
                    f9:3e:46:01:73:d5:32:08:d4:d0:f7:f9:dd:fb:6b:
                    47:e3:99:33:6d:bc:8a:f5:c0:30:34:ba:bd:d6:45:
                    bc:dc:6d:f8:8f:d3:e6:e5:84:1e:3e:7f:75:c1:a5:
                    ae:05:a2:52:67:af:45:06:99:c8:1e:aa:ff:f2:c4:
                    86:65:af:03:e7:fe:6b:2a:27:21:88:f4:bb:9b:41:
                    cd:87:2d:8e:e9:f0:6d:96:00:4d:56:0d:93:9c:73:
                    26:e0:88:cb:d6:8a:4b:b6:06:14:50:99:0d:27:2e:
                    85:49:45:f0:41:5c:61:92:12:88:02:2c:2e:20:1e:
                    cc:98:cc:95:eb:4d:64:41:f1:fa:0d:bf:e9:25:0b:
                    9b:df:9e:70:f0:48:a9:b9:fd:e7:6c:dd:01:72:f5:
                    ca:2b:ab:6d:ac:9d:49:1a:28:8d:e6:6d:c5:00:f1:
                    9c:fb:8b:34:64:32:e1:b8:be:bf:95:01:30:75:14:
                    28:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:ED:CB:13:8B:79:F9:02:81:5F:7F:98:AB:D5:B5:00:1A:88:A1:A8
            X509v3 Authority Key Identifier:
                keyid:2E:0D:8C:A9:FB:9B:93:5A:BD:E6:72:6B:E1:EA:2A:85:70:F4:EF:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/323830343a346532383a3a2f33322d313238203d3e20323638323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e28::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:63:fd:d1:6b:19:13:6f:7f:99:e2:0a:b4:09:5f:0a:9d:69:
         4a:84:d2:fc:e5:35:eb:b0:c4:ba:be:9c:c5:bb:b8:28:7c:ff:
         d8:8c:03:9c:19:9d:1b:3d:f9:15:48:0e:61:83:6c:c0:af:a9:
         7f:94:bd:35:eb:18:1a:a8:e6:d6:ae:92:52:50:de:9d:af:14:
         2b:ab:f8:77:43:10:f9:77:ac:c4:94:69:55:c6:d2:44:1c:d9:
         ed:7b:0d:4f:24:e5:c4:d5:77:62:f2:c0:a1:58:c0:25:64:e7:
         2d:30:7b:c6:25:97:5b:9b:7a:1a:3f:e9:f5:be:12:03:6f:ef:
         a2:bf:1b:3e:1d:7b:6a:df:a2:eb:61:56:52:0d:95:5b:ed:12:
         4e:21:ee:a1:6f:19:94:f1:0b:4c:4c:31:3d:fc:5e:6b:b2:9a:
         1f:ed:2c:72:9a:62:84:02:e7:53:dc:c4:c1:db:61:62:f0:96:
         d4:df:8c:f6:1e:e6:ec:e3:d5:c8:84:a1:6e:3d:f6:79:d5:93:
         6b:c9:fb:46:bf:da:bd:b3:d2:09:d6:9a:d5:5c:22:44:f5:9a:
         a4:ff:4d:ce:0b:ef:1e:f6:c0:0d:ad:64:6c:b2:cc:05:16:42:
         78:0c:68:7c:0b:ec:1f:fa:d6:f3:8d:04:c9:8d:60:a5:45:b9:
         a1:4e:d4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:19:27 2026 by rpki-client