Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ASFPoznE41ueQyALgpiF8HskioVioGWe1BS8NhMCYNcD/1/323830343a333861633a3a2f33322d3438203d3e20323636343933.roa
File:                     323830343a333861633a3a2f33322d3438203d3e20323636343933.roa (raw, json)
Hash identifier:          OqrQVqPf4FvHFWIXQm1w8fGBNUe1la7p4eoOg1HOjPc=
Subject key identifier:   E3:5F:8A:BD:6F:A3:EC:63:3F:1D:72:4A:8D:DB:67:A3:32:EF:92:F9
Certificate issuer:       /CN=E91C1A315869758CDFD12EFEE57B881CFA756822
Certificate serial:       2855B23E7F889970246E464B5600F7C78544D18A
Authority key identifier: E9:1C:1A:31:58:69:75:8C:DF:D1:2E:FE:E5:7B:88:1C:FA:75:68:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E91C1A315869758CDFD12EFEE57B881CFA756822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ASFPoznE41ueQyALgpiF8HskioVioGWe1BS8NhMCYNcD/1/323830343a333861633a3a2f33322d3438203d3e20323636343933.roa
Signing time:             Thu 05 Feb 2026 17:08:39 +0000
ROA not before:           Thu 05 Feb 2026 17:03:39 +0000
ROA not after:            Thu 04 Feb 2027 17:08:39 +0000
asID:                     266493
IP address blocks:        2804:38ac::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ASFPoznE41ueQyALgpiF8HskioVioGWe1BS8NhMCYNcD/1/E91C1A315869758CDFD12EFEE57B881CFA756822.crl
                          rsync://rpki-repo.registro.br/repo/ASFPoznE41ueQyALgpiF8HskioVioGWe1BS8NhMCYNcD/1/E91C1A315869758CDFD12EFEE57B881CFA756822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E91C1A315869758CDFD12EFEE57B881CFA756822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:38:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:55:b2:3e:7f:88:99:70:24:6e:46:4b:56:00:f7:c7:85:44:d1:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E91C1A315869758CDFD12EFEE57B881CFA756822
        Validity
            Not Before: Feb  5 17:03:39 2026 GMT
            Not After : Feb  4 17:08:39 2027 GMT
        Subject: CN=E35F8ABD6FA3EC633F1D724A8DDB67A332EF92F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8a:28:4a:6a:8b:6d:30:dc:7c:a9:b9:c5:50:
                    69:b9:ad:b9:f3:2d:c8:f5:ff:a9:70:39:ae:39:75:
                    36:3b:b2:19:95:a1:8a:e7:38:8d:2e:a5:40:bf:0d:
                    3d:b9:15:8e:db:ee:2e:90:c7:06:bc:4c:14:a6:67:
                    e8:83:00:c6:10:e3:8f:9a:c5:6b:2d:ef:f8:4b:34:
                    ab:f4:2a:fc:70:1d:b9:b8:f9:6d:92:c3:79:de:97:
                    78:b6:b8:4f:c0:41:81:5b:5b:db:3a:c4:c6:3c:d3:
                    21:5b:47:db:c3:02:a5:f7:8d:50:70:40:50:96:27:
                    dd:08:43:98:25:2e:2d:c3:a4:6d:66:7f:5e:09:4a:
                    69:bf:b0:97:86:dd:16:aa:c6:86:2b:7f:86:cf:e8:
                    26:51:ba:33:13:b2:34:85:b8:9b:01:21:d5:e6:fa:
                    4d:6e:6b:aa:53:64:45:78:74:67:7a:39:62:fc:ae:
                    c2:35:86:89:9a:7c:b2:20:25:a1:09:f0:ef:e0:5d:
                    98:37:82:a5:f9:af:67:74:b8:16:94:5f:be:c4:a0:
                    d1:9e:34:e1:09:6d:f8:31:3b:26:e4:3c:ca:25:f9:
                    79:ec:d3:ce:4d:d9:a6:cb:be:a8:33:db:cf:26:c5:
                    69:f9:e2:de:28:a1:a7:64:f6:3e:8a:3c:56:44:3d:
                    6f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5F:8A:BD:6F:A3:EC:63:3F:1D:72:4A:8D:DB:67:A3:32:EF:92:F9
            X509v3 Authority Key Identifier:
                keyid:E9:1C:1A:31:58:69:75:8C:DF:D1:2E:FE:E5:7B:88:1C:FA:75:68:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ASFPoznE41ueQyALgpiF8HskioVioGWe1BS8NhMCYNcD/1/E91C1A315869758CDFD12EFEE57B881CFA756822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E91C1A315869758CDFD12EFEE57B881CFA756822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ASFPoznE41ueQyALgpiF8HskioVioGWe1BS8NhMCYNcD/1/323830343a333861633a3a2f33322d3438203d3e20323636343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:92:3e:7a:61:e1:fa:f3:e1:1d:d1:ee:9c:af:7b:4c:87:d2:
         73:cb:b4:75:a5:37:12:73:70:87:97:bf:bf:11:7e:4f:6e:64:
         dc:b8:dc:e3:a9:3b:66:ba:7e:c7:cc:24:c5:1e:96:d8:15:09:
         a0:34:61:1d:9e:3b:c6:f6:c7:c0:a5:1f:5d:29:9c:55:2a:b5:
         86:25:f4:3f:3b:45:64:8f:96:25:a9:3b:4d:a9:4f:ce:d5:b8:
         23:95:e7:d5:cb:09:99:f4:64:f5:de:45:22:e4:66:a6:00:a8:
         a8:1c:18:3c:b7:8e:60:94:4f:ac:7c:4d:72:44:9a:a8:87:8b:
         1d:13:9b:c9:eb:f0:d4:c1:f3:9e:f2:ec:d0:db:a6:6b:ef:21:
         b9:d6:ca:eb:3b:e9:19:a9:78:ea:56:7e:39:cf:85:4d:cf:26:
         2b:fe:06:35:6b:2a:ed:ed:90:32:db:b5:b3:21:4c:0b:b4:91:
         6f:7f:f2:85:7c:98:90:dd:82:30:93:0f:4e:81:f4:c9:8f:10:
         e6:7b:f0:8f:37:2e:fe:49:27:5a:da:fe:83:33:1d:20:ce:23:
         e4:3a:5f:2e:9d:fa:f1:49:31:f7:bf:c1:0a:25:ec:59:d7:85:
         d1:ea:35:dc:43:c2:db:79:9e:fd:dc:c0:e1:5d:5e:b5:83:44:
         15:d6:d9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:54:45 2026 by rpki-client