Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/323830343a336337303a3a2f33322d3335203d3e20323636323131.roa
File:                     323830343a336337303a3a2f33322d3335203d3e20323636323131.roa (raw, json)
Hash identifier:          lxzEJ2fkqlA7af4Xu9YJ9IV+QMfW9bA66QTstUrGErk=
Subject key identifier:   77:CD:22:36:9A:E1:D3:44:19:6A:20:D3:35:62:3E:30:E6:F8:AD:F8
Certificate issuer:       /CN=F5B3CC6963F291D11F0193BD27FC4E83D14592B9
Certificate serial:       58E8F7B0A61FA320757F9302EF494F04B5B56982
Authority key identifier: F5:B3:CC:69:63:F2:91:D1:1F:01:93:BD:27:FC:4E:83:D1:45:92:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/323830343a336337303a3a2f33322d3335203d3e20323636323131.roa
Signing time:             Wed 04 Feb 2026 20:00:09 +0000
ROA not before:           Wed 04 Feb 2026 19:55:09 +0000
ROA not after:            Wed 03 Feb 2027 20:00:09 +0000
asID:                     266211
IP address blocks:        2804:3c70::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.crl
                          rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e8:f7:b0:a6:1f:a3:20:75:7f:93:02:ef:49:4f:04:b5:b5:69:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5B3CC6963F291D11F0193BD27FC4E83D14592B9
        Validity
            Not Before: Feb  4 19:55:09 2026 GMT
            Not After : Feb  3 20:00:09 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7c:88:ae:0e:30:39:85:0b:e5:7c:7d:6e:33:
                    44:77:5f:d6:6d:aa:2d:06:0e:b4:78:82:bd:e6:9a:
                    7a:20:a8:5d:94:d4:d9:20:63:5c:50:dc:59:87:c8:
                    5a:c4:c1:cf:47:31:a5:cb:a4:17:61:7d:38:bf:6c:
                    fa:cf:11:fe:50:ca:30:ea:ca:97:b0:a9:6d:46:8b:
                    10:02:08:a8:e9:3d:41:97:98:12:51:37:2a:ea:da:
                    1d:50:ff:80:4e:82:d8:e4:a3:02:7c:6f:48:76:c4:
                    cb:87:92:e5:28:3d:4d:25:99:9f:26:80:bd:10:05:
                    85:5a:ff:0c:ce:b2:76:b3:e9:ee:11:1d:7c:63:5e:
                    cc:0f:ea:27:6e:18:56:93:fc:41:c9:1f:8d:66:2a:
                    51:8b:ce:6e:f5:39:98:2e:ef:39:83:74:74:60:83:
                    d6:f7:e1:93:97:e5:9a:d2:8c:67:6b:f2:e4:23:14:
                    fc:cc:05:fd:60:a1:dd:b8:69:69:e1:5b:d6:1f:b3:
                    2d:8e:e8:31:eb:c6:39:2c:f1:0a:ee:81:fc:ee:0a:
                    ff:a4:d0:8e:9b:ea:da:73:fc:4e:81:7f:d9:88:96:
                    51:46:b4:98:f1:b8:b4:97:03:3c:25:43:82:d4:c0:
                    72:0b:f4:c0:d2:04:09:ac:44:6f:fb:7f:79:b7:d5:
                    90:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CD:22:36:9A:E1:D3:44:19:6A:20:D3:35:62:3E:30:E6:F8:AD:F8
            X509v3 Authority Key Identifier:
                keyid:F5:B3:CC:69:63:F2:91:D1:1F:01:93:BD:27:FC:4E:83:D1:45:92:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/323830343a336337303a3a2f33322d3335203d3e20323636323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c70::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:7e:7b:e8:86:4b:b0:a9:fa:db:92:4c:cf:5a:74:66:84:cf:
         21:89:b7:f7:88:cb:8b:ab:8c:24:f6:77:da:d4:9d:36:6d:11:
         3b:3f:32:13:ad:6f:a1:5f:ec:01:e5:e1:5f:07:e3:df:9d:e9:
         47:16:4f:bf:59:d7:f2:95:a9:b5:9b:10:7a:7a:c8:04:95:23:
         4d:d1:92:e2:25:7e:66:d6:df:dd:30:53:d2:1a:21:c8:cf:70:
         d1:6b:4e:93:96:dd:24:88:12:20:e5:2a:40:ad:a7:5d:52:0c:
         a0:92:68:20:0a:d2:06:f3:26:3e:ca:79:70:9f:a0:d1:3c:35:
         39:f5:c4:54:43:b6:9a:d2:d9:9e:99:69:97:7e:1e:34:6f:e5:
         44:70:8c:b5:dc:2a:43:ab:d6:1f:db:da:9b:10:ac:00:b6:1b:
         88:28:38:50:37:d8:69:54:a3:a7:87:da:8c:af:b0:1a:6d:14:
         cf:f6:9a:a9:17:2c:0c:b5:82:8d:f1:e9:3d:41:24:a3:6e:73:
         21:6a:a0:a7:43:eb:4d:23:4a:22:b0:1f:ba:e8:18:13:be:54:
         70:25:47:7f:d7:17:32:e1:f6:98:51:22:6e:00:b2:37:80:01:
         5e:a5:3a:27:c9:b8:46:68:c0:24:db:36:50:c2:23:fd:46:d7:
         d5:7f:7d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:56:05 2026 by rpki-client