Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BG59FRTeXe574eVmSoko88KvWh8HAEmf1WbzK3HkmrNY/0/323830343a363564633a3a2f33322d313238203d3e20323639353139.roa
File:                     323830343a363564633a3a2f33322d313238203d3e20323639353139.roa (raw, json)
Hash identifier:          YMvvifiUYI1Ysz9DuOhSSo4cg5mihaAkG5PU6qyA3kE=
Subject key identifier:   DC:D8:D0:60:3D:43:94:31:B8:46:50:AF:97:3B:1D:1C:C5:F0:C0:ED
Certificate issuer:       /CN=1CC03F001A710CB56C4AA098D280A67EE50C6803
Certificate serial:       23EF7F218747436171DC2C99A7F5320BA2AB88B6
Authority key identifier: 1C:C0:3F:00:1A:71:0C:B5:6C:4A:A0:98:D2:80:A6:7E:E5:0C:68:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CC03F001A710CB56C4AA098D280A67EE50C6803.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BG59FRTeXe574eVmSoko88KvWh8HAEmf1WbzK3HkmrNY/0/323830343a363564633a3a2f33322d313238203d3e20323639353139.roa
Signing time:             Thu 12 Feb 2026 21:31:04 +0000
ROA not before:           Thu 12 Feb 2026 21:26:04 +0000
ROA not after:            Thu 11 Feb 2027 21:31:04 +0000
asID:                     269519
IP address blocks:        2804:65dc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BG59FRTeXe574eVmSoko88KvWh8HAEmf1WbzK3HkmrNY/0/1CC03F001A710CB56C4AA098D280A67EE50C6803.crl
                          rsync://rpki-repo.registro.br/repo/BG59FRTeXe574eVmSoko88KvWh8HAEmf1WbzK3HkmrNY/0/1CC03F001A710CB56C4AA098D280A67EE50C6803.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CC03F001A710CB56C4AA098D280A67EE50C6803.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:59:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ef:7f:21:87:47:43:61:71:dc:2c:99:a7:f5:32:0b:a2:ab:88:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CC03F001A710CB56C4AA098D280A67EE50C6803
        Validity
            Not Before: Feb 12 21:26:04 2026 GMT
            Not After : Feb 11 21:31:04 2027 GMT
        Subject: CN=DCD8D0603D439431B84650AF973B1D1CC5F0C0ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fc:e5:6f:4d:d0:43:b3:37:f0:2a:1f:5a:10:
                    34:12:cb:c3:7b:71:a7:ee:b6:62:9e:66:2f:d2:fc:
                    0e:35:f0:23:d1:a3:8c:ce:0e:56:c6:f5:14:fe:b2:
                    ee:e1:64:4d:6c:8f:4b:b0:06:31:56:a3:24:55:48:
                    5a:d5:6e:be:d6:45:19:da:a2:d1:78:68:f5:d8:ff:
                    70:42:9f:6a:17:be:89:ce:49:a1:36:fa:e6:e3:91:
                    f4:c6:a8:33:07:11:3c:e1:be:df:33:91:08:a6:e9:
                    44:70:8e:56:f4:1a:7d:47:d2:56:5f:40:3f:1f:38:
                    1e:6e:28:b7:64:f1:b8:09:a0:5f:c4:0b:ea:b4:04:
                    16:9b:b8:6d:07:97:24:a8:22:d8:dd:51:78:e1:02:
                    ec:87:ab:ce:1b:c5:41:33:d3:63:d9:e4:97:bb:55:
                    25:ed:7d:39:16:4b:47:80:f7:d6:cf:92:f3:69:c8:
                    b7:aa:f5:9b:2c:30:f3:ad:e6:b1:6b:79:3e:4d:2a:
                    26:1c:d2:19:e4:39:10:6b:e7:7f:b5:4a:0e:ca:80:
                    8c:37:a8:73:47:b4:87:b4:7b:81:f4:43:bd:14:fc:
                    b0:4c:62:97:46:76:f9:7f:ce:a7:b4:34:21:f2:fe:
                    bc:ad:2b:69:75:fe:45:bc:37:67:1a:e4:a4:99:ff:
                    60:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D8:D0:60:3D:43:94:31:B8:46:50:AF:97:3B:1D:1C:C5:F0:C0:ED
            X509v3 Authority Key Identifier:
                keyid:1C:C0:3F:00:1A:71:0C:B5:6C:4A:A0:98:D2:80:A6:7E:E5:0C:68:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BG59FRTeXe574eVmSoko88KvWh8HAEmf1WbzK3HkmrNY/0/1CC03F001A710CB56C4AA098D280A67EE50C6803.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CC03F001A710CB56C4AA098D280A67EE50C6803.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BG59FRTeXe574eVmSoko88KvWh8HAEmf1WbzK3HkmrNY/0/323830343a363564633a3a2f33322d313238203d3e20323639353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:8f:6a:56:4f:48:88:1d:52:dc:0a:34:a8:e1:f1:31:42:6f:
         0b:97:f1:e2:0b:16:40:40:c3:1f:76:d9:6e:24:08:ae:25:46:
         5f:14:c4:04:59:be:1d:5f:04:9d:a8:d8:30:04:77:77:7f:76:
         3a:8b:4a:73:ec:30:1a:65:c9:ed:72:b0:1d:80:89:9d:2f:99:
         31:8b:a5:7f:05:aa:9a:60:d1:16:54:e7:36:50:2b:90:d2:f8:
         cf:e1:51:20:ea:61:c5:6a:87:77:7a:bb:89:53:a7:44:9d:09:
         af:d4:8d:6b:e7:45:81:16:26:fc:ca:aa:26:40:cc:a8:55:3f:
         34:79:a3:8d:b6:f1:19:e0:99:bc:6e:4b:ed:9d:18:bd:03:c9:
         f2:97:65:da:1b:ed:79:ea:94:40:2d:29:67:9e:c1:e4:e3:c2:
         06:77:93:09:60:8b:88:b2:bb:bc:48:8c:08:b2:78:9e:c6:f0:
         bc:7b:cc:d6:2e:09:4d:68:7c:00:0a:5a:0c:0a:5a:fe:24:74:
         82:77:2c:4b:a7:d7:12:d8:4e:63:7e:e9:cd:97:64:ba:f0:f4:
         9a:4a:e1:02:04:ef:0a:08:f0:77:08:bf:62:2b:23:80:24:29:
         81:a8:c9:9f:a6:16:92:02:36:48:ef:1a:c5:42:70:68:f5:b0:
         58:f9:2a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:03:50 2026 by rpki-client