Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/323830343a363065303a3a2f33322d3336203d3e20323639313937.roa
File:                     323830343a363065303a3a2f33322d3336203d3e20323639313937.roa (raw, json)
Hash identifier:          c7GGQKi6ec2DB29yrMDCE13X+Wm8vYKolg76A+4gtHA=
Subject key identifier:   14:C9:56:6C:82:FA:3F:5A:82:F0:B0:0F:E5:0B:9C:61:FD:36:C2:50
Certificate issuer:       /CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3
Certificate serial:       11B2DF9875D0D5F98699B1BD9FC65D9CDA6EE89B
Authority key identifier: DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/323830343a363065303a3a2f33322d3336203d3e20323639313937.roa
Signing time:             Thu 05 Feb 2026 15:53:01 +0000
ROA not before:           Thu 05 Feb 2026 15:48:01 +0000
ROA not after:            Thu 04 Feb 2027 15:53:01 +0000
asID:                     269197
IP address blocks:        2804:60e0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl
                          rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 15:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b2:df:98:75:d0:d5:f9:86:99:b1:bd:9f:c6:5d:9c:da:6e:e8:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3
        Validity
            Not Before: Feb  5 15:48:01 2026 GMT
            Not After : Feb  4 15:53:01 2027 GMT
        Subject: CN=14C9566C82FA3F5A82F0B00FE50B9C61FD36C250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:02:a8:a5:dd:03:67:ab:d4:48:f8:0b:16:fd:
                    27:2c:c2:32:18:ab:94:81:0c:f8:0a:89:f3:8e:90:
                    c7:be:02:20:ad:b7:d2:9e:58:11:10:42:ab:8d:1a:
                    0d:33:38:70:8a:bf:0a:f6:d1:b1:ad:03:2e:43:3d:
                    fe:ab:29:3d:5b:27:37:d2:4a:d3:03:66:ad:5e:e5:
                    bf:1e:56:93:49:d4:02:9a:5f:13:0f:dd:b8:5b:de:
                    0b:3f:ba:a0:b2:6d:fe:32:09:45:c6:7d:04:d9:5d:
                    53:e1:c3:0c:96:87:0d:2e:9f:c2:c0:fb:88:78:52:
                    b3:1f:46:57:b4:c4:bf:c7:59:ff:8d:83:9e:d9:f2:
                    7c:5d:45:0a:e9:90:96:bf:a8:6b:dc:a0:c4:1c:6c:
                    c9:9d:a4:ce:37:db:5e:a1:9d:8d:b3:ba:c5:6c:00:
                    e9:dd:b4:6f:fd:0a:ca:c7:d4:2c:c8:67:80:10:ed:
                    59:50:da:e4:c5:02:23:af:c7:5f:ac:0e:90:2c:11:
                    89:76:3d:cb:28:8d:7b:84:58:6f:a1:77:48:82:79:
                    1a:0c:cc:54:7f:2a:77:c6:f8:a4:ca:af:6c:ad:83:
                    eb:f6:cd:6b:75:d4:4d:22:cb:3a:ec:ed:d8:ec:52:
                    ca:b5:06:49:ff:67:33:7b:1e:62:17:59:b0:58:e4:
                    09:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C9:56:6C:82:FA:3F:5A:82:F0:B0:0F:E5:0B:9C:61:FD:36:C2:50
            X509v3 Authority Key Identifier:
                keyid:DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/323830343a363065303a3a2f33322d3336203d3e20323639313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:b1:7b:99:f9:64:08:e4:be:28:25:31:84:d5:77:6a:d7:8b:
         ca:4f:a0:75:2c:7b:d9:81:27:a7:ef:10:ed:42:0e:f1:95:94:
         d8:0d:db:bb:a6:ae:00:ad:b9:b4:51:b8:76:66:54:62:49:8c:
         7b:5d:58:f2:c3:f6:71:1e:85:d4:25:ee:9e:29:aa:ea:4f:8d:
         43:ab:c5:2f:97:53:f0:f6:1e:48:d5:6c:83:bd:07:d9:01:61:
         80:9b:cd:f4:bd:62:25:ea:8c:f1:65:1f:54:01:3f:e4:c5:c9:
         64:60:5d:4b:20:20:38:87:9f:d6:81:8b:ea:c1:e7:c3:0c:f9:
         94:2d:81:1d:32:4d:54:ee:6a:bd:2e:06:fb:67:be:0b:29:cf:
         17:cd:d8:07:f6:de:79:56:4d:e3:c2:82:c6:77:4c:85:f4:bd:
         5a:31:8b:0a:0c:a0:4e:cf:d3:9f:1d:8e:0f:aa:4c:d0:b8:0d:
         64:fe:5e:b9:64:c9:7c:75:84:58:86:2f:ff:4f:58:80:97:43:
         76:4c:2b:9c:dd:3d:ed:3b:33:33:23:9c:34:9c:10:50:20:93:
         31:a6:e7:31:49:ea:1a:53:d7:c9:11:90:20:fc:0f:1c:a5:15:
         6c:3d:e0:d6:25:b7:f2:df:22:f6:59:8d:b7:c8:ab:2d:ba:68:
         07:ce:43:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:44:23 2026 by rpki-client