Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/323830343a323736303a3a2f33332d3333203d3e20323633383937.roa
File:                     323830343a323736303a3a2f33332d3333203d3e20323633383937.roa (raw, json)
Hash identifier:          9GBZ+cOIoRbyB1Us5ok4DF2rFEmiO3feqtddtIEoZLE=
Subject key identifier:   23:0D:7A:A4:CD:B9:3D:90:49:3D:BA:D0:70:9F:A1:64:5D:85:31:9E
Certificate issuer:       /CN=7309159F56A47754EF99E9F4F55BD61B99CCD644
Certificate serial:       1B7A7E56CCBA999040C6EC8AA8A095B15A9A17E4
Authority key identifier: 73:09:15:9F:56:A4:77:54:EF:99:E9:F4:F5:5B:D6:1B:99:CC:D6:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/323830343a323736303a3a2f33332d3333203d3e20323633383937.roa
Signing time:             Thu 05 Feb 2026 22:02:27 +0000
ROA not before:           Thu 05 Feb 2026 21:57:27 +0000
ROA not after:            Thu 04 Feb 2027 22:02:27 +0000
asID:                     263897
IP address blocks:        2804:2760::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.crl
                          rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:08:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:7a:7e:56:cc:ba:99:90:40:c6:ec:8a:a8:a0:95:b1:5a:9a:17:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7309159F56A47754EF99E9F4F55BD61B99CCD644
        Validity
            Not Before: Feb  5 21:57:27 2026 GMT
            Not After : Feb  4 22:02:27 2027 GMT
        Subject: CN=230D7AA4CDB93D90493DBAD0709FA1645D85319E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4c:ca:d9:7b:32:17:d7:d6:25:2e:bc:c7:4b:
                    38:f4:83:f3:ce:9d:59:d5:da:03:8c:d6:16:d3:68:
                    b3:56:6a:a4:e6:e0:d3:f9:51:b7:06:c3:37:b9:43:
                    00:ea:a4:38:13:03:22:67:6c:b4:b9:d6:73:7d:be:
                    1f:76:9d:b7:78:ef:ad:0c:5a:93:5a:d2:00:4a:d2:
                    b3:58:12:68:4a:88:b5:1e:3d:16:ab:7f:3d:66:3b:
                    f0:ea:22:a9:e6:f3:da:ba:cb:9b:62:76:47:e4:c2:
                    94:c9:1f:70:13:30:42:49:23:d0:0c:2a:f5:d9:ee:
                    8c:b9:6b:04:ba:00:9f:8f:6f:c0:98:95:50:43:ae:
                    83:b1:c2:1b:c3:77:3d:0f:c4:d5:59:32:e8:09:a6:
                    5a:d0:97:77:be:21:c6:da:af:3e:b1:94:e7:a8:6c:
                    22:7d:23:c1:15:ba:18:ca:b0:c9:65:77:69:21:93:
                    e2:c7:57:bb:c9:7f:9e:83:d3:8c:e0:3f:65:1d:33:
                    eb:64:d8:3d:45:7c:1a:d3:c4:b9:98:ca:07:0d:d2:
                    95:28:86:49:50:c4:6b:9f:2d:8f:de:60:dc:40:a0:
                    74:0d:7a:3a:e0:87:f1:76:3e:c1:6d:aa:86:26:dc:
                    a5:fd:91:ec:6f:ba:e0:24:57:fa:be:c8:01:8f:57:
                    f8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:0D:7A:A4:CD:B9:3D:90:49:3D:BA:D0:70:9F:A1:64:5D:85:31:9E
            X509v3 Authority Key Identifier:
                keyid:73:09:15:9F:56:A4:77:54:EF:99:E9:F4:F5:5B:D6:1B:99:CC:D6:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/323830343a323736303a3a2f33332d3333203d3e20323633383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2760::/33

    Signature Algorithm: sha256WithRSAEncryption
         80:31:5a:20:79:3f:60:6b:76:ed:54:a9:84:2e:9a:65:d9:02:
         af:64:ee:a7:82:9d:de:f8:ab:f6:fd:08:82:52:5b:29:b6:03:
         9b:58:f2:30:c0:95:58:c9:77:29:c2:f6:5d:93:d2:7c:6e:b8:
         95:86:0c:cc:41:9c:89:50:a3:15:39:4d:1a:c9:c6:8d:2a:4d:
         56:93:73:67:95:3b:b1:97:bc:26:3a:d3:a1:4b:d0:66:9c:74:
         ca:8b:f7:57:78:36:4d:38:ff:3d:96:92:67:d3:f6:9b:d9:9c:
         b6:8b:fb:89:a3:75:8f:bb:63:d4:63:12:7d:72:0b:0d:e5:6f:
         95:df:18:70:b5:14:28:47:7d:23:5e:6e:cc:a0:fd:8f:ad:e2:
         9d:9b:53:f2:25:57:1c:14:a0:3c:c0:02:6e:f1:bc:af:ad:7e:
         18:99:41:bf:9b:9f:db:7e:a0:7c:a5:3f:f3:1b:23:f7:03:c5:
         e5:78:e9:06:d6:0f:85:b7:c0:97:d2:61:d1:89:89:18:49:df:
         7f:6d:8e:64:57:a9:3a:fb:6d:f3:64:b2:62:89:71:14:8c:39:
         34:25:d8:97:ca:42:c1:08:4e:03:5c:a8:e3:7e:64:da:97:78:
         cc:56:e0:8d:54:74:e3:18:db:24:dc:64:02:58:bf:32:d3:2a:
         d2:f6:2d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:42:24 2026 by rpki-client