Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/323830343a373165633a3a2f33322d3334203d3e20323730383230.roa
File:                     323830343a373165633a3a2f33322d3334203d3e20323730383230.roa (raw, json)
Hash identifier:          qzFC8Gk3equw9247bE06DSyL4so4QLyWewLu6GlVxDw=
Subject key identifier:   87:98:49:DD:EB:E6:40:F0:7A:54:4E:4A:80:CE:20:32:D5:73:DC:6A
Certificate issuer:       /CN=4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D
Certificate serial:       4B30C89718A2EAC934574EDE029E58BF8E25E3C8
Authority key identifier: 44:13:F2:BD:E0:8D:3C:28:B7:34:73:1A:6E:80:F7:AB:4C:D6:6E:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/323830343a373165633a3a2f33322d3334203d3e20323730383230.roa
Signing time:             Wed 04 Feb 2026 20:00:10 +0000
ROA not before:           Wed 04 Feb 2026 19:55:10 +0000
ROA not after:            Wed 03 Feb 2027 20:00:10 +0000
asID:                     270820
IP address blocks:        2804:71ec::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.crl
                          rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:30:c8:97:18:a2:ea:c9:34:57:4e:de:02:9e:58:bf:8e:25:e3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D
        Validity
            Not Before: Feb  4 19:55:10 2026 GMT
            Not After : Feb  3 20:00:10 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:86:ae:1b:88:4d:bc:03:33:c7:e2:fc:69:fb:
                    06:56:2b:29:45:0d:ab:3c:37:8a:6d:d2:60:90:08:
                    f7:47:eb:22:50:d3:58:f8:3e:cc:fe:c3:8c:09:0d:
                    91:a3:68:44:83:b3:89:85:c5:6c:78:f4:a9:da:13:
                    84:72:ec:89:bf:e4:ff:32:66:df:95:b4:d9:4a:0b:
                    55:5f:2d:ff:69:cb:cc:26:09:5e:e3:11:e9:b7:d1:
                    ec:27:89:0a:11:e2:43:23:de:0d:25:86:4f:f0:96:
                    a6:76:f7:37:3c:0c:6f:85:61:ac:c6:f1:6f:f3:ee:
                    a8:6c:14:28:4c:0e:a4:0c:48:db:ed:54:91:fb:17:
                    be:d1:49:c0:09:db:89:ad:cc:80:be:67:ba:9b:4c:
                    b0:34:53:26:8a:9f:42:a5:fb:90:ef:76:be:10:07:
                    13:1e:da:57:4f:7a:f8:c2:94:24:83:26:2f:47:c2:
                    a9:a2:93:b6:f2:86:0f:a9:3d:0c:24:ab:98:59:cb:
                    58:86:1a:17:4e:13:f0:ef:b0:0c:05:e9:4e:88:3c:
                    16:e0:7a:a8:75:21:ab:4b:10:8a:e7:54:b5:04:74:
                    2b:3e:c8:67:ca:c8:2d:10:17:33:b1:82:60:14:73:
                    01:7e:e1:a1:c2:ff:ef:94:c2:15:ba:63:13:f2:11:
                    c9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:98:49:DD:EB:E6:40:F0:7A:54:4E:4A:80:CE:20:32:D5:73:DC:6A
            X509v3 Authority Key Identifier:
                keyid:44:13:F2:BD:E0:8D:3C:28:B7:34:73:1A:6E:80:F7:AB:4C:D6:6E:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/323830343a373165633a3a2f33322d3334203d3e20323730383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:66:c3:11:39:36:59:cf:30:1f:7a:27:14:ff:29:39:0b:3d:
         73:43:42:52:67:0c:a3:a1:82:91:1e:1f:1f:cd:41:b0:dc:ef:
         9f:83:fc:29:33:ea:24:79:86:61:cd:5d:b8:0d:cd:4a:a7:2f:
         65:a3:aa:5f:7e:a4:04:8c:06:c4:46:2b:03:55:0a:e5:ba:56:
         32:19:0e:fa:d4:20:87:d1:af:d4:bc:23:a8:ba:b4:5b:3d:c5:
         b9:cd:54:d3:2a:6a:90:f0:aa:78:32:f6:62:d3:bd:d8:f7:e3:
         5b:f0:42:2f:dc:5c:15:f9:c2:05:ca:4b:fb:83:1c:32:ad:35:
         46:85:3b:33:41:8d:3e:c4:5c:e0:e8:fc:c7:dd:4b:c1:89:55:
         aa:eb:4e:35:99:4a:bd:e6:a5:7e:06:3d:ff:08:81:2f:86:ba:
         70:46:d5:e2:b9:34:e9:56:37:23:e4:a8:24:e5:86:b4:cf:3f:
         1a:19:de:94:28:3a:94:36:87:56:24:cc:10:94:4c:23:66:df:
         d0:f1:64:ce:7e:f9:c7:15:15:88:31:79:49:b4:f7:91:5e:27:
         04:e3:7a:86:ab:c4:78:6d:92:49:60:e5:2b:ea:1f:9f:cb:07:
         fd:eb:12:0f:40:ac:87:9d:bf:e6:ff:f9:1e:64:81:4e:12:41:
         01:ba:3e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:48 2026 by rpki-client