Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a363830303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a363830303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          +Zov/fsQPR1u7nW2X7WTAHfn7i2k13W5iAXxsvpAacM=
Subject key identifier:   71:02:0C:98:3E:8C:2A:05:22:27:16:3E:07:1F:D2:57:92:BE:DF:FD
Certificate issuer:       /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial:       2EE6FA65695779D05AA35D6F362D0D210DE0C2A7
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a363830303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Mon 16 Feb 2026 18:51:50 +0000
ROA not before:           Mon 16 Feb 2026 18:46:50 +0000
ROA not after:            Mon 15 Feb 2027 18:51:50 +0000
asID:                     263629
IP address blocks:        2804:104c:6800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e6:fa:65:69:57:79:d0:5a:a3:5d:6f:36:2d:0d:21:0d:e0:c2:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
        Validity
            Not Before: Feb 16 18:46:50 2026 GMT
            Not After : Feb 15 18:51:50 2027 GMT
        Subject: CN=71020C983E8C2A052227163E071FD25792BEDFFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:73:82:09:1a:6f:0e:eb:56:9c:a6:5f:9e:02:
                    d1:2c:1a:eb:09:67:2b:70:8a:01:cf:d7:d7:7c:4d:
                    7f:00:31:22:4c:17:25:22:1a:a4:22:dd:ab:5d:89:
                    12:66:9c:34:ff:8c:0b:cd:9c:ef:61:d8:c2:b5:e9:
                    30:f0:7c:0c:00:67:d9:ab:6c:58:9f:67:31:ad:97:
                    6e:01:d1:af:be:06:d4:e3:fb:e1:db:d6:af:a3:d3:
                    a4:bb:7f:3c:bf:94:93:22:a6:1f:73:c1:6a:d8:c8:
                    a8:1d:70:b3:cf:03:cb:c8:65:b5:67:fd:5d:ce:af:
                    2a:58:94:ea:dd:9f:a3:d8:3c:06:18:93:35:c9:32:
                    25:b5:29:4a:6a:f1:52:c3:22:f3:93:0f:94:e9:28:
                    ff:9d:b7:c9:2c:76:83:74:9f:d0:26:6c:77:d4:0b:
                    ac:54:26:ff:91:1f:7e:cb:99:71:30:86:4c:e1:30:
                    a6:ce:06:9d:3a:c7:a4:d6:5d:f3:d3:75:d6:48:b3:
                    6d:a3:35:96:8e:b2:28:c5:6f:9f:6f:43:9f:75:29:
                    56:0a:8a:5d:07:d3:1e:a1:1e:d7:89:21:79:28:c5:
                    52:9d:a8:fe:96:89:89:86:f3:4c:42:0d:20:25:1d:
                    22:1f:da:24:48:bc:c7:ed:5b:8a:2f:a4:0b:c1:fe:
                    0b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:02:0C:98:3E:8C:2A:05:22:27:16:3E:07:1F:D2:57:92:BE:DF:FD
            X509v3 Authority Key Identifier:
                keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a363830303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:6800::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:33:95:cf:18:47:1d:d3:86:6c:e9:3a:7a:8a:96:21:61:1e:
         47:15:a0:eb:8b:60:d9:4c:45:be:5d:98:89:2b:c3:ef:fd:08:
         61:ce:a8:58:69:c9:36:9d:19:34:2b:ae:5a:1c:6e:52:99:da:
         d6:5f:39:72:5c:f8:dc:c1:4d:d9:ce:b5:2e:15:66:5b:d5:53:
         85:87:aa:67:af:e2:98:81:4c:b7:18:92:c5:bf:b9:ca:b1:9e:
         d5:56:23:3c:34:a6:0e:f5:7e:88:96:26:d2:09:79:59:a3:18:
         e5:f3:70:bb:df:88:cd:e6:68:ff:93:a9:e8:e3:d7:5d:20:03:
         19:93:16:4b:cf:a5:3f:b6:3c:9e:42:7a:47:c0:0a:6f:fc:8e:
         8d:35:c5:d1:99:21:e0:ed:34:62:c6:c4:74:b5:9f:b5:5f:6f:
         c9:44:ec:b4:3c:a8:03:05:89:f9:d7:5c:11:ef:89:60:9a:a2:
         fb:58:44:d7:af:71:fc:8d:a1:69:88:ce:0c:9d:29:60:bb:6f:
         f4:8e:dd:4b:05:fd:37:1c:0d:7a:aa:4a:46:f9:ea:91:2b:18:
         96:99:f6:22:56:5e:78:c3:b5:1d:6a:33:cb:0a:5f:0d:69:71:
         7d:67:bd:93:f6:a3:ea:05:82:90:26:2c:81:66:6f:a1:88:50:
         92:41:45:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:58:26 2026 by rpki-client