Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/323830343a373232383a3a2f33322d3332203d3e20323730383336.roa
File:                     323830343a373232383a3a2f33322d3332203d3e20323730383336.roa (raw, json)
Hash identifier:          mrBCmPVuoJFQQCBSx4HJsbkZiZXbORtlKym90BqSXU4=
Subject key identifier:   DD:A2:70:BB:8C:F1:C9:AD:3A:74:DC:DF:0A:4E:E2:D4:7E:AC:11:81
Certificate issuer:       /CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
Certificate serial:       42437807FE88FF05193AF2B1AF1C51C392BC1F81
Authority key identifier: 67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/323830343a373232383a3a2f33322d3332203d3e20323730383336.roa
Signing time:             Wed 04 Feb 2026 20:00:10 +0000
ROA not before:           Wed 04 Feb 2026 19:55:10 +0000
ROA not after:            Wed 03 Feb 2027 20:00:10 +0000
asID:                     270836
IP address blocks:        2804:7228::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl
                          rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:43:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:43:78:07:fe:88:ff:05:19:3a:f2:b1:af:1c:51:c3:92:bc:1f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
        Validity
            Not Before: Feb  4 19:55:10 2026 GMT
            Not After : Feb  3 20:00:10 2027 GMT
        Subject: CN=DDA270BB8CF1C9AD3A74DCDF0A4EE2D47EAC1181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:78:17:08:f9:2b:3f:6b:fd:fe:66:b3:31:dd:
                    42:da:3b:ca:83:d7:81:2c:e5:8b:20:a8:80:21:95:
                    b9:36:cf:d3:9b:1b:b0:8f:d6:54:9f:0b:3d:ac:c3:
                    73:80:47:4e:a5:6d:1a:35:49:70:c2:50:8a:30:1d:
                    7f:94:3a:85:09:29:2e:fe:1e:ed:43:94:32:fc:11:
                    2e:9b:d9:a5:ce:23:ac:cc:5b:80:fe:09:fb:75:91:
                    fb:52:2f:b1:ef:97:1a:14:ea:d1:0b:1f:d8:0a:42:
                    19:56:73:25:21:7d:49:58:d8:9d:33:85:fb:ce:11:
                    9a:c4:2c:b8:7a:7a:23:1f:3b:e7:53:94:6d:42:bd:
                    3b:ea:d8:15:2d:26:57:3d:34:8a:bd:a5:bf:52:c3:
                    51:1c:47:0f:df:a9:1d:74:2b:2d:f0:d9:78:7d:5a:
                    16:29:ee:8e:c8:55:8d:86:7a:ee:e0:14:b1:5b:28:
                    04:8f:64:6a:55:cb:fe:2f:e6:77:73:ad:28:1d:26:
                    73:9d:b2:69:c4:e7:31:95:8d:c7:3d:9e:d9:2f:ac:
                    5b:af:66:16:6f:32:b0:cf:e6:db:4a:dc:44:88:56:
                    4f:71:d0:07:d9:69:18:13:c6:98:57:14:20:b6:1c:
                    b9:16:be:67:d4:e9:53:5e:b3:a0:99:35:7c:2d:84:
                    05:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A2:70:BB:8C:F1:C9:AD:3A:74:DC:DF:0A:4E:E2:D4:7E:AC:11:81
            X509v3 Authority Key Identifier:
                keyid:67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/323830343a373232383a3a2f33322d3332203d3e20323730383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7228::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:d9:43:d0:6d:3a:d4:f8:92:59:68:25:e1:1c:68:8c:7c:53:
         3f:dd:c9:56:da:d4:c4:69:d2:8b:4c:dc:e1:6d:31:11:22:4d:
         0a:ad:20:5e:a9:5a:53:37:3e:57:41:0c:f3:34:e2:b4:62:cf:
         31:8a:81:4e:a6:1f:33:9c:7d:0c:1d:a2:cc:2f:a6:d8:df:25:
         c2:de:90:4c:01:75:04:8f:56:85:21:87:17:00:5e:ca:8a:61:
         64:49:22:35:dc:58:a6:89:17:b4:19:e1:57:e2:9f:b2:f4:31:
         8b:fa:e0:11:b9:da:34:d9:a7:ba:70:55:95:f5:61:c0:08:cc:
         e5:19:40:02:a6:e9:9d:3e:e3:d7:21:be:31:45:b0:b5:f7:6d:
         25:f5:72:7f:e7:73:a5:4d:94:58:93:d2:05:cd:c6:cc:be:a7:
         6d:cb:62:ed:b4:61:f8:aa:45:59:3c:f3:82:7d:09:39:a7:85:
         f3:36:16:33:89:cb:a3:6b:84:8f:53:f8:44:5d:41:bb:9a:b2:
         cc:61:36:37:d3:d5:bb:24:48:d5:d0:1a:d0:3b:76:db:17:49:
         97:4b:98:1e:0a:1f:c5:cf:43:80:67:c1:96:a5:e4:a3:b7:44:
         23:5d:fa:9f:e6:12:dd:d7:2d:5b:a2:2d:b0:e4:be:94:e8:a1:
         0c:2e:d3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:20:15 2026 by rpki-client