Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/323830343a333564633a3a2f33322d3334203d3e20323636333131.roa
File:                     323830343a333564633a3a2f33322d3334203d3e20323636333131.roa (raw, json)
Hash identifier:          Wwv27NrG9oG3KG5xq0FG1FAsJ3N3owdOpSNiT7baHTM=
Subject key identifier:   EC:AA:8D:52:3B:18:58:FB:54:C0:C1:DE:C1:FA:DE:6C:5F:66:96:94
Certificate issuer:       /CN=37E90523C827A57C11E0B97A03E6AD0AF350D7BB
Certificate serial:       66501B33C32932C9C3FF10809649832D01D25DDB
Authority key identifier: 37:E9:05:23:C8:27:A5:7C:11:E0:B9:7A:03:E6:AD:0A:F3:50:D7:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/323830343a333564633a3a2f33322d3334203d3e20323636333131.roa
Signing time:             Thu 05 Feb 2026 22:35:21 +0000
ROA not before:           Thu 05 Feb 2026 22:30:21 +0000
ROA not after:            Thu 04 Feb 2027 22:35:21 +0000
asID:                     266311
IP address blocks:        2804:35dc::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.crl
                          rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:50:1b:33:c3:29:32:c9:c3:ff:10:80:96:49:83:2d:01:d2:5d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37E90523C827A57C11E0B97A03E6AD0AF350D7BB
        Validity
            Not Before: Feb  5 22:30:21 2026 GMT
            Not After : Feb  4 22:35:21 2027 GMT
        Subject: CN=ECAA8D523B1858FB54C0C1DEC1FADE6C5F669694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:17:4c:01:e1:46:53:78:03:af:36:69:d0:e3:
                    f0:f0:88:b2:2e:26:eb:06:21:e4:b4:70:96:80:e6:
                    e6:24:89:98:f8:f4:09:de:00:a2:40:05:e9:7d:da:
                    4d:6a:0e:9c:02:f9:6e:6d:98:ba:3a:ec:30:26:e4:
                    fb:94:7a:67:93:50:21:72:61:71:fa:d3:eb:1f:f7:
                    13:0f:e7:8b:24:0e:86:02:19:37:ab:df:9c:8c:a7:
                    fe:80:53:8f:f3:75:57:0c:07:b5:97:74:ea:25:54:
                    9a:0b:2b:cb:d1:14:ce:84:80:5b:d1:dc:10:b7:c4:
                    1d:2b:07:31:b0:f3:52:6a:93:29:b2:b2:5e:26:85:
                    7b:fa:6b:0d:1c:ad:31:05:83:32:3a:33:3e:1e:16:
                    f2:c1:dd:be:d1:76:d3:19:4d:9a:d5:1c:0f:d4:1b:
                    84:86:c3:61:f9:7b:ee:d1:34:c6:d0:0c:8a:e8:c9:
                    dc:1f:ca:4b:0d:8d:6e:91:8d:02:c0:3b:2a:b8:73:
                    20:b5:5b:ac:16:c9:32:2e:66:25:82:9c:e9:a3:0b:
                    0c:96:c4:3e:a1:6e:b8:9f:63:82:6b:20:2f:15:a7:
                    d7:a3:05:dc:da:74:52:72:b8:19:9a:8e:49:de:ce:
                    96:4f:58:b4:2b:da:4e:83:91:7c:8c:41:ad:d9:31:
                    bc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AA:8D:52:3B:18:58:FB:54:C0:C1:DE:C1:FA:DE:6C:5F:66:96:94
            X509v3 Authority Key Identifier:
                keyid:37:E9:05:23:C8:27:A5:7C:11:E0:B9:7A:03:E6:AD:0A:F3:50:D7:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/323830343a333564633a3a2f33322d3334203d3e20323636333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:4c:b5:01:de:37:cd:ac:82:1a:61:48:ca:f1:fe:c9:ea:4d:
         71:28:ff:e4:54:24:5a:79:2a:ec:2a:f1:b5:94:ef:33:bf:29:
         ce:c2:32:44:58:6d:1a:79:54:32:bd:28:7b:a9:5e:56:e1:2e:
         9b:d7:f2:86:8f:b6:97:e7:b1:d4:5a:e5:59:74:16:f2:44:ef:
         9f:fa:3a:06:d4:c1:b6:00:62:60:e6:dd:6f:36:03:fc:a5:0e:
         f5:93:d0:ed:9a:06:58:99:a4:88:08:f8:ff:ad:67:13:4f:13:
         8d:16:c0:1b:99:3b:f5:5a:65:ea:33:90:ac:cc:bd:9b:59:36:
         e6:ef:e2:ce:1c:cd:23:d9:41:54:d6:60:16:32:d6:1d:e2:b5:
         5f:1c:49:f0:d2:b7:48:62:20:55:0d:d8:09:d8:89:78:74:e8:
         8c:aa:b8:96:6e:90:b2:08:57:2b:e4:bc:63:85:eb:1b:6e:54:
         86:b6:2c:46:cb:96:32:a7:21:b5:cc:a5:a7:39:5f:10:cc:ef:
         da:2e:91:c9:8b:b7:c1:51:bf:1e:0e:84:a5:be:90:a1:4f:97:
         88:b0:9d:92:5b:96:0b:20:6a:53:5d:7a:0a:10:07:cb:22:c8:
         6a:53:b7:35:4e:96:0c:e1:96:b8:66:fc:1f:37:0c:0e:f2:34:
         64:84:d6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:53:05 2026 by rpki-client