Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/323830343a343331633a3a2f33322d313238203d3e20323637353439.roa
File:                     323830343a343331633a3a2f33322d313238203d3e20323637353439.roa (raw, json)
Hash identifier:          QyXOQDEs96gWpD7KTDqJA1FGdGMTzFA2NR1MSDpVqME=
Subject key identifier:   59:BC:B5:0A:CB:63:6F:9A:FB:88:63:B7:85:BD:E4:71:8B:66:24:7A
Certificate issuer:       /CN=942F2D5AE55B7215DFCCA79C552D223D29B71DFF
Certificate serial:       6472FAEC4DAF11E5BB684C1D4AB84D5A176F2EB5
Authority key identifier: 94:2F:2D:5A:E5:5B:72:15:DF:CC:A7:9C:55:2D:22:3D:29:B7:1D:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/323830343a343331633a3a2f33322d313238203d3e20323637353439.roa
Signing time:             Fri 06 Feb 2026 02:12:57 +0000
ROA not before:           Fri 06 Feb 2026 02:07:57 +0000
ROA not after:            Fri 05 Feb 2027 02:12:57 +0000
asID:                     267549
IP address blocks:        2804:431c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl
                          rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 15:20:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:72:fa:ec:4d:af:11:e5:bb:68:4c:1d:4a:b8:4d:5a:17:6f:2e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=942F2D5AE55B7215DFCCA79C552D223D29B71DFF
        Validity
            Not Before: Feb  6 02:07:57 2026 GMT
            Not After : Feb  5 02:12:57 2027 GMT
        Subject: CN=59BCB50ACB636F9AFB8863B785BDE4718B66247A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:bf:5e:13:8e:83:ce:97:16:29:95:41:6f:
                    f4:ac:8a:29:bd:18:f4:50:23:77:29:75:4d:c9:38:
                    40:a3:46:e4:d5:cd:00:57:8b:5b:22:94:db:9e:06:
                    0a:a0:67:78:34:70:02:36:94:19:b6:61:dc:8c:17:
                    54:fd:96:e5:02:73:36:76:aa:ad:ad:94:34:ac:e7:
                    af:f3:ec:ca:55:d5:c2:df:4b:0f:67:a5:2c:a7:fd:
                    25:c9:b3:2d:05:e4:de:f5:2e:60:79:6d:e6:32:e1:
                    8f:99:75:6b:c3:b8:75:08:0a:43:87:cf:80:17:35:
                    8c:16:cd:43:9a:fd:51:d6:53:72:b2:b0:55:bc:f0:
                    3f:d0:41:d9:0f:5e:aa:83:75:d4:52:35:58:7f:4f:
                    e3:5b:a5:c8:5a:41:35:3e:17:f3:73:fa:b7:2d:8c:
                    78:cd:48:0f:c2:38:e3:b8:de:33:f9:20:4d:8b:d0:
                    2e:c7:4c:55:d0:bf:50:37:38:f5:57:c3:30:8e:9f:
                    98:1f:42:b0:d3:2d:55:3a:4c:30:f9:47:9b:c1:68:
                    48:9f:76:e3:5b:7d:46:fc:31:98:9c:6f:d7:ea:90:
                    c8:65:68:a5:c6:3b:12:9f:28:0f:76:3e:73:72:a4:
                    1f:c9:1b:2f:73:72:59:3a:16:e6:79:76:02:a6:33:
                    4c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BC:B5:0A:CB:63:6F:9A:FB:88:63:B7:85:BD:E4:71:8B:66:24:7A
            X509v3 Authority Key Identifier:
                keyid:94:2F:2D:5A:E5:5B:72:15:DF:CC:A7:9C:55:2D:22:3D:29:B7:1D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/323830343a343331633a3a2f33322d313238203d3e20323637353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:431c::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:c0:be:71:5d:82:84:0e:e5:ae:ad:50:14:a7:8e:be:06:05:
         3f:89:c8:65:3b:b3:41:be:1f:c7:1e:30:7c:a2:4d:af:c5:dd:
         b6:08:76:83:8b:69:d5:4e:84:97:39:1f:2d:f4:3e:a9:6d:fb:
         ae:62:58:4e:f5:c9:0c:78:7b:50:54:7a:56:8c:69:fe:61:fe:
         68:69:11:82:05:94:68:b0:60:d1:98:3d:cd:fa:38:8e:d0:53:
         53:26:f0:f4:3d:b3:7e:18:e3:13:26:42:a0:3f:b6:fb:8a:87:
         4d:0f:49:db:cb:f3:91:58:f5:68:a6:c8:4f:b5:f4:43:39:5b:
         b2:61:8a:d8:24:78:56:aa:33:59:4e:7d:41:aa:26:75:ed:ce:
         80:67:cf:dc:b1:d5:ff:1a:66:35:73:f3:07:34:95:d7:6c:ba:
         35:6f:42:9e:79:75:05:31:7e:ec:f6:73:51:4b:f3:cc:79:a0:
         52:9e:45:d8:8f:f6:1e:20:1f:1d:3b:c0:9b:a1:e1:d2:4f:8e:
         14:f1:4b:55:1c:a4:54:0f:6d:28:a5:b7:2a:d4:15:d4:83:1c:
         7e:22:cc:23:f0:4d:03:04:da:42:21:7d:ce:f6:31:52:f8:0d:
         36:5d:7c:42:20:ac:9e:5c:ec:e9:11:ff:3b:16:b2:4a:33:1f:
         35:1e:2c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:43:44 2026 by rpki-client