Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/323830343a343935303a3a2f33322d313238203d3e20323637313737.roa
File:                     323830343a343935303a3a2f33322d313238203d3e20323637313737.roa (raw, json)
Hash identifier:          XpMY5SnMO3J3RiaswmOcVrZwTk8Uehg12RPPCcBd+3Y=
Subject key identifier:   75:2E:59:C3:0A:80:95:59:46:50:94:5C:23:91:0B:99:A2:5D:74:6C
Certificate issuer:       /CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2
Certificate serial:       35EE6E310DBBAF402D6ECFAEC453849CBF8A1F28
Authority key identifier: 76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/323830343a343935303a3a2f33322d313238203d3e20323637313737.roa
Signing time:             Thu 05 Feb 2026 14:24:23 +0000
ROA not before:           Thu 05 Feb 2026 14:19:23 +0000
ROA not after:            Thu 04 Feb 2027 14:24:23 +0000
asID:                     267177
IP address blocks:        2804:4950::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl
                          rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:49:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ee:6e:31:0d:bb:af:40:2d:6e:cf:ae:c4:53:84:9c:bf:8a:1f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2
        Validity
            Not Before: Feb  5 14:19:23 2026 GMT
            Not After : Feb  4 14:24:23 2027 GMT
        Subject: CN=752E59C30A8095594650945C23910B99A25D746C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f6:f6:e8:a7:76:2d:db:06:3f:da:b2:35:31:
                    4e:c4:95:f3:c4:02:c8:ce:d8:eb:65:24:1e:26:b5:
                    a3:ab:0a:36:96:39:8d:0f:2e:d4:2f:ae:90:9c:1a:
                    0a:0a:91:4e:2b:c3:74:44:0f:2d:ef:f0:06:b5:1b:
                    c3:31:0d:2c:4b:d0:9d:7f:ae:5f:6c:81:df:f3:65:
                    b9:23:2a:92:c3:2c:a6:74:79:15:1b:33:d7:e9:d8:
                    11:fe:4d:18:46:70:8f:2e:62:fb:e0:70:9c:02:41:
                    d1:40:91:d0:34:7d:73:42:5f:67:02:30:4a:8b:d4:
                    6e:8d:ec:d7:89:02:49:52:c5:4c:31:6b:1e:7a:cf:
                    36:45:8a:38:a6:91:0a:e5:0f:b5:fb:83:93:06:e9:
                    e0:f1:20:96:f4:5c:86:68:23:06:45:37:8c:44:42:
                    0e:3f:92:68:01:06:20:54:96:69:00:bc:b6:20:cf:
                    a3:49:35:8e:24:da:2b:49:1b:0f:43:6c:56:3a:ee:
                    8a:e5:e7:6f:42:ec:57:21:1b:59:51:f6:02:3e:1b:
                    eb:c0:28:03:5b:48:bb:6b:64:cb:95:a9:c6:05:d3:
                    fb:5c:ff:bf:86:fa:ca:9a:e7:15:fe:b7:ff:a1:70:
                    08:53:5a:60:c0:64:88:dd:63:cb:61:e0:3c:de:12:
                    e8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2E:59:C3:0A:80:95:59:46:50:94:5C:23:91:0B:99:A2:5D:74:6C
            X509v3 Authority Key Identifier:
                keyid:76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/323830343a343935303a3a2f33322d313238203d3e20323637313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4950::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:b6:cb:8f:f2:b1:14:7d:c1:d4:bd:a0:1d:ae:9f:95:99:8b:
         79:67:2e:07:67:87:00:56:cc:45:86:c8:13:6a:69:4e:df:c1:
         dc:44:52:31:bd:96:d0:a3:d7:fe:aa:6d:8c:92:54:67:6a:8a:
         98:cc:48:a9:f6:cc:02:7a:a4:83:0c:db:d5:89:df:19:c1:37:
         3e:b0:21:eb:56:e0:5f:d8:23:2c:e7:cb:05:f8:a5:15:40:dd:
         a6:4e:e7:a9:d7:bc:a1:0c:e1:4b:a2:ea:9f:fd:27:48:de:99:
         67:25:e6:12:e2:42:da:56:14:60:f2:e9:49:df:81:ab:a4:ad:
         d7:05:0c:02:3e:50:10:b1:d9:e9:b7:fa:d9:db:40:8e:86:a4:
         27:d4:cf:fc:07:b1:f9:47:36:1f:38:94:35:a8:1e:a6:0c:23:
         60:21:3d:7d:54:3b:0a:07:b7:f0:bb:4b:61:f5:40:9b:1a:36:
         c1:cc:f5:ba:d1:09:08:52:6b:c2:7a:74:62:4c:ea:e0:5e:8e:
         8c:c8:67:74:17:2e:09:27:cc:07:d4:23:29:df:1f:db:20:be:
         91:e3:16:0a:fa:e4:f4:dc:7b:ba:e5:8d:c1:53:4c:f0:eb:d6:
         2a:ce:f5:46:c3:e1:79:c8:48:74:61:d1:a5:e4:bf:33:52:e1:
         94:75:b8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:27:33 2026 by rpki-client