Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/323830343a3736343a3a2f33322d3438203d3e203130373333.roa
File:                     323830343a3736343a3a2f33322d3438203d3e203130373333.roa (raw, json)
Hash identifier:          C52T1673j3meKQwNtar5uz9I63F3Ds7c6+ZYv+CGiIM=
Subject key identifier:   C3:9A:DE:EA:09:EB:26:F9:AA:A2:7A:FB:B0:01:7E:79:0E:32:91:52
Certificate issuer:       /CN=7DE6E0779DD8FBF98FE9AD24531A24F792D26451
Certificate serial:       3ADA906ACC698E97D9C8799F28E9A2D59B9CF785
Authority key identifier: 7D:E6:E0:77:9D:D8:FB:F9:8F:E9:AD:24:53:1A:24:F7:92:D2:64:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/323830343a3736343a3a2f33322d3438203d3e203130373333.roa
Signing time:             Thu 05 Feb 2026 03:00:05 +0000
ROA not before:           Thu 05 Feb 2026 02:55:05 +0000
ROA not after:            Thu 04 Feb 2027 03:00:05 +0000
asID:                     10733
IP address blocks:        2804:764::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.crl
                          rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 16:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:da:90:6a:cc:69:8e:97:d9:c8:79:9f:28:e9:a2:d5:9b:9c:f7:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DE6E0779DD8FBF98FE9AD24531A24F792D26451
        Validity
            Not Before: Feb  5 02:55:05 2026 GMT
            Not After : Feb  4 03:00:05 2027 GMT
        Subject: CN=C39ADEEA09EB26F9AAA27AFBB0017E790E329152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:17:99:82:87:46:58:a0:70:83:72:4c:aa:f9:
                    e8:cd:09:d8:95:90:43:d0:72:4a:c4:dc:cb:2b:12:
                    9f:65:60:ae:13:da:70:4e:ae:56:f6:f6:6b:cb:46:
                    2a:85:0f:24:07:d1:5f:f0:bf:1d:1b:23:c3:8f:82:
                    4b:bb:df:51:10:66:69:8d:02:ec:12:37:67:32:45:
                    cc:d2:69:d9:ea:c1:78:34:7f:a3:01:73:f3:ac:c3:
                    b3:72:f1:ba:b8:44:f4:c7:b6:6a:b6:b2:9f:d1:c5:
                    3f:45:ff:2c:b3:c4:5d:86:32:7d:53:39:f4:23:f2:
                    df:65:32:3b:9a:81:bc:20:e7:aa:41:ac:6f:2a:05:
                    10:ac:f1:57:c7:99:80:d0:16:12:56:e1:7f:94:fc:
                    e6:ef:a3:70:c5:43:01:55:0c:09:30:c2:3c:2a:78:
                    61:6d:d4:b0:9c:95:13:53:33:98:50:ab:8b:83:99:
                    25:b1:74:8e:d8:d0:15:d9:a9:f8:7e:ee:88:52:81:
                    66:b6:8a:3e:9c:aa:ab:e5:82:61:0d:df:b1:c9:2a:
                    7b:39:94:a9:c0:5c:b2:55:9d:20:62:d7:4e:6d:36:
                    59:6c:e4:9e:f6:aa:89:50:fb:2b:12:78:72:c4:69:
                    f1:57:8a:94:b1:75:6f:a9:93:bd:43:ca:b5:d5:69:
                    f0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9A:DE:EA:09:EB:26:F9:AA:A2:7A:FB:B0:01:7E:79:0E:32:91:52
            X509v3 Authority Key Identifier:
                keyid:7D:E6:E0:77:9D:D8:FB:F9:8F:E9:AD:24:53:1A:24:F7:92:D2:64:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/323830343a3736343a3a2f33322d3438203d3e203130373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:764::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:40:ff:1e:71:0c:99:47:71:ba:51:75:aa:a1:67:14:85:c4:
         84:2f:a3:c1:2a:e6:30:20:4d:a3:b1:11:68:12:08:e6:3f:b2:
         4d:98:54:27:48:8e:24:09:34:16:7d:53:87:29:be:3b:3e:60:
         f1:af:00:31:d5:81:5d:77:7a:c5:68:ab:3b:1a:ee:a9:67:b3:
         9c:a0:91:7b:bd:ea:9b:8f:c4:72:ce:8c:a7:19:f9:93:78:9d:
         86:5a:96:14:de:8c:95:17:51:92:ed:7f:30:d0:75:01:cf:bb:
         cd:8f:ed:8e:50:f6:34:2f:f4:36:1b:90:37:71:ac:cf:48:65:
         c8:47:42:ca:48:ff:8d:d0:de:cc:f3:2d:8a:97:9c:8c:6a:b4:
         8f:50:8e:fa:9c:25:bd:22:f9:0c:2f:dd:f0:04:5e:59:e8:64:
         b1:76:4a:1b:b6:82:30:78:99:77:82:a4:12:26:a8:65:1d:45:
         fd:4a:00:2a:3e:ff:cd:8c:c5:5a:7d:33:f6:6e:44:15:68:6a:
         d8:26:3b:a7:18:db:ee:59:f6:ad:ed:4e:08:79:e3:9e:a7:9c:
         e3:56:04:b9:12:fa:c4:1d:95:79:f4:f0:0f:2a:35:df:02:b5:
         30:f4:33:08:c4:42:2b:95:ae:64:ac:73:49:48:5e:b2:50:6f:
         c0:de:f1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:29:27 2026 by rpki-client