Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/323830343a363566343a3a2f33322d3332203d3e203532373433.roa
File:                     323830343a363566343a3a2f33322d3332203d3e203532373433.roa (raw, json)
Hash identifier:          yFUriMA3jSl36ZtAYliucTBcvzxvvBGUu31glU6JDdI=
Subject key identifier:   2E:93:2B:5B:42:87:92:1D:DD:81:5A:E9:76:0A:0C:45:37:7B:33:80
Certificate issuer:       /CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
Certificate serial:       27C2EE0554DA4BB0A93D6DFBE86C7AD369E73933
Authority key identifier: B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/323830343a363566343a3a2f33322d3332203d3e203532373433.roa
Signing time:             Thu 05 Feb 2026 15:00:35 +0000
ROA not before:           Thu 05 Feb 2026 14:55:35 +0000
ROA not after:            Thu 04 Feb 2027 15:00:35 +0000
asID:                     52743
IP address blocks:        2804:65f4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl
                          rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:10:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c2:ee:05:54:da:4b:b0:a9:3d:6d:fb:e8:6c:7a:d3:69:e7:39:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
        Validity
            Not Before: Feb  5 14:55:35 2026 GMT
            Not After : Feb  4 15:00:35 2027 GMT
        Subject: CN=2E932B5B4287921DDD815AE9760A0C45377B3380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ff:22:96:f5:1c:64:20:12:f2:7c:c8:92:58:
                    f6:a6:9f:f8:e2:19:f3:61:2d:65:23:04:d0:76:e4:
                    df:5e:1c:d8:85:5e:9f:fe:09:0d:ea:b6:7e:25:64:
                    35:06:78:6e:e5:8d:55:e4:82:09:9f:e0:c6:87:d9:
                    14:1b:53:11:de:19:b6:d9:48:83:ef:79:54:ca:9d:
                    fa:d2:f3:6b:56:22:14:55:64:05:88:bc:36:43:a2:
                    f4:45:6f:91:38:f4:42:47:06:0f:3c:19:96:14:a8:
                    72:ea:71:56:86:6c:8b:ea:14:9f:b3:33:84:74:95:
                    43:e6:f0:16:6f:5d:86:45:2c:d2:07:bf:78:7e:ba:
                    4d:44:0d:e5:fd:ec:82:66:b8:81:e5:f8:65:e6:dd:
                    df:bb:f5:e9:d4:c9:d4:50:27:ea:ed:24:47:d9:94:
                    64:28:48:7b:55:85:be:86:ae:6c:2e:26:e7:ad:6e:
                    56:08:56:4a:1f:f7:ca:79:37:01:3a:1d:a1:cd:1f:
                    f0:d6:c0:75:9b:58:94:55:29:e5:b8:6b:e2:cd:d3:
                    cd:96:78:34:63:df:06:32:f1:f2:79:96:1f:82:2c:
                    d1:fd:77:5f:60:5b:56:ca:d7:09:10:ae:6d:50:66:
                    a3:b5:cd:98:c7:9e:9c:81:f4:6f:04:25:13:f4:50:
                    f3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:93:2B:5B:42:87:92:1D:DD:81:5A:E9:76:0A:0C:45:37:7B:33:80
            X509v3 Authority Key Identifier:
                keyid:B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/323830343a363566343a3a2f33322d3332203d3e203532373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:a0:a7:bb:62:cd:66:0c:05:3d:29:55:7d:10:d0:fc:a7:30:
         1b:3c:db:bb:ed:1f:81:0f:f4:9a:59:5c:96:51:d9:22:12:d5:
         03:e8:cf:bd:fc:f9:0e:6e:52:33:35:cb:89:fb:47:c4:a5:c9:
         31:89:db:4b:29:60:f2:45:f4:8a:b9:a0:94:2c:9e:23:01:4d:
         d6:a7:b9:87:75:dc:68:58:db:3a:b4:ac:99:11:cf:09:3c:a0:
         46:d2:49:26:a3:1d:2f:ec:c8:fd:a2:8e:b1:58:33:82:fa:87:
         ae:b2:c4:22:2d:60:65:d7:2d:0f:2b:63:fb:b3:91:cc:d1:c4:
         ab:84:8e:79:28:f9:42:d5:ea:3e:f8:7d:54:80:c4:03:74:71:
         12:48:d5:35:87:fb:2c:49:29:34:5a:cc:a1:41:87:9c:5c:76:
         3d:d8:ac:5e:25:19:53:d5:2b:95:73:83:30:62:1d:7a:c0:d2:
         87:7f:f3:39:fe:1b:a4:e1:8a:3f:69:d5:42:9f:5b:2d:e7:81:
         40:0c:32:a4:d5:a1:72:63:50:97:77:14:a8:b7:89:f6:c2:68:
         eb:1b:fd:d3:d4:df:00:8f:fd:23:29:a0:dd:61:33:49:6c:8c:
         cc:a7:6a:0b:2e:b3:16:0a:ca:7a:d4:4c:ea:bd:57:d3:1b:12:
         76:26:c7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:54:46 2026 by rpki-client