Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/323830343a313735383a3a2f33322d3438203d3e20323633313339.roa
File:                     323830343a313735383a3a2f33322d3438203d3e20323633313339.roa (raw, json)
Hash identifier:          4hXMnlOM2+e5ukMlFpC5yM+NX/fv2dR6Zo6WF4wA99k=
Subject key identifier:   71:50:89:75:ED:A9:D7:FF:AF:96:40:3A:63:09:4F:FB:25:66:E9:00
Certificate issuer:       /CN=BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA
Certificate serial:       423F194227C96115E847712734B3DFEF2DC5B5CE
Authority key identifier: BD:E6:E0:CD:CD:D7:C3:37:D6:45:1A:6B:E9:4B:32:1C:22:CF:08:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/323830343a313735383a3a2f33322d3438203d3e20323633313339.roa
Signing time:             Fri 06 Feb 2026 01:08:44 +0000
ROA not before:           Fri 06 Feb 2026 01:03:44 +0000
ROA not after:            Fri 05 Feb 2027 01:08:44 +0000
asID:                     263139
IP address blocks:        2804:1758::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.crl
                          rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 19:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:3f:19:42:27:c9:61:15:e8:47:71:27:34:b3:df:ef:2d:c5:b5:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA
        Validity
            Not Before: Feb  6 01:03:44 2026 GMT
            Not After : Feb  5 01:08:44 2027 GMT
        Subject: CN=71508975EDA9D7FFAF96403A63094FFB2566E900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:64:2a:38:ad:8e:76:7d:25:0e:75:4b:3a:b0:
                    41:33:96:7a:9f:4d:2a:4f:fd:b3:2e:39:6d:0b:1b:
                    3e:8e:7c:ff:e5:b0:59:24:a6:b8:55:59:f3:5b:01:
                    c8:a0:5a:a5:0a:2d:bb:e8:f8:7a:be:94:e4:5a:d9:
                    d4:d2:ec:f7:63:9d:60:57:fb:e8:74:ae:25:f5:be:
                    08:f5:fc:05:b0:aa:f7:3d:2f:02:a6:d1:6b:a5:dd:
                    4a:30:7f:80:3f:9f:fc:02:1e:5a:3b:71:a6:d4:6e:
                    cc:f3:98:21:a3:b7:5f:bd:1b:c1:33:df:95:4e:c1:
                    8a:db:44:4b:ec:c0:2f:34:63:13:20:2d:d9:cc:1f:
                    24:65:d6:01:c8:b0:59:26:2f:2e:ac:1b:8c:59:28:
                    14:15:6f:a9:e4:8f:25:88:ee:8b:e2:4e:71:1b:9a:
                    ce:56:dd:47:8e:64:4a:f0:e0:c8:6c:40:d7:70:5c:
                    cd:1c:a3:8d:c6:e4:8d:8c:af:b5:b3:08:8b:fc:be:
                    80:ab:dd:29:e2:33:f3:ae:b7:b6:ae:b7:94:5d:04:
                    f7:6a:2b:3d:e7:78:18:ae:89:f6:80:80:f5:5c:6d:
                    7b:45:68:85:4f:27:06:2f:6a:c4:f4:52:9b:03:5f:
                    b2:db:f2:bd:11:c2:e0:34:87:ad:7c:78:a4:69:ef:
                    21:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:50:89:75:ED:A9:D7:FF:AF:96:40:3A:63:09:4F:FB:25:66:E9:00
            X509v3 Authority Key Identifier:
                keyid:BD:E6:E0:CD:CD:D7:C3:37:D6:45:1A:6B:E9:4B:32:1C:22:CF:08:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/323830343a313735383a3a2f33322d3438203d3e20323633313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1758::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:04:f5:1e:f1:e9:94:14:8d:4e:34:15:03:99:c6:1a:ef:ac:
         34:5e:15:e1:85:7f:24:94:67:d8:90:c0:df:3d:a8:d9:67:90:
         ca:9e:90:f7:7a:98:fe:db:41:b5:53:ad:d0:f1:a8:8a:9f:46:
         7a:c3:61:09:d9:a3:4a:49:6a:00:8c:4d:62:55:21:2a:e6:e6:
         96:74:03:5f:18:9c:ff:5d:2a:9c:af:59:ab:94:85:be:be:9c:
         f9:73:c2:a6:ad:f1:8d:c3:01:cb:f8:af:07:42:8f:aa:ee:9e:
         05:a3:4a:bb:70:1e:d6:a1:af:fc:86:b7:a3:cb:b5:63:7a:8b:
         a9:44:fd:87:59:23:73:de:74:30:cc:5a:3c:b1:29:53:9f:41:
         db:0f:0c:3e:4f:b5:43:86:17:44:02:ba:43:c1:8c:c1:b1:9d:
         54:c8:d8:61:0a:2f:65:85:ac:bb:b2:e5:89:be:8e:cb:78:8b:
         70:74:c6:4d:3f:72:b6:9f:ea:e8:20:b0:3d:74:ad:db:21:e5:
         8c:5b:db:ea:59:15:4c:76:1f:75:c8:d0:f3:40:bd:e7:d7:8b:
         a1:7f:bc:72:b1:78:e2:64:6e:a8:a3:20:e5:3a:a4:b2:fe:b3:
         7b:47:30:2e:a9:20:f1:36:ab:2e:7d:70:aa:d5:fb:9c:7e:8c:
         ab:67:11:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:04 2026 by rpki-client