Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/323830343a356438343a3a2f33322d3332203d3e20323638393737.roa
File:                     323830343a356438343a3a2f33322d3332203d3e20323638393737.roa (raw, json)
Hash identifier:          CkIdELIl5xCJjW78MKnAuvyL4OQEX0ivfZCrCpG83Xw=
Subject key identifier:   4C:99:0B:65:49:63:DB:AA:B9:9B:6C:0E:3D:38:84:66:AA:37:D3:F2
Certificate issuer:       /CN=34B751FB87F97FC1716FBAC75D6ECEF3594D661B
Certificate serial:       0628A189680119AA66E2E79DC0E602641B8DF552
Authority key identifier: 34:B7:51:FB:87:F9:7F:C1:71:6F:BA:C7:5D:6E:CE:F3:59:4D:66:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/323830343a356438343a3a2f33322d3332203d3e20323638393737.roa
Signing time:             Thu 05 Feb 2026 02:42:39 +0000
ROA not before:           Thu 05 Feb 2026 02:37:39 +0000
ROA not after:            Thu 04 Feb 2027 02:42:39 +0000
asID:                     268977
IP address blocks:        2804:5d84::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.crl
                          rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:35:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:28:a1:89:68:01:19:aa:66:e2:e7:9d:c0:e6:02:64:1b:8d:f5:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B751FB87F97FC1716FBAC75D6ECEF3594D661B
        Validity
            Not Before: Feb  5 02:37:39 2026 GMT
            Not After : Feb  4 02:42:39 2027 GMT
        Subject: CN=4C990B654963DBAAB99B6C0E3D388466AA37D3F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2e:01:a3:47:c8:52:fa:48:10:88:10:02:9f:
                    f1:d0:c5:60:3c:ff:da:c8:dc:52:3d:7e:5b:b5:f2:
                    35:82:ef:ab:b3:ff:b1:5d:06:f8:86:46:b2:03:9f:
                    29:4c:98:c7:dc:01:ae:0a:f6:7d:9b:85:6e:5c:0a:
                    bf:91:73:25:ac:34:6c:f9:4f:0f:25:cb:c1:93:3f:
                    9d:cb:f5:2a:15:e8:13:53:b7:24:6a:fc:79:1d:01:
                    bb:95:d9:b2:1f:82:2d:e1:39:54:54:3e:e5:8f:0c:
                    93:57:16:ca:7c:41:bc:32:7f:ef:b1:4d:a8:14:f2:
                    8b:e2:2f:e1:a2:83:79:77:d9:66:0f:49:77:eb:52:
                    d7:d2:e8:cb:e1:3f:52:e8:8c:74:50:84:e2:f5:58:
                    7f:cb:ad:ed:81:fa:d9:f5:85:de:8e:ac:e7:16:bf:
                    a8:2c:ec:72:e1:07:91:01:48:fe:ac:01:23:2c:44:
                    6a:c0:cd:71:0f:d8:38:c6:e7:12:e5:f3:c1:0e:a6:
                    4e:87:45:79:dd:64:05:99:70:ad:c9:62:29:c2:73:
                    03:c3:15:d6:8c:02:c3:93:11:0a:fc:e2:07:ff:76:
                    9a:5b:36:9e:38:fe:21:11:10:de:65:6e:2e:28:a0:
                    e9:84:89:70:a5:59:76:9b:79:cb:0a:ce:be:4e:d6:
                    99:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:99:0B:65:49:63:DB:AA:B9:9B:6C:0E:3D:38:84:66:AA:37:D3:F2
            X509v3 Authority Key Identifier:
                keyid:34:B7:51:FB:87:F9:7F:C1:71:6F:BA:C7:5D:6E:CE:F3:59:4D:66:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/323830343a356438343a3a2f33322d3332203d3e20323638393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d84::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:fd:54:4d:ea:0c:95:d5:02:f0:1b:6a:82:eb:21:83:2c:2c:
         1d:c4:67:28:24:b4:19:ba:3a:14:c9:ff:26:1a:3a:d8:2a:93:
         d6:02:e1:6c:e3:b5:e1:35:49:ca:f9:de:4d:ec:e7:e2:6a:56:
         89:e5:a1:97:0e:83:cf:73:95:5e:76:13:71:89:0f:c3:07:1d:
         58:46:1f:63:42:0a:24:57:9e:66:cd:69:c7:0b:67:ac:02:96:
         c7:3b:b4:9a:5e:0b:c7:e2:57:b0:ad:bf:a3:24:c1:d6:0a:ca:
         09:b2:ff:59:19:a7:31:f3:cc:90:2c:f0:f2:cd:63:6d:43:19:
         3a:42:d3:d5:01:49:8c:92:89:f6:41:e7:9a:8f:6b:59:2f:87:
         70:fd:e4:f3:6a:b5:63:6b:c7:a0:fc:7f:62:7e:e0:6e:ca:cb:
         9a:2d:fb:3d:bb:9d:89:71:ff:d3:a3:23:ce:93:1f:18:44:f3:
         0d:35:c3:f3:e0:04:95:c6:c0:44:47:36:c6:b9:4a:7b:22:45:
         0f:88:35:f2:90:3d:dc:2a:eb:e3:e4:64:94:0d:16:ed:f5:eb:
         02:26:6b:1e:3a:04:b7:aa:0a:fe:61:99:08:1d:c7:60:f5:1b:
         60:26:aa:0a:0c:98:a7:d7:7e:18:fc:c2:8b:8c:56:ed:cb:82:
         3f:68:d6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:44:04 2026 by rpki-client