Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a343030303a3a2f33342d3334203d3e20323730393130.roa
File:                     323830343a373335633a343030303a3a2f33342d3334203d3e20323730393130.roa (raw, json)
Hash identifier:          QCbsAhRRI8vLDtEh/8MMT6D/qTS6xjwYIKBKApex6Z8=
Subject key identifier:   78:74:71:6F:59:25:77:C0:5D:F5:C8:2D:E6:63:B7:62:C6:A7:9C:3A
Certificate issuer:       /CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Certificate serial:       0DEED8A9C64DE3034F0D1867F7C430781FD5DDDD
Authority key identifier: 21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a343030303a3a2f33342d3334203d3e20323730393130.roa
Signing time:             Thu 05 Feb 2026 08:19:06 +0000
ROA not before:           Thu 05 Feb 2026 08:14:06 +0000
ROA not after:            Thu 04 Feb 2027 08:19:06 +0000
asID:                     270910
IP address blocks:        2804:735c:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl
                          rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ee:d8:a9:c6:4d:e3:03:4f:0d:18:67:f7:c4:30:78:1f:d5:dd:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
        Validity
            Not Before: Feb  5 08:14:06 2026 GMT
            Not After : Feb  4 08:19:06 2027 GMT
        Subject: CN=7874716F592577C05DF5C82DE663B762C6A79C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:92:7d:80:d1:de:63:f3:4d:bb:05:9e:87:b9:
                    72:ef:f7:1a:41:d6:26:d1:7f:e9:d9:9b:89:00:b5:
                    0e:d3:95:e0:ca:66:c9:b1:13:27:36:c1:64:0a:2d:
                    95:7c:8e:3b:b1:73:7f:67:11:ef:54:c7:6c:62:da:
                    01:50:f0:70:c8:c2:31:d4:eb:38:b5:50:31:59:8d:
                    48:e7:27:ae:f6:b2:d6:26:2d:ea:50:a9:1e:42:81:
                    b5:74:a3:10:6e:4c:c7:d0:95:7f:0a:5f:71:a9:79:
                    84:7a:7b:28:28:dc:f6:42:5a:44:71:4c:9c:98:b3:
                    04:e5:ab:ce:49:89:dd:7d:85:1d:c4:6e:73:8e:4a:
                    5e:14:b0:72:be:04:c4:4a:cf:b8:d5:96:a1:80:44:
                    27:07:4e:59:ff:2d:9f:4b:6b:63:13:df:13:25:4f:
                    a0:d6:39:db:f5:37:a4:d3:38:ce:72:3a:f9:7d:9d:
                    77:0b:95:dd:c6:f2:ac:25:c0:61:c0:f8:5b:32:69:
                    f2:87:90:6d:ee:0f:97:40:10:5d:67:81:2b:61:90:
                    76:4f:46:9b:cb:75:d4:d0:b1:38:28:26:49:62:c9:
                    c0:31:7d:58:2d:94:7c:74:69:b5:47:ed:83:f9:d6:
                    16:0d:8d:ef:e6:b3:1c:f9:e1:01:65:00:b1:12:69:
                    96:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:74:71:6F:59:25:77:C0:5D:F5:C8:2D:E6:63:B7:62:C6:A7:9C:3A
            X509v3 Authority Key Identifier:
                keyid:21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a343030303a3a2f33342d3334203d3e20323730393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:735c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5d:1a:6f:2c:67:bd:47:fd:ab:b6:73:20:4b:2b:22:fd:c4:13:
         36:c7:cd:a9:a9:4c:8f:3b:f9:52:74:b5:d3:73:f3:30:5c:20:
         b2:70:24:b7:b8:fb:9e:c7:54:c7:b5:6f:d5:3e:c8:fa:58:22:
         28:5d:d4:69:c9:b7:91:42:00:2b:f7:aa:08:e1:5c:74:70:e8:
         49:f5:1f:ac:85:01:7c:4a:b0:53:00:31:ca:8f:8d:02:1f:03:
         e7:f1:b2:8c:13:f3:cf:80:cb:b0:46:83:1b:26:92:07:fe:5f:
         b2:3f:25:40:a0:50:67:fb:c9:1b:5e:6b:81:dc:5b:46:86:e4:
         cf:e6:01:54:40:52:dd:53:1d:67:4b:d5:ff:e5:41:99:24:83:
         a7:cf:52:45:1d:5f:a1:3c:a7:fe:e9:cb:bc:2f:0e:41:4d:76:
         cd:19:8f:87:72:52:e7:ba:07:27:52:4c:a4:87:5a:e9:22:2a:
         b0:8d:42:9a:90:f0:46:46:ed:60:b0:eb:ef:a0:48:1f:37:20:
         2d:9b:16:b6:54:8f:8b:a6:29:ae:c2:bf:39:b8:16:09:73:35:
         32:6e:de:bd:3e:1d:48:f2:7c:51:94:f6:9f:d7:42:7a:48:e0:
         cb:74:2c:bd:ca:c1:8f:a2:cc:a9:d1:94:24:1b:7d:ba:dc:d3:
         55:7b:8e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:22:15 2026 by rpki-client