Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a3a2f33332d3333203d3e20323730393130.roa
File:                     323830343a373335633a3a2f33332d3333203d3e20323730393130.roa (raw, json)
Hash identifier:          gUzk6XeWFdKb3L97R9Jbxb8JQipRUEL8ki7wNf67nXs=
Subject key identifier:   BE:41:BE:87:A2:DE:1F:A9:66:07:27:E4:32:27:58:29:3A:D2:63:D8
Certificate issuer:       /CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Certificate serial:       5E90E6E4FE87424DB1A037D6DE7A98D8B01C5F31
Authority key identifier: 21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a3a2f33332d3333203d3e20323730393130.roa
Signing time:             Thu 05 Feb 2026 08:19:06 +0000
ROA not before:           Thu 05 Feb 2026 08:14:06 +0000
ROA not after:            Thu 04 Feb 2027 08:19:06 +0000
asID:                     270910
IP address blocks:        2804:735c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl
                          rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:90:e6:e4:fe:87:42:4d:b1:a0:37:d6:de:7a:98:d8:b0:1c:5f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
        Validity
            Not Before: Feb  5 08:14:06 2026 GMT
            Not After : Feb  4 08:19:06 2027 GMT
        Subject: CN=BE41BE87A2DE1FA9660727E4322758293AD263D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:46:79:c5:b5:59:3d:23:77:63:e8:3f:1a:1a:
                    04:80:4b:8a:b1:e9:7a:80:46:b8:71:ca:75:6f:2a:
                    05:91:b0:8d:1b:90:47:1b:22:2a:f7:56:e1:39:fa:
                    e8:27:99:a3:12:8c:20:82:b5:36:b4:d3:1b:b0:c8:
                    b3:75:f3:47:db:0b:0e:f1:35:0a:12:18:24:fd:58:
                    d5:49:d7:b0:f7:f8:ef:b2:10:1e:8b:de:d2:cc:62:
                    2f:7e:24:30:ab:97:f9:9f:f5:53:f9:44:9d:b3:d1:
                    38:40:1f:a2:95:8b:52:d5:5f:4f:62:9f:03:37:a7:
                    60:fe:18:5f:89:40:a3:fb:77:65:82:b8:b4:b7:16:
                    da:90:d8:5a:88:88:35:bd:bb:13:cb:ca:6e:ca:1b:
                    5f:7b:f9:e3:f5:fa:a3:77:1d:58:bc:d2:8e:90:57:
                    75:b1:d0:b4:d6:cc:48:2e:b1:84:af:4c:9f:00:cc:
                    7e:9d:8b:04:87:46:6c:3a:f1:9a:ff:de:70:fe:46:
                    fb:86:9a:82:c8:b2:14:5b:8b:1c:cc:f1:d4:7b:2c:
                    3a:13:47:0d:f6:05:fe:6f:b4:4a:83:df:b9:29:17:
                    dd:05:e6:3a:9c:61:8a:80:c7:6d:7a:d8:8b:97:77:
                    07:e0:1a:fb:c5:2c:45:a1:0e:bb:5d:5e:b0:b3:d7:
                    44:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:41:BE:87:A2:DE:1F:A9:66:07:27:E4:32:27:58:29:3A:D2:63:D8
            X509v3 Authority Key Identifier:
                keyid:21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a3a2f33332d3333203d3e20323730393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:735c::/33

    Signature Algorithm: sha256WithRSAEncryption
         61:0f:17:ce:18:96:c0:10:53:e7:09:e6:2a:b2:6c:2a:30:2f:
         af:6a:f3:39:f2:c5:6a:a9:c5:0c:7e:cc:6f:43:d5:04:11:18:
         83:f7:eb:5a:1d:ed:c0:a8:3f:f7:43:36:62:10:23:fc:7a:80:
         f2:de:4a:26:0d:0e:98:be:b5:d6:f1:67:74:fe:93:cf:ed:17:
         8b:74:e3:6c:1b:0e:f2:84:4e:cc:5c:da:39:0c:20:b0:6f:44:
         63:56:f9:24:4f:f1:53:6e:cb:ba:d7:18:35:25:fa:a0:e6:2f:
         d7:34:77:91:84:39:47:43:5a:3f:57:36:14:32:78:bf:be:a8:
         0d:ba:42:9e:ec:0a:ba:25:5d:6c:2c:b9:72:05:fc:9b:9a:32:
         61:a1:8c:eb:cd:6b:e9:86:a1:b7:bd:48:dd:96:98:31:4b:42:
         16:0e:eb:cb:ff:11:c0:83:5e:f3:7f:b5:2d:3b:b8:dc:e9:42:
         90:75:54:e0:74:3c:15:45:a3:ad:9c:fb:67:a0:13:d2:24:a8:
         b4:5f:a3:61:9d:75:86:a9:3e:15:74:e3:22:80:57:ee:81:12:
         0c:ce:8a:23:8a:9f:62:fd:ec:70:b9:3f:44:36:1d:c1:33:71:
         21:b8:26:af:18:ae:c4:b6:fd:0f:d9:6e:1f:35:5e:13:e4:77:
         d7:8c:22:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:13:14 2026 by rpki-client