Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a633030303a3a2f33342d3334203d3e20323730393130.roa
File:                     323830343a373335633a633030303a3a2f33342d3334203d3e20323730393130.roa (raw, json)
Hash identifier:          Kt592g4yo0qxTzZVcRhpp3di5FhGQa9mhbPwEM+mW4M=
Subject key identifier:   B0:78:3B:C8:A1:20:8F:E4:1B:F2:E6:4A:A4:A2:68:22:20:4E:3B:0B
Certificate issuer:       /CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Certificate serial:       78EACDE67443ACA91B1BD6FF7F01A88A62CFA9AE
Authority key identifier: 21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a633030303a3a2f33342d3334203d3e20323730393130.roa
Signing time:             Thu 05 Feb 2026 08:19:06 +0000
ROA not before:           Thu 05 Feb 2026 08:14:06 +0000
ROA not after:            Thu 04 Feb 2027 08:19:06 +0000
asID:                     270910
IP address blocks:        2804:735c:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl
                          rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ea:cd:e6:74:43:ac:a9:1b:1b:d6:ff:7f:01:a8:8a:62:cf:a9:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
        Validity
            Not Before: Feb  5 08:14:06 2026 GMT
            Not After : Feb  4 08:19:06 2027 GMT
        Subject: CN=B0783BC8A1208FE41BF2E64AA4A26822204E3B0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6d:77:1a:bc:7e:db:68:74:5a:a4:fd:31:c2:
                    83:04:b7:30:34:65:f1:45:b4:dd:ab:f5:bd:fc:69:
                    a8:07:76:67:3a:4d:0c:7d:1d:f8:5e:74:43:cd:eb:
                    bd:01:03:8d:c9:3e:58:ea:57:e4:08:df:06:65:d1:
                    5f:72:b2:95:de:18:57:d3:cf:58:14:20:1e:7d:aa:
                    82:19:75:c6:66:ca:00:76:97:31:eb:70:c0:4c:5d:
                    8c:64:18:2b:bf:ec:72:05:f1:8c:9b:93:bc:09:43:
                    db:0f:54:5e:4b:9a:5d:83:cd:66:30:d7:4f:d7:9b:
                    89:7a:4f:a2:71:d8:12:e6:0b:3a:c6:67:1c:6a:c3:
                    94:90:e2:73:80:07:be:1d:ac:6f:66:16:bd:3f:81:
                    7f:ed:4f:a3:f1:d8:74:87:a4:e0:4b:e6:9f:45:cb:
                    75:2b:39:46:a3:2a:2a:e7:13:e7:98:19:e6:2a:96:
                    b7:21:40:a8:30:38:c2:70:71:b5:ba:c7:63:03:7a:
                    e1:54:d8:c9:af:6c:a9:64:f0:f1:6b:a7:dd:1b:12:
                    84:d8:70:08:c3:d5:d1:4f:ab:78:2f:d3:59:1b:99:
                    3b:74:0d:5c:02:ba:ab:a4:e9:e6:dc:96:cf:94:02:
                    07:54:09:7e:1f:90:b4:f8:6c:a9:ba:4c:76:fa:cb:
                    d2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:78:3B:C8:A1:20:8F:E4:1B:F2:E6:4A:A4:A2:68:22:20:4E:3B:0B
            X509v3 Authority Key Identifier:
                keyid:21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a633030303a3a2f33342d3334203d3e20323730393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:735c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6b:f8:fb:4d:03:6a:12:2b:1e:92:6f:ac:46:98:4b:0d:05:87:
         d5:ea:c9:3a:fa:0d:a5:5b:46:44:f6:bd:dd:29:08:b4:af:89:
         9e:1f:e1:2e:cf:17:bb:f3:1e:e6:fb:47:cd:24:00:92:f4:45:
         71:52:80:3c:11:e3:64:50:73:8f:c0:84:49:3e:af:54:d4:63:
         94:1d:8e:ca:71:af:89:39:22:7d:ec:da:72:3e:c9:07:e4:3a:
         f9:27:93:d6:80:3c:6f:71:d7:18:a2:ef:ac:ff:59:6d:91:2e:
         72:f0:53:e3:33:23:88:01:b4:9b:1c:5e:9c:ec:7b:39:7b:e0:
         bb:e8:30:a2:6e:a1:6d:36:85:9a:84:b8:2f:93:ac:b7:12:e1:
         8d:44:5e:c2:89:b2:b8:16:4f:78:9a:a6:eb:34:3a:2f:b9:b1:
         c5:92:6e:b0:e8:cb:14:0c:ef:1f:e8:23:1a:28:f5:29:6c:70:
         12:a7:69:2b:51:fc:da:31:99:a4:d8:95:1f:b0:95:ab:4e:89:
         21:e5:ab:ea:dc:df:c6:30:04:4c:54:8e:11:67:e0:a9:84:20:
         ab:45:66:05:7b:9a:06:e7:68:12:74:70:7a:43:3a:28:0a:55:
         38:f9:5b:9f:5d:33:46:92:41:79:83:35:8a:f2:03:87:f5:0f:
         97:b2:f3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:22:19 2026 by rpki-client