Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a313930303a3a2f34302d3430203d3e203631393531.roa
File:                     323830343a313863303a313930303a3a2f34302d3430203d3e203631393531.roa (raw, json)
Hash identifier:          q0vlthNjtrIT4JLzDggYChioAl255hmYZnMpNZfymLs=
Subject key identifier:   E1:94:A3:6C:37:49:5C:20:3E:CA:A3:5A:78:F3:AC:30:80:0B:5E:50
Certificate issuer:       /CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
Certificate serial:       161BE280EF5C6EBE1E2E5FED907FF63B4EB830C6
Authority key identifier: D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a313930303a3a2f34302d3430203d3e203631393531.roa
Signing time:             Wed 04 Feb 2026 22:28:53 +0000
ROA not before:           Wed 04 Feb 2026 22:23:53 +0000
ROA not after:            Wed 03 Feb 2027 22:28:53 +0000
asID:                     61951
IP address blocks:        2804:18c0:1900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl
                          rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1b:e2:80:ef:5c:6e:be:1e:2e:5f:ed:90:7f:f6:3b:4e:b8:30:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
        Validity
            Not Before: Feb  4 22:23:53 2026 GMT
            Not After : Feb  3 22:28:53 2027 GMT
        Subject: CN=E194A36C37495C203ECAA35A78F3AC30800B5E50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ab:40:e6:0e:01:2e:57:3c:3a:b3:f3:a9:1c:
                    f2:b7:22:07:f7:35:22:0f:a2:d0:4e:14:29:ea:74:
                    4e:2e:75:b5:54:55:da:80:35:1d:dc:6e:02:a7:77:
                    bd:2e:e5:61:19:6a:58:3b:d3:2e:1b:64:1f:8b:f9:
                    09:3f:c9:43:9e:00:e3:7b:00:1e:86:81:67:a5:4e:
                    12:48:f1:b2:2b:c7:5f:2c:07:e6:97:c2:0e:2a:aa:
                    d9:be:ef:9a:89:c0:85:f2:19:c3:f3:54:96:c1:e6:
                    51:b2:d3:7d:37:f6:19:91:b8:44:57:03:1f:be:7f:
                    2c:08:bf:2d:db:0e:c1:ac:fe:d2:28:80:09:4a:e5:
                    53:7d:55:d0:84:c9:fc:4c:7e:71:4a:87:ee:74:8c:
                    4f:7b:2d:89:65:b4:51:ec:de:23:59:e9:e1:58:68:
                    7f:1f:62:89:1a:25:de:db:be:df:b6:91:63:5f:f9:
                    e0:4f:98:10:db:2a:8e:01:2d:e4:da:1a:f5:02:ba:
                    61:f1:43:83:a0:ee:8f:d8:59:de:01:25:dc:6a:47:
                    32:51:ab:c8:35:a8:6e:94:f0:9c:58:2e:64:3f:e0:
                    b6:a0:c9:b8:b0:81:e1:fe:fc:55:85:63:a9:ae:26:
                    7a:26:58:61:8f:fc:dd:8d:f9:da:94:55:21:e8:e1:
                    e4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:94:A3:6C:37:49:5C:20:3E:CA:A3:5A:78:F3:AC:30:80:0B:5E:50
            X509v3 Authority Key Identifier:
                keyid:D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a313930303a3a2f34302d3430203d3e203631393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18c0:1900::/40

    Signature Algorithm: sha256WithRSAEncryption
         19:d2:16:4b:c8:e0:32:d2:de:33:73:e7:06:15:c9:65:38:4c:
         21:d5:cc:93:e1:f4:51:e0:b2:1e:85:79:27:ac:71:91:db:b0:
         2a:bb:de:42:a0:f9:5e:64:e5:6c:25:24:ce:d7:c1:00:82:c6:
         30:e0:c6:41:6c:2e:3b:db:b2:c0:11:a8:eb:c7:a1:aa:1d:34:
         d8:3f:e7:0b:50:5e:2a:d5:82:6d:67:08:9c:f3:40:11:16:e2:
         a7:58:38:4d:22:4e:b8:71:04:03:c5:ee:eb:e7:d0:eb:86:00:
         dc:fc:a7:27:bf:4a:54:72:a3:b2:fa:06:5a:51:fa:bb:51:b2:
         b3:42:5f:df:8c:ac:05:08:47:2a:02:2c:ce:93:a7:4b:56:55:
         80:2a:55:f3:fe:9f:3c:6f:65:5b:9c:ef:10:ec:af:31:6a:64:
         3a:3e:74:53:b2:1d:d8:70:0d:51:3b:72:04:5b:6b:c8:e6:a1:
         0d:c6:b1:d2:5a:dd:ee:cb:7b:66:44:c9:76:c5:05:54:50:27:
         10:c9:eb:cb:90:d0:6e:12:08:4f:fe:3e:f4:6e:ba:bc:e3:c0:
         42:3b:b5:bf:f0:9b:db:e8:ec:3b:9a:c4:e0:c5:55:25:71:7a:
         d1:35:69:b6:9d:4e:2c:f4:f7:d8:18:c3:9a:93:0e:33:56:37:
         4f:9f:49:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:20:13 2026 by rpki-client