Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a383030303a3a2f33342d3334203d3e203631393531.roa
File:                     323830343a313863303a383030303a3a2f33342d3334203d3e203631393531.roa (raw, json)
Hash identifier:          Xfz+dqi8+YBv0WwUNoQTPXTp8xnNU8kxjfUBdjm8ud4=
Subject key identifier:   E5:14:55:15:31:3F:6B:F4:3F:AA:5A:59:B8:61:78:A0:CC:30:0F:48
Certificate issuer:       /CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
Certificate serial:       27A20A67192888624F88FF386F4B819F9E54B25D
Authority key identifier: D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a383030303a3a2f33342d3334203d3e203631393531.roa
Signing time:             Wed 04 Feb 2026 22:28:53 +0000
ROA not before:           Wed 04 Feb 2026 22:23:53 +0000
ROA not after:            Wed 03 Feb 2027 22:28:53 +0000
asID:                     61951
IP address blocks:        2804:18c0:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl
                          rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a2:0a:67:19:28:88:62:4f:88:ff:38:6f:4b:81:9f:9e:54:b2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
        Validity
            Not Before: Feb  4 22:23:53 2026 GMT
            Not After : Feb  3 22:28:53 2027 GMT
        Subject: CN=E5145515313F6BF43FAA5A59B86178A0CC300F48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1d:17:e1:40:bf:8b:7c:56:fb:04:b0:2a:95:
                    82:12:32:5b:8b:62:b3:e8:58:2a:0c:15:cf:0b:05:
                    cc:49:99:6f:fa:94:2d:36:72:1f:b6:c3:78:7b:1a:
                    69:8b:8e:75:35:0f:1d:d9:01:4c:3b:7b:ad:3d:6b:
                    2a:3a:20:2f:11:b5:e8:03:f5:71:4a:bf:ff:e4:15:
                    b1:63:d6:8c:86:6c:b4:f3:35:f9:c6:16:75:f0:f0:
                    51:b0:10:de:8d:fd:6c:3d:93:4f:88:b2:d7:e4:34:
                    c8:5e:f3:0c:e4:63:9d:1f:c2:54:50:54:9c:4d:da:
                    c8:9a:1c:2b:14:be:e0:8b:b7:15:40:15:2b:44:88:
                    bd:f5:5e:1e:8d:18:92:75:0f:a9:44:c4:fa:32:e9:
                    8a:df:b7:65:ea:ee:7c:c3:f1:96:b1:1b:e0:2f:6a:
                    f7:98:5a:4e:4c:cb:95:7e:84:d2:31:a2:9c:89:70:
                    fa:e0:f4:0e:33:21:1a:17:bf:01:d1:51:14:90:ef:
                    c2:0f:ad:40:45:b0:d9:2b:f9:1f:22:7f:63:6c:27:
                    df:3e:60:58:51:2a:d2:b0:a8:b5:87:40:47:95:e7:
                    a1:45:19:6f:3e:c9:63:9d:69:67:c9:55:63:14:24:
                    b5:c6:37:42:0f:ad:c3:af:ea:2d:fb:e3:13:ba:7d:
                    14:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:14:55:15:31:3F:6B:F4:3F:AA:5A:59:B8:61:78:A0:CC:30:0F:48
            X509v3 Authority Key Identifier:
                keyid:D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a383030303a3a2f33342d3334203d3e203631393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18c0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         57:de:d1:ea:4a:b7:5a:43:57:dc:b6:0d:1a:2a:38:af:15:14:
         b9:16:c5:63:0c:3a:c6:3d:7a:0b:ea:78:38:4a:21:76:c9:74:
         52:b0:47:95:63:ec:03:7c:3e:aa:cd:61:aa:0d:c5:1f:20:9b:
         74:3b:eb:36:ab:c0:e8:3a:b2:e6:6f:dd:a2:45:bf:01:f7:af:
         a2:bf:df:3f:d4:a8:e4:40:8f:2c:32:da:04:74:94:bc:48:31:
         e6:21:cd:ca:10:6c:69:5d:f6:bc:e4:d8:61:07:b2:0b:f8:df:
         ef:5b:b3:0c:a2:83:89:82:a9:29:47:03:0c:07:d7:3d:88:3f:
         92:8c:e3:b8:3e:74:1c:1b:53:22:d3:8b:21:be:53:3a:20:34:
         f4:fc:d7:ea:f2:a0:a8:e9:87:db:9d:08:87:bb:d5:83:35:48:
         78:39:5b:42:60:bd:86:af:91:19:14:30:a9:76:10:f3:bd:7f:
         5b:7c:b8:44:41:19:d3:56:df:e8:8a:c4:57:a4:87:a1:c2:08:
         bc:89:27:28:99:ad:34:7e:28:9c:40:7d:f3:00:86:30:c2:ef:
         5c:5c:0d:4c:e4:46:40:58:9d:61:96:ea:23:cf:e8:71:1e:f3:
         43:7c:72:3e:c1:aa:a9:52:3f:91:a7:7d:6a:f9:f6:13:e9:8e:
         fc:04:ee:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:20:20 2026 by rpki-client