Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/323830343a316532383a3a2f33322d3332203d3e20323634343131.roa
File:                     323830343a316532383a3a2f33322d3332203d3e20323634343131.roa (raw, json)
Hash identifier:          0qHit2KlLN/eox0Jo8Mh6opb+SQ+js8gVixoYIpjc+k=
Subject key identifier:   93:6A:C6:CA:85:7B:F4:4D:5C:79:53:FF:76:7E:8B:BC:67:18:E3:63
Certificate issuer:       /CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359
Certificate serial:       72F6F7C2DAC200B63C06CA88046A1D8DF17D43D2
Authority key identifier: 86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/323830343a316532383a3a2f33322d3332203d3e20323634343131.roa
Signing time:             Fri 06 Feb 2026 01:46:30 +0000
ROA not before:           Fri 06 Feb 2026 01:41:30 +0000
ROA not after:            Fri 05 Feb 2027 01:46:30 +0000
asID:                     264411
IP address blocks:        2804:1e28::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl
                          rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:11:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f6:f7:c2:da:c2:00:b6:3c:06:ca:88:04:6a:1d:8d:f1:7d:43:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359
        Validity
            Not Before: Feb  6 01:41:30 2026 GMT
            Not After : Feb  5 01:46:30 2027 GMT
        Subject: CN=936AC6CA857BF44D5C7953FF767E8BBC6718E363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b4:4a:c9:49:ed:4f:ba:c9:1c:0d:86:9f:a8:
                    62:80:ba:71:74:2b:e5:6c:a0:0d:38:82:3e:16:6e:
                    62:6c:f9:70:6f:a3:68:5f:6a:fd:a0:0f:3b:1d:a9:
                    0d:df:31:c5:13:7b:da:0c:a4:05:6e:fc:f2:b0:3d:
                    c8:dd:49:28:be:ba:26:c8:87:32:4d:68:02:4d:a0:
                    bd:20:6d:d8:74:19:02:46:69:89:7b:28:dc:3a:11:
                    09:d6:e1:ff:3a:22:cb:70:8f:5a:69:8a:74:a5:a6:
                    c4:a7:75:29:b5:ba:bf:10:87:e3:93:82:42:81:46:
                    49:f4:ed:d7:23:4b:d9:d8:5f:50:88:38:8f:6d:e5:
                    92:5b:52:32:0c:0d:1a:61:7a:d8:0a:b7:55:8e:27:
                    cb:c4:11:77:3c:22:66:b8:21:d2:ce:6c:de:24:27:
                    7e:07:b8:fb:5f:60:43:77:47:8f:5f:0d:b5:6d:1b:
                    0a:01:e0:f4:93:9e:b7:c6:8c:98:a3:0c:62:a2:d5:
                    dc:7b:75:af:fc:ef:c3:89:cf:9e:61:ec:19:95:8f:
                    4c:08:c2:ae:d5:47:17:cc:2b:ea:a7:3e:17:80:49:
                    83:af:14:5c:82:37:89:a3:64:75:05:3b:d6:83:da:
                    66:01:24:1d:05:9a:f1:b9:35:9d:81:a7:72:89:dc:
                    c4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6A:C6:CA:85:7B:F4:4D:5C:79:53:FF:76:7E:8B:BC:67:18:E3:63
            X509v3 Authority Key Identifier:
                keyid:86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/323830343a316532383a3a2f33322d3332203d3e20323634343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e28::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:87:5b:4d:27:6d:77:35:1d:39:e7:c4:7c:f1:4d:54:1f:da:
         23:b5:72:43:a0:91:36:ba:16:25:55:ab:d0:f4:37:0f:f4:f3:
         7a:48:d6:e2:be:82:06:a4:98:d5:10:ee:9c:a5:20:dd:cc:e3:
         28:02:53:ec:41:2d:9b:fc:ec:68:19:d3:07:62:e0:4b:00:ab:
         94:05:46:2b:8b:5c:a2:72:aa:8f:28:a0:b6:72:a6:bf:e9:08:
         be:0d:18:84:c5:a0:75:69:b7:f4:24:c0:f0:df:ed:75:68:bc:
         ad:90:9d:1f:01:5d:01:6e:5d:aa:04:69:b4:ea:0c:1d:45:b0:
         31:04:0d:13:88:19:78:bb:a8:ad:47:f5:29:40:66:b4:79:84:
         f9:51:17:c8:f6:2b:55:2f:2f:86:ae:e5:59:e4:82:6d:84:0c:
         63:20:ef:2b:65:0e:7c:cd:3d:c1:1e:04:f4:f5:95:07:48:e0:
         bb:01:dd:25:50:0b:f4:bf:9d:b2:a3:34:a6:d9:b1:98:02:4f:
         c5:33:59:dd:63:70:b3:f2:ef:5e:6f:99:28:41:80:df:31:0d:
         5a:5a:59:05:4b:ec:35:51:cf:fc:82:ba:73:c9:ea:22:ac:4a:
         72:ef:5a:f3:a9:30:89:38:db:8b:ac:6a:12:52:52:41:54:3e:
         00:6f:ef:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:57:57 2026 by rpki-client