Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/323830343a343330343a3a2f33322d3332203d3e20323637353433.roa
File:                     323830343a343330343a3a2f33322d3332203d3e20323637353433.roa (raw, json)
Hash identifier:          QR8q+2vhaE0GgDmRqjwo5xAEFQgodlUQtpoWgUIPRQ8=
Subject key identifier:   29:08:A1:3C:04:9B:70:75:69:43:9E:AA:2A:E5:BE:1D:F3:FA:3D:F5
Certificate issuer:       /CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B
Certificate serial:       4D328E3F90FD6A015A7551244B144CDA5B92A10A
Authority key identifier: 33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/323830343a343330343a3a2f33322d3332203d3e20323637353433.roa
Signing time:             Thu 05 Feb 2026 05:43:06 +0000
ROA not before:           Thu 05 Feb 2026 05:38:06 +0000
ROA not after:            Thu 04 Feb 2027 05:43:06 +0000
asID:                     267543
IP address blocks:        2804:4304::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl
                          rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:18:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:32:8e:3f:90:fd:6a:01:5a:75:51:24:4b:14:4c:da:5b:92:a1:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B
        Validity
            Not Before: Feb  5 05:38:06 2026 GMT
            Not After : Feb  4 05:43:06 2027 GMT
        Subject: CN=2908A13C049B707569439EAA2AE5BE1DF3FA3DF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ae:c7:92:0e:bb:77:08:f1:a9:d6:f5:eb:e9:
                    ba:f8:c3:12:b5:a5:3d:06:d3:a2:f7:2e:53:76:31:
                    cc:84:58:8b:87:93:c5:96:57:d2:db:75:f5:5d:98:
                    e8:e9:1f:e1:a8:06:0a:0e:f4:03:96:ff:b7:c2:8b:
                    a1:04:74:b7:34:26:1e:43:fa:c8:71:8a:13:20:c6:
                    f5:52:96:60:fd:28:c9:fa:1b:65:01:cf:df:7e:2d:
                    18:a9:b6:50:ff:d4:8a:35:ec:82:1b:db:8c:41:88:
                    4d:27:2a:83:1b:81:04:02:fe:9d:c7:ba:af:ca:26:
                    7f:1b:b0:08:cd:a1:dd:25:92:f4:af:a7:ba:ce:7a:
                    a1:48:af:85:38:3b:1c:07:93:06:fa:f1:23:6c:76:
                    ee:de:7a:80:fa:ad:72:09:1c:dd:45:a1:4d:95:36:
                    19:54:91:fe:dd:69:85:9a:f3:36:55:36:85:bb:ed:
                    02:7c:b4:90:48:23:5d:cb:3a:65:7e:65:c7:78:06:
                    23:b4:56:84:34:5c:9b:3b:50:1d:2e:11:2b:f7:1d:
                    b9:93:5f:6a:d8:33:c1:f0:85:97:6c:ba:16:0c:8a:
                    ed:e3:f3:e4:bb:61:fb:33:ed:d0:13:51:13:a0:b8:
                    6a:02:9d:a0:45:93:1b:d7:7d:03:1b:7d:0e:39:76:
                    4d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:08:A1:3C:04:9B:70:75:69:43:9E:AA:2A:E5:BE:1D:F3:FA:3D:F5
            X509v3 Authority Key Identifier:
                keyid:33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/323830343a343330343a3a2f33322d3332203d3e20323637353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4304::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:67:2d:3c:4a:13:a5:99:e3:94:45:45:8c:fe:15:0c:8e:e9:
         c7:98:43:72:d6:ea:8e:f4:02:a6:16:2f:de:07:bf:d1:46:c7:
         30:ef:7c:69:7b:7d:34:59:81:3e:bb:8b:a6:66:eb:46:bf:95:
         c5:69:fb:00:bb:4d:d1:8b:2f:99:ea:91:1b:c6:51:dd:c1:ee:
         3c:92:ab:cb:e4:6a:29:d4:4a:3b:d4:36:7f:3c:86:88:12:5b:
         1d:ed:f7:7d:42:04:af:46:a0:4f:1d:3d:b9:42:0b:3e:17:49:
         b5:a1:be:b6:a1:3f:50:0c:4f:e7:73:46:9e:69:43:28:26:a4:
         11:2f:d6:24:17:e2:75:5a:92:b1:95:9a:77:fd:f3:0f:af:d3:
         d1:39:3d:d5:47:01:49:9c:15:21:38:51:67:bd:ab:e2:02:e0:
         5d:ab:96:3d:55:08:f4:c7:25:ca:b6:87:e2:a4:3c:3f:8a:c1:
         34:57:8f:10:00:f0:75:84:e9:78:7c:71:c8:72:c9:b3:8c:d6:
         a2:70:a1:be:ca:a2:df:06:45:52:37:f7:12:b3:d1:aa:d7:26:
         de:43:35:ca:bb:69:51:1f:6d:b0:0e:ad:4e:31:79:6d:85:ab:
         67:a0:62:08:19:f0:e4:5f:9e:f7:3f:1d:44:3a:fa:5d:cc:e9:
         f4:5f:a0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:25:09 2026 by rpki-client