Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/323830343a353838343a3a2f33322d3332203d3e20323638313334.roa
File:                     323830343a353838343a3a2f33322d3332203d3e20323638313334.roa (raw, json)
Hash identifier:          EnfydbQpZtggwwWmUhO5ChTerULDTHsruvhPe1PEppU=
Subject key identifier:   54:AE:2A:85:8C:1A:EE:EC:50:1D:E0:FF:7D:A9:61:56:A1:EB:F7:B3
Certificate issuer:       /CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
Certificate serial:       1435F53BCDB4F4AE53FD9D666E9260536AC6E5DE
Authority key identifier: F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/323830343a353838343a3a2f33322d3332203d3e20323638313334.roa
Signing time:             Thu 05 Feb 2026 14:48:51 +0000
ROA not before:           Thu 05 Feb 2026 14:43:51 +0000
ROA not after:            Thu 04 Feb 2027 14:48:51 +0000
asID:                     268134
IP address blocks:        2804:5884::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl
                          rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 15:21:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:35:f5:3b:cd:b4:f4:ae:53:fd:9d:66:6e:92:60:53:6a:c6:e5:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
        Validity
            Not Before: Feb  5 14:43:51 2026 GMT
            Not After : Feb  4 14:48:51 2027 GMT
        Subject: CN=54AE2A858C1AEEEC501DE0FF7DA96156A1EBF7B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bd:ed:93:c6:3a:58:8a:fc:ef:d1:2c:51:97:
                    f8:36:ac:6f:95:77:12:5a:c0:4f:ab:02:b4:d7:a3:
                    86:57:a3:8b:1d:ca:8e:cf:6e:59:78:29:48:f9:f1:
                    91:92:94:d4:e8:e5:fd:9c:54:3e:60:35:c1:f1:5b:
                    b8:ac:f3:ae:ad:03:69:33:f3:23:14:92:64:4e:7c:
                    51:20:54:e2:ca:47:40:7c:b6:70:d9:47:37:e2:45:
                    64:61:22:7a:4b:17:b2:45:b8:55:6a:43:9b:9e:2c:
                    a4:0c:c3:b4:00:2e:0e:b3:c4:89:a1:22:ab:2a:ca:
                    8b:48:77:77:37:6f:8c:0e:fc:8b:4b:61:3b:a4:60:
                    92:45:d4:48:a9:c8:e4:93:a0:2a:16:56:6e:85:c7:
                    ce:a8:cc:fc:0b:6d:40:17:25:05:77:5d:5c:b7:d3:
                    e3:8a:2d:21:3f:c6:d0:5f:5a:6d:f2:8a:6b:d0:e4:
                    26:3b:df:8f:8d:d4:77:5d:96:cc:1a:29:36:c6:5f:
                    26:f3:2a:17:3a:01:10:3e:d6:ce:6f:88:fd:9f:3e:
                    d3:c6:6e:f7:a8:e6:f5:47:77:95:38:23:66:9a:c5:
                    7f:7a:76:83:60:68:b1:57:0a:0e:74:0b:5e:d8:3a:
                    5e:62:e6:59:56:fe:ed:e5:b9:69:a5:1f:e7:62:6a:
                    77:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AE:2A:85:8C:1A:EE:EC:50:1D:E0:FF:7D:A9:61:56:A1:EB:F7:B3
            X509v3 Authority Key Identifier:
                keyid:F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/323830343a353838343a3a2f33322d3332203d3e20323638313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5884::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:a8:d1:6d:d1:bc:42:97:25:90:e2:ae:8c:bd:95:54:91:79:
         87:b9:72:39:f4:b7:ac:2b:57:8b:2d:ae:b2:a6:eb:38:b2:ae:
         33:a9:5d:4d:3c:8a:b0:86:88:28:a4:f0:ba:5b:46:8e:3d:bb:
         a3:20:bb:f5:b3:99:03:9f:61:14:93:a6:8e:e4:88:c8:3c:b8:
         d7:ad:da:a9:01:b3:b9:b1:22:0e:17:1f:96:40:6e:f4:e4:86:
         ef:e1:37:93:37:5e:90:ef:0d:37:17:f6:37:a1:6a:9b:13:05:
         d3:5d:8c:4d:92:40:80:ab:6c:37:54:55:0c:7c:3a:57:0a:27:
         6d:25:61:0a:ca:a7:08:da:36:4e:70:ea:98:ec:9c:71:7f:8b:
         8c:2e:2c:fd:7a:d6:94:1b:85:8e:94:2f:a4:66:69:11:29:f5:
         59:71:4f:e4:eb:17:a5:8a:9c:2a:87:4d:1f:e5:56:2e:96:65:
         42:ef:b7:79:e1:3f:00:38:9d:b8:fe:ae:67:23:cb:5f:87:18:
         f4:4f:aa:58:60:e9:8e:fc:5e:60:7f:c0:7e:25:e5:09:ae:07:
         8d:5f:f5:26:36:1c:33:78:81:1a:39:10:65:d2:53:8c:53:8f:
         d3:75:67:3b:46:ba:0f:80:4e:f6:2d:f4:2d:11:cb:12:d8:99:
         d1:37:92:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:59 2026 by rpki-client