Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/323830343a3639303a3a2f33322d3430203d3e20323632353935.roa
File:                     323830343a3639303a3a2f33322d3430203d3e20323632353935.roa (raw, json)
Hash identifier:          XNmpKrhIioidYT0WbDSH+38y4AsFqdpVex8l5oWEx4s=
Subject key identifier:   27:B0:B1:50:F3:81:1C:34:5D:A1:F4:8A:DC:94:21:CF:AC:E3:3E:2B
Certificate issuer:       /CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
Certificate serial:       A5E155A12C6457AE9DDCEB63C995EA0FDACE60
Authority key identifier: 43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/323830343a3639303a3a2f33322d3430203d3e20323632353935.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     262595
IP address blocks:        2804:690::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl
                          rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a5:e1:55:a1:2c:64:57:ae:9d:dc:eb:63:c9:95:ea:0f:da:ce:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject: CN=27B0B150F3811C345DA1F48ADC9421CFACE33E2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a6:4e:58:c4:98:a7:19:74:3b:d7:36:99:60:
                    c7:16:55:0a:03:70:9b:46:ac:b5:58:82:37:77:3c:
                    d2:64:7a:e0:95:72:69:8f:0a:ac:ef:81:8a:2a:47:
                    e4:ff:b6:98:c6:26:29:b6:e1:76:3c:fb:07:0b:e4:
                    38:ff:f2:6c:83:11:9c:42:96:75:2b:af:e1:ac:11:
                    c0:43:b6:b7:89:7e:ea:e8:13:43:ad:54:73:88:0b:
                    07:b3:b7:6b:53:6b:a0:1f:21:6f:31:f9:37:ef:63:
                    b4:30:95:da:8a:dd:38:6b:56:c0:79:5c:3b:d3:16:
                    c5:7a:99:9f:0b:3a:04:ea:d3:34:da:c5:2e:60:ec:
                    35:87:91:51:d5:c3:7d:2e:46:71:90:ae:6e:46:f2:
                    5c:41:83:83:1d:53:84:35:af:5c:4a:8f:4e:7d:24:
                    35:32:73:5a:09:f4:60:a6:ca:e1:6b:2e:a8:e1:64:
                    11:12:a3:56:89:04:e6:a5:80:8c:83:60:ec:52:86:
                    c3:61:50:d1:59:75:db:1e:ea:f5:1c:f1:92:b9:dc:
                    cf:41:0c:e6:9a:75:89:79:a8:29:73:6b:72:48:1f:
                    50:12:a0:63:c8:2d:97:05:6b:6c:98:2f:43:59:58:
                    c8:d6:50:ba:cc:64:6b:1c:91:4f:7a:f4:12:1d:c9:
                    68:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B0:B1:50:F3:81:1C:34:5D:A1:F4:8A:DC:94:21:CF:AC:E3:3E:2B
            X509v3 Authority Key Identifier:
                keyid:43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/323830343a3639303a3a2f33322d3430203d3e20323632353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:690::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:ef:cf:d0:ec:08:d0:a1:f9:0b:ac:0b:53:ca:eb:51:86:b7:
         e1:a1:93:2a:09:df:d0:6b:e8:f7:cf:59:d5:99:9b:64:86:6a:
         1e:e6:b6:8c:87:b8:e4:fa:d7:7b:6e:fb:f1:c8:f1:04:69:fb:
         71:71:27:4b:6e:6a:d3:e3:3d:af:e9:e3:75:c9:59:3f:b1:90:
         23:4d:8a:90:8f:f2:f5:a8:9f:73:16:65:06:88:4d:09:b8:55:
         79:a8:1c:ae:34:e5:a7:0f:41:b1:b1:b1:89:4e:5b:63:33:d0:
         03:a3:af:d1:88:1d:2f:c1:ef:ff:02:e3:0f:97:4d:63:6c:4b:
         6f:d2:0f:84:d6:52:b9:fc:4f:1f:7e:e0:86:9b:59:c6:b5:81:
         12:e1:fa:7a:e1:b5:e4:c9:5a:a6:dd:19:a7:ec:65:83:a0:ac:
         f8:96:d6:1d:dd:15:5d:0a:7a:44:4e:8a:a6:e2:0b:b6:70:f3:
         ad:15:8f:6b:de:af:ff:ac:21:ef:86:d3:15:56:fe:3c:23:8f:
         74:38:99:69:40:47:83:c7:a2:d6:44:52:df:71:a9:cd:b1:db:
         30:81:ea:c3:d6:27:38:3b:71:3e:3b:8a:ec:8a:02:a9:3b:5e:
         92:87:43:04:29:00:2b:44:11:e9:ff:dd:2f:c8:36:4d:cd:65:
         c1:b3:ae:9c
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUAKXhVaEsZFeundzrY8mV6g/azmAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDM3MTAwN0IzQjc3NzFDNkNGNEZCRTRBNzFCM0I5NDZC
ODQxQUQ2MzAeFw0yNjAyMDQxOTU1MDBaFw0yNzAyMDMyMDAwMDBaMDMxMTAvBgNV
BAMTKDI3QjBCMTUwRjM4MTFDMzQ1REExRjQ4QURDOTQyMUNGQUNFMzNFMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/pk5YxJinGXQ71zaZYMcWVQoD
cJtGrLVYgjd3PNJkeuCVcmmPCqzvgYoqR+T/tpjGJim24XY8+wcL5Dj/8myDEZxC
lnUrr+GsEcBDtreJfuroE0OtVHOICwezt2tTa6AfIW8x+TfvY7QwldqK3ThrVsB5
XDvTFsV6mZ8LOgTq0zTaxS5g7DWHkVHVw30uRnGQrm5G8lxBg4MdU4Q1r1xKj059
JDUyc1oJ9GCmyuFrLqjhZBESo1aJBOalgIyDYOxShsNhUNFZddse6vUc8ZK53M9B
DOaadYl5qClza3JIH1ASoGPILZcFa2yYL0NZWMjWULrMZGsckU969BIdyWjxAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUJ7CxUPOBHDRdofSK3JQhz6zjPiswHwYDVR0j
BBgwFoAUQ3EAezt3ccbPT75KcbO5RrhBrWMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGVEY25nV1hudXF4R0s2b2ZVOVQxVjc1TnRvZERKckFFaE1EY1ZyemNo
NWcvMS80MzcxMDA3QjNCNzc3MUM2Q0Y0RkJFNEE3MUIzQjk0NkI4NDFBRDYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNzEwMDdCM0I3NzcxQzZD
RjRGQkU0QTcxQjNCOTQ2Qjg0MUFENjMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RlRGNuZ1dYbnVxeEdLNm9mVTlUMVY3NU50b2RESnJBRWhNRGNWcnpjaDVnLzEv
MzIzODMwMzQzYTM2MzkzMDNhM2EyZjMzMzIyZDM0MzAyMDNkM2UyMDMyMzYzMjM1
MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEBpAwDQYJKoZIhvcNAQELBQADggEBAMXvz9DsCNCh
+QusC1PK61GGt+GhkyoJ39Br6PfPWdWZm2SGah7mtoyHuOT613tu+/HI8QRp+3Fx
J0tuatPjPa/p43XJWT+xkCNNipCP8vWon3MWZQaITQm4VXmoHK405acPQbGxsYlO
W2Mz0AOjr9GIHS/B7/8C4w+XTWNsS2/SD4TWUrn8Tx9+4IabWca1gRLh+nrhteTJ
WqbdGafsZYOgrPiW1h3dFV0KekROiqbiC7Zw860Vj2ver/+sIe+G0xVW/jwjj3Q4
mWlAR4PHotZEUt9xqc2x2zCB6sPWJzg7cT47iuyKAqk7XpKHQwQpACtEEen/3S/I
Nk3NZcGzrpw=
-----END CERTIFICATE-----
Generated at Thu Feb 19 08:52:13 2026 by rpki-client