Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/323830343a366165383a383030303a3a2f33342d3334203d3e20323730333635.roa
File:                     323830343a366165383a383030303a3a2f33342d3334203d3e20323730333635.roa (raw, json)
Hash identifier:          RdCRfbMNmXmFJ+De4gaY4MqCqKisdU+kjSUtD9abK34=
Subject key identifier:   5A:E9:F7:5D:E4:E7:AF:C8:D2:F0:9B:D7:7F:24:B6:E2:70:0F:A1:FE
Certificate issuer:       /CN=ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1
Certificate serial:       440CD54EA25A18E891B5AEE92B3423B76071E3C7
Authority key identifier: EC:BC:B7:D7:11:8D:E9:A8:EF:59:6B:31:7E:05:F1:AB:E3:64:66:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/323830343a366165383a383030303a3a2f33342d3334203d3e20323730333635.roa
Signing time:             Thu 05 Feb 2026 07:00:10 +0000
ROA not before:           Thu 05 Feb 2026 06:55:10 +0000
ROA not after:            Thu 04 Feb 2027 07:00:10 +0000
asID:                     270365
IP address blocks:        2804:6ae8:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.crl
                          rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:0c:d5:4e:a2:5a:18:e8:91:b5:ae:e9:2b:34:23:b7:60:71:e3:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1
        Validity
            Not Before: Feb  5 06:55:10 2026 GMT
            Not After : Feb  4 07:00:10 2027 GMT
        Subject: CN=5AE9F75DE4E7AFC8D2F09BD77F24B6E2700FA1FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:43:f9:6e:5c:17:9c:e8:29:e3:d6:62:57:74:
                    9e:b8:0d:12:db:67:7c:be:05:2d:50:93:d7:7b:ec:
                    fa:f2:40:97:65:72:0b:d9:3f:10:5f:68:40:0d:81:
                    d3:f9:96:88:a2:d0:a3:d1:9a:95:d5:d4:2e:f5:84:
                    37:a1:17:f9:48:22:b0:54:38:13:8c:80:05:b1:00:
                    72:51:c4:51:f6:ca:ff:b0:aa:81:20:91:14:65:a0:
                    f2:c9:3c:06:6c:64:f9:20:43:dd:fa:80:f2:d6:50:
                    4a:ac:df:d7:41:29:25:a1:03:f9:97:ea:0e:48:11:
                    87:a0:cb:a6:15:e2:77:19:86:a6:69:41:4a:65:86:
                    89:dd:92:ef:9d:e9:16:cd:5a:da:c2:3e:88:62:50:
                    b7:0d:ad:43:14:0c:93:1e:37:f0:38:2d:08:1a:1c:
                    d5:96:fb:b9:24:d0:a2:7d:7b:ab:95:f9:86:c8:0d:
                    f0:00:a1:85:47:25:a7:0f:4a:45:26:2a:bc:24:b2:
                    d8:30:1f:2c:f7:cb:88:36:65:f3:73:ee:b1:2f:ec:
                    36:27:f1:3b:3b:e9:39:da:dd:cc:be:09:59:52:0f:
                    e7:fd:2a:da:d8:76:a0:69:6d:e4:c6:ad:b1:32:b9:
                    47:8b:b9:8f:54:07:96:22:09:36:0d:db:c3:21:30:
                    f6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E9:F7:5D:E4:E7:AF:C8:D2:F0:9B:D7:7F:24:B6:E2:70:0F:A1:FE
            X509v3 Authority Key Identifier:
                keyid:EC:BC:B7:D7:11:8D:E9:A8:EF:59:6B:31:7E:05:F1:AB:E3:64:66:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/323830343a366165383a383030303a3a2f33342d3334203d3e20323730333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ae8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         78:24:c7:f5:69:21:58:30:0c:b6:f7:93:f2:fd:3a:96:3b:96:
         d1:a6:3d:fc:8c:0d:23:4f:97:43:63:f6:95:be:40:da:06:ec:
         27:74:68:a8:98:30:89:d2:75:65:af:53:80:4f:43:19:71:02:
         15:be:7a:6e:14:cf:41:3a:6b:bb:0c:9e:ee:cf:ab:6d:e4:7f:
         10:2b:5c:f6:32:2c:eb:22:2c:a9:50:a8:3a:fa:8b:fc:75:2f:
         4b:77:71:db:b1:c7:24:39:a4:7c:8c:e3:fe:fb:1d:82:d4:fc:
         6b:f9:64:e5:31:4e:c6:2c:f0:f1:f1:40:4f:8c:57:75:5a:b8:
         22:31:3a:7a:29:f5:3c:9f:c1:0e:6a:36:00:3f:b8:d1:84:c0:
         84:28:6b:74:9f:4b:f2:67:8d:53:e5:a4:5e:b2:33:8a:90:0c:
         f4:d8:61:5e:4d:d7:cc:23:65:bd:65:1e:88:78:e8:a5:59:13:
         bb:ed:18:b6:80:89:2d:30:08:71:23:22:bf:e0:da:ba:64:c9:
         d3:79:f3:4c:11:0a:81:2e:34:b7:dc:f7:da:d7:23:61:f0:47:
         8d:7d:82:37:44:bc:04:f8:8c:99:61:a3:2e:75:a6:b5:0e:13:
         f2:bb:63:be:47:3f:58:b4:c9:d8:95:c8:b4:b6:58:8d:73:d0:
         7d:b2:64:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:50:46 2026 by rpki-client