Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/323830343a356463303a3a2f33322d3438203d3e203532393533.roa
File:                     323830343a356463303a3a2f33322d3438203d3e203532393533.roa (raw, json)
Hash identifier:          cbV0Ki+8icpihv7hlsS0dHlh4tAyL/ecv4cIpmlQ5QY=
Subject key identifier:   7B:06:FA:5C:A9:BE:6D:1E:AF:E9:BF:9B:F6:BC:A1:9B:F7:2B:4B:38
Certificate issuer:       /CN=136589E651A12B3538E17F7856FB523F01EC591F
Certificate serial:       142D79406915FDD605736FDE28ABC629ECA70AC9
Authority key identifier: 13:65:89:E6:51:A1:2B:35:38:E1:7F:78:56:FB:52:3F:01:EC:59:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/136589E651A12B3538E17F7856FB523F01EC591F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/323830343a356463303a3a2f33322d3438203d3e203532393533.roa
Signing time:             Wed 04 Feb 2026 22:48:04 +0000
ROA not before:           Wed 04 Feb 2026 22:43:04 +0000
ROA not after:            Wed 03 Feb 2027 22:48:04 +0000
asID:                     52953
IP address blocks:        2804:5dc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/136589E651A12B3538E17F7856FB523F01EC591F.crl
                          rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/136589E651A12B3538E17F7856FB523F01EC591F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/136589E651A12B3538E17F7856FB523F01EC591F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:58:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:2d:79:40:69:15:fd:d6:05:73:6f:de:28:ab:c6:29:ec:a7:0a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=136589E651A12B3538E17F7856FB523F01EC591F
        Validity
            Not Before: Feb  4 22:43:04 2026 GMT
            Not After : Feb  3 22:48:04 2027 GMT
        Subject: CN=7B06FA5CA9BE6D1EAFE9BF9BF6BCA19BF72B4B38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a1:c1:36:d0:04:2f:3c:f4:5f:f7:ef:bf:50:
                    4c:fb:58:9b:9d:bb:65:bd:45:a3:d9:06:38:e3:2a:
                    23:9f:85:fc:a5:35:0d:d7:b6:97:82:93:45:6a:f1:
                    9f:fc:28:53:94:d8:d4:f4:58:ef:60:70:4d:40:bb:
                    06:33:b3:d1:af:d7:8a:f2:97:f2:9f:a9:b2:c7:d6:
                    f3:0a:de:78:97:8b:04:03:45:bd:d7:7d:00:89:f5:
                    0f:95:a3:67:76:8d:5f:50:f6:df:b2:a9:54:80:a2:
                    bf:2f:f3:b9:45:1c:d1:ae:0c:f9:17:f7:9c:f2:a5:
                    28:e6:4d:47:e8:16:f0:b0:1f:7f:90:a8:b5:f8:7f:
                    b0:71:02:5a:4f:a5:8b:61:5a:5e:7a:3e:1f:e2:20:
                    6c:e8:52:aa:da:68:35:32:2f:63:a6:71:8f:b4:09:
                    5e:d9:c5:3a:d1:3e:f6:51:f9:d9:a6:aa:20:45:39:
                    2d:85:08:b8:32:ee:02:29:0c:c6:33:dc:31:3f:b3:
                    ad:52:90:0e:97:28:02:6a:8e:6d:c2:8d:ae:9d:2c:
                    d1:25:37:1d:36:d6:e5:21:3b:d8:f0:00:75:3a:3a:
                    5f:98:56:09:a8:91:db:f6:ca:96:9f:2f:0f:f5:4c:
                    25:8a:5f:7d:18:ea:7a:b8:07:0e:94:6c:8c:a5:97:
                    19:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:06:FA:5C:A9:BE:6D:1E:AF:E9:BF:9B:F6:BC:A1:9B:F7:2B:4B:38
            X509v3 Authority Key Identifier:
                keyid:13:65:89:E6:51:A1:2B:35:38:E1:7F:78:56:FB:52:3F:01:EC:59:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/136589E651A12B3538E17F7856FB523F01EC591F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/136589E651A12B3538E17F7856FB523F01EC591F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/1/323830343a356463303a3a2f33322d3438203d3e203532393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:06:ad:29:32:0f:09:0e:84:95:b3:c6:4c:ff:a2:57:58:f5:
         54:73:3c:bd:e1:5c:1b:f6:c9:4e:c5:6a:a8:c6:ac:f2:5e:f5:
         85:35:86:b0:39:97:50:9d:b7:c1:4d:93:1a:7b:70:63:4e:e4:
         0f:87:58:6f:6e:88:d4:9d:db:aa:97:5c:5c:c0:18:72:92:0b:
         30:09:da:7a:bf:42:bd:1f:fe:1c:fe:c1:01:1a:58:b5:2e:8a:
         b6:3a:b3:ac:1c:e0:86:e7:3d:4c:37:33:e3:6a:3f:27:6b:0e:
         d2:cb:18:2c:47:b5:01:a9:21:89:19:4a:36:ed:a3:1c:c7:67:
         4c:86:c4:02:2c:cc:0b:bf:d1:01:d5:d1:a2:a0:38:f8:a6:8b:
         5b:60:44:51:e8:8a:dc:c8:b5:7c:86:d8:75:fe:22:34:04:45:
         5e:09:ea:3d:43:80:ba:82:de:73:5f:fc:45:02:f3:5d:a8:45:
         8a:cf:44:b7:ae:f9:44:ce:53:34:ba:7a:35:85:2d:3a:00:b8:
         44:00:db:80:ee:1e:80:bd:60:28:76:6e:97:3a:51:4b:52:06:
         26:97:45:0c:41:0a:b8:66:b8:cc:8c:cb:5e:b7:28:16:65:60:
         b3:1e:15:21:f9:22:29:22:b0:31:1e:64:49:a8:ab:7b:0a:9f:
         02:6c:4e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:16:54 2026 by rpki-client