Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/323830343a66633a3a2f33322d3434203d3e203238313432.roa
File:                     323830343a66633a3a2f33322d3434203d3e203238313432.roa (raw, json)
Hash identifier:          gxGUwYInU/cXPo6FO0uyxM7uQv7CVsTZQeYEamU41Ag=
Subject key identifier:   FB:5D:5E:9D:83:5A:D8:14:F9:A4:CD:61:0D:12:79:1B:67:EA:F6:27
Certificate issuer:       /CN=9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A
Certificate serial:       3FC706790D72724AAB292143D398838E70E4A15D
Authority key identifier: 9C:E8:F2:4E:E4:AE:8A:06:DA:EC:AD:7A:04:94:6B:88:E6:A9:14:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/323830343a66633a3a2f33322d3434203d3e203238313432.roa
Signing time:             Mon 22 Dec 2025 17:54:06 +0000
ROA not before:           Mon 22 Dec 2025 17:49:06 +0000
ROA not after:            Mon 21 Dec 2026 17:54:06 +0000
asID:                     28142
IP address blocks:        2804:fc::/32 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A.crl
                          rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c7:06:79:0d:72:72:4a:ab:29:21:43:d3:98:83:8e:70:e4:a1:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A
        Validity
            Not Before: Dec 22 17:49:06 2025 GMT
            Not After : Dec 21 17:54:06 2026 GMT
        Subject: CN=FB5D5E9D835AD814F9A4CD610D12791B67EAF627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ce:d7:71:bd:9d:35:9b:49:37:32:0a:06:54:
                    80:ab:4e:90:9a:80:36:4a:51:4e:ac:9f:71:98:6a:
                    0a:12:22:8d:3b:a6:1c:c6:a4:f4:30:3f:0a:5f:8d:
                    8c:38:48:5f:36:b2:6b:e8:89:91:89:6c:ca:c8:44:
                    8b:08:29:4d:50:3d:e6:2e:1f:65:60:32:0d:f0:59:
                    5e:62:fa:f1:4f:ac:11:55:c2:e1:99:e4:18:37:ff:
                    46:3a:91:22:ae:f6:1d:5d:9b:cb:78:10:0e:f0:6e:
                    b3:48:96:1e:86:7b:dc:fc:57:8a:1e:32:51:93:47:
                    87:da:d6:d5:a1:52:81:18:88:4f:10:d2:5c:08:d8:
                    09:60:4c:4d:4f:36:4b:ad:4a:e9:7d:06:a6:57:6f:
                    7f:17:4d:3e:49:9e:07:fb:41:bf:92:f4:ca:fa:10:
                    00:c3:43:c2:62:97:1f:05:f6:32:42:d9:38:5f:2e:
                    4e:56:37:d5:a4:4c:b6:52:73:c7:ef:a7:2d:93:08:
                    0c:7e:d3:52:d8:d8:2a:e2:4b:71:51:d3:84:67:24:
                    d2:70:cc:f6:a2:89:9e:e0:0a:8b:70:c8:0c:5f:f9:
                    5e:94:c4:f1:4a:30:50:fe:8e:3a:0a:d8:8f:7f:1c:
                    30:9e:c4:06:1e:a2:b5:40:6b:42:45:07:b2:f5:44:
                    a6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5D:5E:9D:83:5A:D8:14:F9:A4:CD:61:0D:12:79:1B:67:EA:F6:27
            X509v3 Authority Key Identifier:
                keyid:9C:E8:F2:4E:E4:AE:8A:06:DA:EC:AD:7A:04:94:6B:88:E6:A9:14:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/323830343a66633a3a2f33322d3434203d3e203238313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:5c:3d:1b:57:ea:bb:f5:3d:98:a6:0e:1e:1d:97:5d:bb:42:
         3d:28:a9:38:30:bd:05:07:42:7a:72:88:8b:ec:35:2f:c0:2e:
         cb:d3:92:13:21:63:2b:c9:e4:04:c1:34:a5:43:9c:71:4a:c4:
         95:11:8a:22:15:98:4d:9c:a9:c3:f1:82:c3:f9:83:c3:cc:4d:
         4a:fe:1b:d6:27:94:c9:a1:6f:fc:41:ab:1b:d0:cf:0e:06:be:
         d3:ee:16:5a:47:3a:b7:a1:9c:52:d5:bc:dc:49:b4:ca:13:ca:
         c0:c7:15:f9:bc:d5:e5:71:bf:8d:dc:db:32:59:a2:90:14:8e:
         49:b6:f2:a4:e2:88:be:17:d9:6e:cc:a2:f2:6b:60:cf:60:d0:
         cf:e1:ae:c9:cc:32:6d:64:80:4a:90:99:7e:46:3a:7b:32:5b:
         a7:c8:85:52:70:ce:4d:28:b9:01:28:6e:3b:7f:78:a6:57:5d:
         e0:73:cb:88:c7:f8:41:cb:00:0e:7a:26:e0:fc:ae:f8:27:be:
         3a:d7:a5:e3:51:c8:a0:54:7f:f6:74:be:cb:9d:31:89:4e:28:
         8d:b4:6d:f4:f2:69:1b:89:68:f1:59:a2:68:0a:ae:5d:9c:66:
         00:8a:e7:9a:b7:73:bb:07:25:55:80:03:45:a7:6c:03:d9:cc:
         1c:a1:1f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 13:00:18 2026 by rpki-client