Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/323830343a336539343a3a2f33332d3338203d3e20323636363037.roa
File:                     323830343a336539343a3a2f33332d3338203d3e20323636363037.roa (raw, json)
Hash identifier:          pu+XiiWiYK8+X99mlzXSYtWevrwM+YAX7huV75bz+vE=
Subject key identifier:   D3:E2:71:94:A9:6C:7E:30:B0:20:90:24:FF:58:BD:C8:3F:4B:F3:E7
Certificate issuer:       /CN=512D0D56D1561B4AFE3C13FF6432B23FB5B38C51
Certificate serial:       472AC6C4B8468753FFBF663A46AB043FC47B73B5
Authority key identifier: 51:2D:0D:56:D1:56:1B:4A:FE:3C:13:FF:64:32:B2:3F:B5:B3:8C:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/323830343a336539343a3a2f33332d3338203d3e20323636363037.roa
Signing time:             Wed 04 Feb 2026 22:12:48 +0000
ROA not before:           Wed 04 Feb 2026 22:07:48 +0000
ROA not after:            Wed 03 Feb 2027 22:12:48 +0000
asID:                     266607
IP address blocks:        2804:3e94::/33 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.crl
                          rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 09:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:2a:c6:c4:b8:46:87:53:ff:bf:66:3a:46:ab:04:3f:c4:7b:73:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512D0D56D1561B4AFE3C13FF6432B23FB5B38C51
        Validity
            Not Before: Feb  4 22:07:48 2026 GMT
            Not After : Feb  3 22:12:48 2027 GMT
        Subject: CN=D3E27194A96C7E30B0209024FF58BDC83F4BF3E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:51:30:57:06:46:ff:fe:39:c9:8d:26:b6:78:
                    48:35:3c:dc:36:a3:2c:6c:b8:20:2e:ad:48:eb:04:
                    e7:cc:e1:98:ea:83:e8:1d:e7:f1:76:7b:62:13:5c:
                    1f:7f:3a:55:64:c0:b8:73:46:bf:47:49:a6:61:3e:
                    99:d4:26:4a:74:4a:34:97:e9:1b:54:1c:8d:96:ba:
                    4e:1c:57:f5:35:23:9a:be:de:f8:ec:a9:6f:a4:8b:
                    b3:f9:6a:6c:6d:2c:1f:a3:f7:11:7e:bb:cc:8e:f5:
                    22:5c:7d:9a:ce:2d:38:ba:d5:d5:86:5e:84:7a:1e:
                    31:62:0d:88:19:73:b1:8b:64:a1:9e:7f:13:c1:0e:
                    3e:7a:5b:f8:54:28:0d:03:7f:29:38:e2:b6:c5:73:
                    23:a4:44:ec:e1:24:d5:99:62:fb:f5:99:64:71:d2:
                    92:87:13:9a:63:fb:a4:29:f8:71:06:36:15:9b:fd:
                    c4:e8:53:c0:90:7a:c2:86:a5:45:dc:2e:7e:9f:ad:
                    ca:67:fc:7c:20:e5:0f:f8:49:f9:04:8e:00:07:92:
                    03:eb:20:44:f4:a0:9a:86:e9:27:d5:03:57:74:67:
                    ed:ff:b8:81:f5:d6:64:61:5c:6e:fc:28:b2:c3:00:
                    d4:ce:0e:bb:d7:f2:a3:9a:73:38:ea:15:26:36:60:
                    6b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E2:71:94:A9:6C:7E:30:B0:20:90:24:FF:58:BD:C8:3F:4B:F3:E7
            X509v3 Authority Key Identifier:
                keyid:51:2D:0D:56:D1:56:1B:4A:FE:3C:13:FF:64:32:B2:3F:B5:B3:8C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/323830343a336539343a3a2f33332d3338203d3e20323636363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e94::/33

    Signature Algorithm: sha256WithRSAEncryption
         41:b3:3f:84:cb:0d:f2:c9:ef:53:a9:a1:8c:d3:96:c3:43:05:
         83:8d:b9:6d:a6:2f:50:56:56:f6:69:8e:de:a1:61:86:56:1b:
         84:f4:04:64:a8:2d:f3:94:db:52:41:39:34:62:18:66:67:98:
         f6:03:6e:be:ee:a1:1d:68:14:7a:67:79:17:4e:ba:a7:66:bf:
         7b:ab:bb:a0:84:8e:32:ba:aa:73:7a:a8:32:27:6d:a5:7a:45:
         87:2a:07:c4:56:36:8e:a3:71:9c:7d:3b:dd:01:4b:31:33:c1:
         03:b3:44:75:dc:81:3d:b7:40:aa:ec:74:5b:cb:91:6b:54:08:
         c1:4e:4e:58:78:6b:48:54:e2:20:77:8b:9f:cf:30:70:d5:df:
         09:13:77:44:26:a1:24:5d:c4:7d:c6:fe:e3:bf:2b:66:ad:4b:
         6b:3b:21:4f:60:ec:0c:37:1c:64:58:c9:fd:55:fb:ca:72:06:
         6c:08:f1:25:c7:80:8e:e4:06:dc:96:b7:b9:e2:e9:b1:88:cf:
         d3:c9:f9:44:d7:d4:16:ad:c2:48:31:3a:c7:16:9b:b0:99:09:
         7a:82:4a:d4:19:3a:eb:ba:df:b8:c8:10:ff:b8:50:5e:5a:2d:
         ad:0a:73:b3:1d:a6:3a:58:73:b5:b1:cb:bd:9e:75:12:ca:a2:
         f8:ee:02:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:00:59 2026 by rpki-client