Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/323830343a353137303a3a2f33322d3336203d3e20323638343532.roa
File:                     323830343a353137303a3a2f33322d3336203d3e20323638343532.roa (raw, json)
Hash identifier:          xm6QS2tykS0HNopH4b1bku6DcYmJ8RbOFMzSXulztVI=
Subject key identifier:   02:D7:92:37:E0:8B:C7:4E:A8:1C:B1:72:2D:6C:AA:54:41:3D:DB:4C
Certificate issuer:       /CN=84398976322691988CABA640BBB2854AECDF6B87
Certificate serial:       7B6A2CAFD58A96DF2CAD0695D23E3DE6C4AA1919
Authority key identifier: 84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/323830343a353137303a3a2f33322d3336203d3e20323638343532.roa
Signing time:             Thu 05 Feb 2026 10:15:51 +0000
ROA not before:           Thu 05 Feb 2026 10:10:51 +0000
ROA not after:            Thu 04 Feb 2027 10:15:51 +0000
asID:                     268452
IP address blocks:        2804:5170::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl
                          rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:24:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:6a:2c:af:d5:8a:96:df:2c:ad:06:95:d2:3e:3d:e6:c4:aa:19:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84398976322691988CABA640BBB2854AECDF6B87
        Validity
            Not Before: Feb  5 10:10:51 2026 GMT
            Not After : Feb  4 10:15:51 2027 GMT
        Subject: CN=02D79237E08BC74EA81CB1722D6CAA54413DDB4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bc:36:cd:e2:ff:89:d8:a1:12:e3:40:ac:25:
                    7a:38:47:08:e2:26:7f:28:f5:54:3b:e4:88:10:f6:
                    5b:a1:40:55:ea:d6:47:8e:f0:29:92:0d:1a:c2:25:
                    6e:50:55:f1:80:d3:d3:bf:34:55:49:0b:00:47:13:
                    3d:ab:cb:71:43:e2:95:57:e8:86:5d:25:7c:76:f6:
                    01:13:c7:77:4d:1b:a3:47:ac:ee:21:bf:b0:d1:cd:
                    4d:ef:f2:5f:db:a5:ef:04:b4:a2:3d:fa:f6:a3:8a:
                    25:e3:bb:d9:c4:7f:f3:94:63:0e:75:75:20:77:75:
                    91:0d:57:4c:10:c5:d7:1b:48:55:ed:a9:73:3c:53:
                    6c:fc:93:fa:7f:33:7c:6d:c6:38:7c:1f:e2:24:de:
                    4b:92:8a:3c:00:56:49:12:b0:e3:c9:2b:32:59:60:
                    8e:35:6b:4e:34:55:1f:79:60:5d:55:4a:2e:64:01:
                    19:36:56:30:6d:46:27:1c:19:92:94:35:63:18:bc:
                    b0:a0:59:81:80:2b:1c:2f:74:12:f1:e9:4f:b7:2b:
                    6c:26:1f:7c:fd:db:11:e4:60:e8:d0:e3:81:14:8c:
                    f7:a2:ba:74:b1:b8:47:49:c3:74:4c:93:2a:c9:28:
                    14:c1:79:ca:e8:92:c9:41:03:48:35:05:a5:db:e1:
                    27:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D7:92:37:E0:8B:C7:4E:A8:1C:B1:72:2D:6C:AA:54:41:3D:DB:4C
            X509v3 Authority Key Identifier:
                keyid:84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/323830343a353137303a3a2f33322d3336203d3e20323638343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5170::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:d1:80:d3:f1:ef:ff:32:54:fc:53:91:73:e1:0c:10:44:02:
         51:30:53:8e:2c:f8:83:b9:33:ac:10:da:18:41:c2:35:bb:13:
         2f:bc:83:ae:0d:a8:71:c9:39:d7:25:36:1a:85:e2:c7:1b:f6:
         78:88:45:87:94:e9:d4:ad:c9:08:54:f4:9e:dd:57:4f:8e:b5:
         be:a7:f2:c2:88:c4:f8:5e:41:51:cf:af:9b:1b:84:0c:df:c4:
         10:1e:1a:3d:70:ba:33:f4:e0:fb:d1:f2:1f:82:45:bd:34:d9:
         8d:05:78:78:94:24:ff:39:d1:52:21:3a:6e:b1:54:e2:3d:3a:
         aa:c5:1c:82:c5:04:af:50:8f:fb:84:97:e9:a8:ae:04:07:07:
         1e:3d:2c:09:81:c2:a6:4c:69:e0:05:8d:65:92:31:3e:ee:3c:
         3f:fd:fd:b9:06:65:5a:09:a9:76:5e:41:cd:f2:08:bf:75:d2:
         51:6c:ba:c0:1a:08:3a:9b:94:96:3d:2a:05:72:34:f0:cd:14:
         37:e1:06:5a:96:13:e1:9c:c5:d4:9e:36:eb:2a:54:d4:96:63:
         01:2b:16:02:45:62:bc:3f:a5:2c:e7:2a:a4:1d:68:5c:0c:3c:
         92:99:d0:28:e9:6f:69:65:3a:14:c0:7e:a6:31:a7:b2:53:12:
         bf:66:55:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:30:23 2026 by rpki-client