Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/323830343a386361633a323130303a3a2f34302d3430203d3e20323733383134.roa
File:                     323830343a386361633a323130303a3a2f34302d3430203d3e20323733383134.roa (raw, json)
Hash identifier:          Y5MW5hfaBwxJC8Jktl5lxSvjfyPQyrTkuMDVerfyECk=
Subject key identifier:   88:43:57:2E:38:53:0A:94:2F:4D:35:21:CE:9D:FA:19:CB:11:03:19
Certificate issuer:       /CN=3583862D781B71B103E9FA8D726C4D02380ACEE3
Certificate serial:       6F98CE26B64A20DB7A3951D5E4AAE59E6B68CD70
Authority key identifier: 35:83:86:2D:78:1B:71:B1:03:E9:FA:8D:72:6C:4D:02:38:0A:CE:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/323830343a386361633a323130303a3a2f34302d3430203d3e20323733383134.roa
Signing time:             Wed 04 Feb 2026 23:46:10 +0000
ROA not before:           Wed 04 Feb 2026 23:41:10 +0000
ROA not after:            Wed 03 Feb 2027 23:46:10 +0000
asID:                     273814
IP address blocks:        2804:8cac:2100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.crl
                          rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:98:ce:26:b6:4a:20:db:7a:39:51:d5:e4:aa:e5:9e:6b:68:cd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3583862D781B71B103E9FA8D726C4D02380ACEE3
        Validity
            Not Before: Feb  4 23:41:10 2026 GMT
            Not After : Feb  3 23:46:10 2027 GMT
        Subject: CN=8843572E38530A942F4D3521CE9DFA19CB110319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7e:c1:98:7e:28:96:93:72:15:45:12:15:ed:
                    6a:36:2b:3a:0b:98:9a:a3:4e:93:6f:e6:17:70:4a:
                    28:9a:9b:16:b7:dc:f0:fb:b8:6b:c5:72:a5:bf:8e:
                    68:2b:7c:bc:f2:49:40:0d:05:2b:b3:8b:b7:b8:9b:
                    3d:5c:c5:61:63:a0:71:84:db:b1:b8:87:cc:7d:3d:
                    5a:bb:9b:31:dd:01:b0:b1:7c:9f:20:b4:a0:ac:01:
                    bf:88:2b:81:ba:b6:bf:2a:26:5a:30:de:6d:ee:10:
                    8a:4c:86:db:b7:10:08:27:c5:a0:46:17:58:ca:2d:
                    d1:73:e7:85:b0:a9:0e:aa:2c:38:f5:1a:3d:cd:44:
                    57:ac:95:e7:55:31:96:90:39:d4:b4:94:4f:4b:0a:
                    2c:44:ac:76:9c:80:ad:13:95:1f:3f:cd:1e:dd:c0:
                    51:ad:4a:86:84:db:04:11:41:10:f3:d4:d9:c2:8f:
                    51:cc:fd:08:1b:d0:04:d3:63:75:a9:d6:d4:53:3a:
                    ec:4b:56:44:70:92:f5:76:64:00:02:ee:89:65:b4:
                    ae:8b:26:67:6d:64:8f:d1:f1:9e:fb:22:14:e9:06:
                    b4:b5:51:b9:60:78:14:f4:e0:94:30:aa:e3:bf:29:
                    21:19:22:59:5d:0e:ee:3d:3f:d3:96:1d:6c:6a:1d:
                    a0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:43:57:2E:38:53:0A:94:2F:4D:35:21:CE:9D:FA:19:CB:11:03:19
            X509v3 Authority Key Identifier:
                keyid:35:83:86:2D:78:1B:71:B1:03:E9:FA:8D:72:6C:4D:02:38:0A:CE:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/323830343a386361633a323130303a3a2f34302d3430203d3e20323733383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cac:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:da:35:5f:d3:83:ed:cf:4f:e4:49:c9:19:5e:0b:a8:7c:60:
         59:be:cd:a5:96:13:bd:e6:98:b6:0e:fd:63:11:f0:81:aa:f5:
         81:d4:df:c1:b2:e3:d5:02:7d:99:ce:a2:d9:f0:b9:6b:0d:d5:
         37:62:cf:a2:71:0f:c5:0e:06:ab:9e:c7:fe:35:87:d4:28:73:
         29:e7:82:0d:14:34:88:ce:e0:64:e2:14:bf:5b:fe:31:34:34:
         6f:0c:49:53:80:9b:d9:e1:46:11:9c:84:2d:fb:c5:18:45:61:
         86:79:03:68:fc:95:f7:36:a9:fd:5f:b3:5c:cf:37:cf:f0:94:
         68:f1:cd:e1:f8:de:c3:9c:e7:17:96:60:bc:78:b7:a9:81:31:
         f2:c1:e8:1f:4e:37:b8:f6:7f:ad:8d:2a:64:9c:3b:e3:03:78:
         7e:cb:7d:75:d6:59:aa:05:37:d6:58:0c:65:b7:f9:a7:84:4b:
         d4:ff:f7:f0:59:88:b2:3e:bd:6a:2a:6b:37:41:91:3d:96:bb:
         c1:8a:ad:f0:a7:a9:1a:07:15:52:5d:93:70:cd:72:3a:f9:f3:
         c8:55:cb:2c:bf:15:a7:ea:9f:60:00:fa:1a:d6:e5:b9:3f:b4:
         81:41:8d:23:e9:a6:c1:ef:37:30:59:cb:70:fe:4e:f8:33:17:
         83:d8:a4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:54:40 2026 by rpki-client