Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/323830343a386361633a3a2f33322d3332203d3e20323733383134.roa
File:                     323830343a386361633a3a2f33322d3332203d3e20323733383134.roa (raw, json)
Hash identifier:          psf+bNtQb91sHtPztZcHB6zmNIGtZfzYbRZHbps6aF8=
Subject key identifier:   36:C1:C3:B3:CA:93:91:45:DF:82:31:3B:40:02:06:CD:6C:DC:A8:E7
Certificate issuer:       /CN=3583862D781B71B103E9FA8D726C4D02380ACEE3
Certificate serial:       5FB05A1901E1B0691A316A3FE5DF4D5E960EB166
Authority key identifier: 35:83:86:2D:78:1B:71:B1:03:E9:FA:8D:72:6C:4D:02:38:0A:CE:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/323830343a386361633a3a2f33322d3332203d3e20323733383134.roa
Signing time:             Wed 04 Feb 2026 23:46:10 +0000
ROA not before:           Wed 04 Feb 2026 23:41:10 +0000
ROA not after:            Wed 03 Feb 2027 23:46:10 +0000
asID:                     273814
IP address blocks:        2804:8cac::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.crl
                          rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b0:5a:19:01:e1:b0:69:1a:31:6a:3f:e5:df:4d:5e:96:0e:b1:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3583862D781B71B103E9FA8D726C4D02380ACEE3
        Validity
            Not Before: Feb  4 23:41:10 2026 GMT
            Not After : Feb  3 23:46:10 2027 GMT
        Subject: CN=36C1C3B3CA939145DF82313B400206CD6CDCA8E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0f:22:34:f8:06:2b:93:e6:f1:d4:8e:37:1d:
                    e4:b0:ee:90:2c:80:ea:e5:f7:67:b6:16:f5:16:67:
                    b4:2d:67:cf:51:a2:49:49:a0:ff:a3:8c:12:78:33:
                    32:cf:cd:67:27:4a:62:8a:3f:af:08:ce:4b:62:21:
                    01:a3:b2:87:a3:0b:9e:b9:1c:fd:5f:c4:91:0a:ab:
                    6c:65:86:74:71:b4:a4:3b:ac:d8:d2:00:59:e7:93:
                    e1:10:63:53:ca:e3:d3:2e:bf:16:11:dd:c0:29:66:
                    d4:76:ff:43:b6:b8:90:28:6a:9c:93:fc:9e:64:d9:
                    d3:05:21:33:ba:10:ae:f2:97:6d:3e:e2:40:5e:78:
                    c9:94:2a:08:fd:d3:2b:77:f7:19:c4:81:b1:4b:41:
                    1e:3c:6e:c2:fe:55:d2:56:88:8b:d9:5c:2e:5c:16:
                    bf:24:3a:1d:8c:4c:4b:d5:fd:21:96:6c:ee:b1:00:
                    de:a1:c4:74:81:90:2a:7d:76:88:fb:ff:17:ef:1b:
                    80:c8:65:9e:9d:77:88:c8:30:cb:c4:c6:c4:06:33:
                    2c:84:16:78:93:91:a7:27:83:5d:b5:77:8b:27:0c:
                    bb:0e:a7:3c:53:f9:88:4e:3a:11:9e:21:c1:8e:6e:
                    4a:b0:23:55:95:a7:b9:f3:5d:de:ef:5d:38:cc:72:
                    52:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C1:C3:B3:CA:93:91:45:DF:82:31:3B:40:02:06:CD:6C:DC:A8:E7
            X509v3 Authority Key Identifier:
                keyid:35:83:86:2D:78:1B:71:B1:03:E9:FA:8D:72:6C:4D:02:38:0A:CE:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/323830343a386361633a3a2f33322d3332203d3e20323733383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cac::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:f6:85:b2:ef:77:93:0a:43:ee:1f:89:3d:f3:76:f5:01:4d:
         f8:68:64:4b:e7:07:6f:67:e8:ea:d6:72:d1:18:df:d9:27:8d:
         4c:4a:92:40:41:ff:8f:a6:3f:1c:73:57:c2:ec:01:9a:3b:05:
         ba:f4:ed:fb:d9:58:ab:48:12:b4:39:16:5e:d6:b0:31:e4:e2:
         93:87:91:51:1d:f1:6f:1f:7d:9a:37:05:ec:94:09:f5:a6:72:
         40:e7:5b:10:08:d9:b2:64:f7:bf:47:c0:7e:0f:3d:d2:fe:6e:
         27:40:f7:34:6f:30:2a:9d:29:dc:4e:5b:b5:36:a2:98:6a:d8:
         72:a4:d1:8c:3e:c3:bf:ed:43:0d:94:bb:51:ff:28:9d:8b:ca:
         84:e9:60:a9:e6:bc:c6:5b:34:78:dc:f6:3c:e2:43:b5:dd:a3:
         c6:fc:a4:e9:d3:57:41:13:cf:cc:55:76:99:13:04:76:a1:bf:
         b0:52:0f:e7:f0:e0:2d:b3:ae:1a:05:33:ae:ae:21:1c:41:10:
         13:74:20:a6:d0:bf:bb:eb:18:01:49:17:94:13:8a:54:4a:d1:
         d0:db:71:7a:4a:1c:ea:84:ce:14:f2:cf:61:67:d0:03:d4:cd:
         36:79:33:20:68:f1:9e:c3:a8:27:ac:22:0d:29:cb:2c:3e:09:
         91:1e:d2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:54:36 2026 by rpki-client