Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3a2f33322d3438203d3e20323730373635.roa
File:                     323830343a373131343a3a2f33322d3438203d3e20323730373635.roa (raw, json)
Hash identifier:          9gqVlfH9erQ3dmW3SDpzEO0X4Din/Fap5U9KQ2YyLpY=
Subject key identifier:   B6:9D:E1:B0:14:C3:D2:A0:30:CA:8D:B5:05:F6:60:77:25:F7:0D:80
Certificate issuer:       /CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
Certificate serial:       6C17628EC8BA79627121CE3880933421DDC56139
Authority key identifier: 4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3a2f33322d3438203d3e20323730373635.roa
Signing time:             Fri 06 Feb 2026 20:00:01 +0000
ROA not before:           Fri 06 Feb 2026 19:55:01 +0000
ROA not after:            Sat 06 Feb 2027 20:00:01 +0000
asID:                     270765
IP address blocks:        2804:7114::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl
                          rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:17:62:8e:c8:ba:79:62:71:21:ce:38:80:93:34:21:dd:c5:61:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
        Validity
            Not Before: Feb  6 19:55:01 2026 GMT
            Not After : Feb  6 20:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:09:4e:5b:00:eb:2c:8d:18:8e:49:1d:f0:e1:
                    8a:e7:4e:a3:ad:26:bf:15:ac:d6:1f:e6:7c:a8:13:
                    4f:c2:5c:46:ba:ae:da:bd:83:95:f3:31:3f:73:e6:
                    41:ca:82:ab:c9:e6:30:ba:c9:e2:d9:66:61:04:43:
                    b8:20:49:42:f2:d7:5a:72:0b:09:57:1a:a0:fb:2e:
                    60:ef:b6:93:1d:42:95:0c:6a:21:10:21:a1:8b:97:
                    08:5d:0d:7e:5b:69:65:79:be:6a:30:38:ad:71:d1:
                    14:d3:46:3c:25:1f:f8:19:b3:5f:7e:7e:1a:bc:76:
                    90:50:0b:d3:08:f8:43:0e:93:3c:0c:0a:78:f1:bf:
                    38:88:19:5e:7a:4c:06:f9:1d:ae:8c:c7:29:7f:71:
                    39:68:56:fb:a7:d9:03:cc:4b:2d:8e:a3:c5:f2:c8:
                    30:56:81:31:2e:f6:ba:a8:b9:61:7d:a5:68:5b:22:
                    48:6c:e4:5a:7d:ea:ac:07:fd:30:65:62:86:29:a9:
                    53:cb:66:a3:55:7b:95:d7:83:90:55:bd:0e:43:ca:
                    55:ee:9f:33:41:75:50:0b:df:fb:ee:70:07:ed:60:
                    41:25:d4:62:93:8c:8d:24:3a:c7:ef:ba:bd:60:fa:
                    5a:4d:2f:b5:95:d7:8f:19:69:c0:5e:e7:bf:63:71:
                    94:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9D:E1:B0:14:C3:D2:A0:30:CA:8D:B5:05:F6:60:77:25:F7:0D:80
            X509v3 Authority Key Identifier:
                keyid:4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3a2f33322d3438203d3e20323730373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7114::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:84:0f:cc:9f:12:06:af:18:eb:2c:20:dd:4d:1a:35:ec:ac:
         70:61:35:11:34:48:36:e8:7e:b9:a9:63:4b:5e:45:af:ba:67:
         2b:09:8b:df:33:b4:0f:94:f2:cc:03:29:10:91:80:b3:ea:3a:
         b7:bb:25:cc:f2:83:44:17:22:48:6d:f7:17:a9:22:1d:59:35:
         1c:65:98:0a:58:4b:68:07:d3:ca:ad:66:bc:d7:36:87:47:b9:
         24:e6:d5:48:9e:ee:12:18:12:f7:6c:a5:ce:15:89:1a:f4:04:
         d6:48:46:e4:a9:c2:b5:8f:9a:15:3d:f2:ac:81:de:66:59:1b:
         57:11:7d:5e:ec:78:ed:48:a1:9d:bd:c2:59:79:e6:7f:c9:7d:
         ea:c4:b3:dc:5d:55:e1:7d:6d:92:64:c7:34:ce:44:f6:f3:73:
         ad:b5:d7:c9:02:59:81:a3:62:a5:2d:5b:fb:2f:85:e5:e5:d9:
         13:df:90:b8:86:76:d4:5c:76:53:e2:da:7c:17:46:1c:f0:e4:
         66:ea:ca:06:c5:c4:ac:51:a1:b6:5f:6f:9f:a6:2d:59:33:4a:
         c8:5b:71:71:2d:d9:55:f3:3b:df:b0:94:71:e9:e5:04:64:8f:
         d4:a1:5c:dc:18:26:42:66:4f:73:e7:4b:07:b6:04:57:28:21:
         72:98:10:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:58 2026 by rpki-client