Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/323830343a343364383a3a2f33322d3438203d3e20323637353934.roa
File:                     323830343a343364383a3a2f33322d3438203d3e20323637353934.roa (raw, json)
Hash identifier:          2Z1xqRA5/M4WviSGPQIP408l+nlqkmT4+dptJixcM4o=
Subject key identifier:   4D:CB:0A:61:54:7B:30:B3:A7:3E:1D:27:6A:BF:9E:28:D0:21:B3:EB
Certificate issuer:       /CN=1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6
Certificate serial:       3821CB4749A5D16BC4186EBB9A2577FB93082B47
Authority key identifier: 1C:C1:EE:9A:E9:7E:45:FC:6B:92:8D:D7:2B:A1:6A:D8:B8:92:AD:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/323830343a343364383a3a2f33322d3438203d3e20323637353934.roa
Signing time:             Thu 05 Feb 2026 05:06:30 +0000
ROA not before:           Thu 05 Feb 2026 05:01:30 +0000
ROA not after:            Thu 04 Feb 2027 05:06:30 +0000
asID:                     267594
IP address blocks:        2804:43d8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.crl
                          rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:37:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:21:cb:47:49:a5:d1:6b:c4:18:6e:bb:9a:25:77:fb:93:08:2b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6
        Validity
            Not Before: Feb  5 05:01:30 2026 GMT
            Not After : Feb  4 05:06:30 2027 GMT
        Subject: CN=4DCB0A61547B30B3A73E1D276ABF9E28D021B3EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7a:7b:c7:2f:b7:25:f2:43:bb:80:40:03:4d:
                    7b:32:24:0e:57:df:9a:aa:38:40:09:db:0e:32:be:
                    d0:e6:29:2f:fa:64:aa:ff:43:42:e7:03:13:6b:be:
                    b4:ac:41:1e:61:27:29:91:74:2f:63:fa:0c:b5:b8:
                    7a:d8:84:0f:0e:3b:8f:6f:8c:57:a3:02:d0:dc:90:
                    2d:20:41:81:de:57:13:bf:d4:2f:08:c0:43:a2:71:
                    84:ec:24:91:4d:8f:b4:85:b4:61:a2:5f:68:96:95:
                    51:16:d0:ca:ba:74:9f:bc:e2:d2:0d:fb:96:2a:15:
                    4e:7b:b3:a5:68:f9:48:7f:91:22:58:50:9f:47:b0:
                    c9:f5:5a:6d:41:f6:cf:61:ff:5b:21:7f:d0:f7:cf:
                    9d:ca:b3:6c:e9:00:42:06:54:64:42:9e:0c:d7:0d:
                    68:80:56:92:37:b8:96:69:c4:3a:2e:12:5c:de:e6:
                    c1:8f:cc:9f:8a:0a:46:d4:cd:a0:fd:95:5d:dd:fe:
                    9b:38:a4:31:9c:52:d2:b5:67:80:15:e5:61:5c:c4:
                    a1:fe:a6:9e:d2:cc:09:3b:4b:95:10:5a:61:ee:09:
                    21:f0:78:13:6d:8c:37:ad:8c:6f:46:82:52:e7:8b:
                    38:95:b8:3c:27:c7:a0:97:fc:62:87:4a:17:40:15:
                    77:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CB:0A:61:54:7B:30:B3:A7:3E:1D:27:6A:BF:9E:28:D0:21:B3:EB
            X509v3 Authority Key Identifier:
                keyid:1C:C1:EE:9A:E9:7E:45:FC:6B:92:8D:D7:2B:A1:6A:D8:B8:92:AD:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/323830343a343364383a3a2f33322d3438203d3e20323637353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:47:1e:2d:5b:72:ff:22:84:c8:19:3a:76:bc:1f:15:88:45:
         e8:64:89:49:34:68:55:a9:bf:9a:be:a5:ef:92:fe:ec:ba:9a:
         4e:62:18:84:1a:96:e9:f5:a2:a3:69:26:d4:e7:c4:83:38:d1:
         9c:15:ba:36:b6:f2:2e:ea:ea:56:e7:db:d0:bb:41:46:c5:85:
         7d:20:a9:1e:bd:12:04:e5:ec:d5:7a:5d:06:b7:bc:5f:f1:a6:
         9b:67:f1:8b:63:58:c3:b0:a5:f2:a5:0b:79:33:1e:98:1c:5f:
         51:9f:81:a9:ce:fa:e4:e3:07:d3:68:3c:f9:cf:bf:c9:51:67:
         51:19:f3:d3:93:92:da:06:af:63:5a:15:19:87:76:02:c4:82:
         e6:21:ae:e5:34:36:45:ea:2d:e3:6d:1a:36:dd:89:3e:9b:e1:
         fe:65:56:2d:6e:c9:7a:bb:92:34:eb:e5:89:44:5a:23:77:5c:
         78:9d:89:f7:67:32:5a:5b:7b:a9:87:d5:8f:22:c1:51:58:2d:
         3b:47:59:00:b9:a5:ba:39:ed:31:0f:32:30:84:8f:f3:fa:f0:
         96:a6:e6:64:90:8a:57:28:87:d2:f7:d2:5d:44:d5:23:6d:63:
         f9:8f:97:68:75:95:ca:8e:18:40:18:1b:aa:3d:9d:39:73:2f:
         86:0b:ad:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:41:06 2026 by rpki-client