Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/323830343a6233383a3a2f33322d3438203d3e203532373538.roa
File:                     323830343a6233383a3a2f33322d3438203d3e203532373538.roa (raw, json)
Hash identifier:          5ux5lJYOAffCUYLuzLPKeFelIBPDTsJt3VAxhm2Xzv8=
Subject key identifier:   14:B1:26:AA:04:9F:42:FA:F4:5F:09:43:A2:DE:F2:7B:01:F4:86:B0
Certificate issuer:       /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial:       25D78BD54B854378911A9ADB78FD95B2A7F4907A
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/323830343a6233383a3a2f33322d3438203d3e203532373538.roa
Signing time:             Fri 06 Feb 2026 14:46:32 +0000
ROA not before:           Fri 06 Feb 2026 14:41:32 +0000
ROA not after:            Fri 05 Feb 2027 14:46:32 +0000
asID:                     52758
IP address blocks:        2804:b38::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
                          rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 19:14:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d7:8b:d5:4b:85:43:78:91:1a:9a:db:78:fd:95:b2:a7:f4:90:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
        Validity
            Not Before: Feb  6 14:41:32 2026 GMT
            Not After : Feb  5 14:46:32 2027 GMT
        Subject: CN=14B126AA049F42FAF45F0943A2DEF27B01F486B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0a:8d:cb:02:c3:a9:4c:0f:6c:cc:5d:39:04:
                    13:be:c3:42:8e:2f:8a:9c:78:c9:29:2a:e2:96:1b:
                    8c:cb:6d:ba:7e:fd:dc:ef:84:64:b4:ad:17:b9:24:
                    8c:0b:ab:6a:57:cd:8d:61:c6:cd:2a:6f:e5:31:2b:
                    13:e6:01:1b:bf:53:ae:bb:e2:99:5a:45:70:e5:bc:
                    1a:cf:6f:30:62:bc:a7:46:7f:52:b6:fe:17:01:58:
                    2e:73:b3:bd:94:d4:78:e6:5e:aa:f2:9f:80:64:92:
                    6d:71:3b:62:f5:ff:8b:37:00:6f:89:6f:fb:98:6d:
                    4e:b1:45:7c:e2:5f:9c:d5:85:2b:9c:15:59:6e:20:
                    47:32:a2:c9:39:5e:10:2b:ab:26:b8:b3:c2:aa:26:
                    a0:2f:29:a5:cb:6d:91:ed:ea:ed:c4:7d:a1:89:d6:
                    fb:bb:3a:db:d6:59:b2:71:69:e4:5a:82:c6:3f:05:
                    97:17:2d:22:92:3c:28:ba:00:3a:96:6f:43:79:ca:
                    21:94:a7:43:e5:12:73:49:a3:8e:f2:7d:d6:3b:f6:
                    ec:ae:8c:89:10:00:a2:14:28:4c:6d:c5:37:1f:0d:
                    b9:8f:09:e3:8a:3a:42:79:bd:11:ed:8f:86:22:d8:
                    e4:73:6b:aa:46:bd:93:48:61:cc:8f:f4:f4:6a:23:
                    76:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B1:26:AA:04:9F:42:FA:F4:5F:09:43:A2:DE:F2:7B:01:F4:86:B0
            X509v3 Authority Key Identifier:
                keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/323830343a6233383a3a2f33322d3438203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b38::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:e6:0b:85:e8:35:e9:d8:db:73:36:f7:48:e9:35:9e:66:1c:
         b3:20:f8:1f:8c:13:29:ba:cb:e9:99:ff:1c:eb:13:f6:2a:a7:
         eb:c7:a7:8e:da:ab:c5:e2:7a:1d:6b:c4:e4:be:f8:b9:cc:e9:
         9d:48:cb:92:eb:1c:49:e5:19:04:fd:2c:0d:26:95:09:bb:cf:
         29:87:24:5e:74:75:ba:bb:98:60:32:1e:bf:99:92:3d:04:8c:
         91:5f:d8:cc:2d:56:10:29:5b:1f:94:d0:63:4a:6a:28:78:c1:
         20:d7:6c:32:70:ed:60:82:f4:b5:53:a3:94:82:89:8a:0f:9b:
         db:6c:f4:d2:f7:09:52:cf:eb:a0:c8:fd:9e:e2:a2:ea:16:2d:
         0f:aa:fa:1f:80:41:31:00:9b:ab:cc:fb:6b:3f:4e:8a:17:dd:
         99:d2:6e:01:0c:13:dc:51:b5:de:b3:83:bb:f1:e3:46:64:85:
         0b:62:05:c4:25:64:db:25:4e:e2:a0:0c:e2:a1:f8:84:eb:a0:
         a0:7f:7a:08:fe:57:76:99:89:6f:2b:2b:ec:fa:ea:bc:9c:70:
         c9:f1:2e:f2:c9:a6:af:bf:e9:b7:71:0e:72:1d:40:81:f2:a8:
         fd:a7:ab:4c:ac:c6:1a:31:11:e8:cd:e1:7b:2c:71:f7:0f:d1:
         c0:a1:cd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:37:37 2026 by rpki-client