Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/323830313a38303a336532303a3a2f34342d313238203d3e20323731323436.roa
File:                     323830313a38303a336532303a3a2f34342d313238203d3e20323731323436.roa (raw, json)
Hash identifier:          DuUMrzzPulClSVFsKhOIUDbxqjDddqpcyoQ/S2dtgTM=
Subject key identifier:   0F:2C:AC:CF:8E:98:CA:F7:22:9A:EA:57:D3:88:E9:20:CD:A8:3D:A3
Certificate issuer:       /CN=D6D9739B5280D82829AFAD531E39D5FA86E04AD0
Certificate serial:       3884A88DE23A1E3129B604CA557C6B8F8478C1DE
Authority key identifier: D6:D9:73:9B:52:80:D8:28:29:AF:AD:53:1E:39:D5:FA:86:E0:4A:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/323830313a38303a336532303a3a2f34342d313238203d3e20323731323436.roa
Signing time:             Sat 07 Feb 2026 15:31:49 +0000
ROA not before:           Sat 07 Feb 2026 15:26:49 +0000
ROA not after:            Sat 06 Feb 2027 15:31:49 +0000
asID:                     271246
IP address blocks:        2801:80:3e20::/44 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.crl
                          rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:84:a8:8d:e2:3a:1e:31:29:b6:04:ca:55:7c:6b:8f:84:78:c1:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6D9739B5280D82829AFAD531E39D5FA86E04AD0
        Validity
            Not Before: Feb  7 15:26:49 2026 GMT
            Not After : Feb  6 15:31:49 2027 GMT
        Subject: CN=0F2CACCF8E98CAF7229AEA57D388E920CDA83DA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ed:f2:d9:ae:1e:37:a0:a8:a1:54:6f:31:80:
                    8b:3e:b3:79:81:88:44:65:94:65:06:18:4c:bd:22:
                    1d:4b:05:5e:bd:6f:6c:9e:2f:58:fd:de:cb:74:c0:
                    69:e4:a9:89:8c:73:18:3f:53:7e:41:8c:c1:7b:0d:
                    ff:3d:39:5e:52:20:70:fe:7d:47:c4:c3:02:f7:23:
                    ba:34:57:cc:5b:74:e9:5e:2e:2b:98:f7:a1:1b:1c:
                    24:b5:19:b1:c9:0a:60:bf:75:b1:9a:cc:5e:88:d6:
                    ac:52:c0:2c:2f:b8:47:22:1c:b6:f6:1a:34:c1:51:
                    5e:d1:8b:63:81:97:14:24:56:f5:8c:45:63:8e:35:
                    87:30:bb:03:88:cd:d9:a5:b4:57:91:64:09:33:ef:
                    92:89:c9:62:7b:95:94:f8:f6:ea:75:1b:ae:08:0c:
                    15:ab:27:f0:06:4a:17:19:dd:1d:82:1d:dc:04:c6:
                    83:f1:d6:51:b8:1b:e8:02:cc:b2:4c:09:74:b8:5d:
                    97:06:c3:90:79:06:ed:e3:3d:ae:83:db:f6:b2:22:
                    9f:d1:da:f3:d7:da:6e:21:62:c4:30:d9:6c:ac:ba:
                    98:3d:fd:77:7e:4e:c2:35:1e:c5:8d:9d:44:38:ed:
                    36:2f:1a:87:a4:e9:50:19:e9:34:7a:c7:d2:18:4b:
                    75:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2C:AC:CF:8E:98:CA:F7:22:9A:EA:57:D3:88:E9:20:CD:A8:3D:A3
            X509v3 Authority Key Identifier:
                keyid:D6:D9:73:9B:52:80:D8:28:29:AF:AD:53:1E:39:D5:FA:86:E0:4A:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/323830313a38303a336532303a3a2f34342d313238203d3e20323731323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:3e20::/44

    Signature Algorithm: sha256WithRSAEncryption
         40:6d:c5:6d:2a:80:0a:3d:be:31:86:c2:29:7a:ab:70:b3:d7:
         8a:35:e4:40:04:09:73:16:80:94:b8:81:8d:32:b1:b1:8a:45:
         49:db:3d:9d:10:a3:dc:98:83:a0:66:d1:35:ef:32:a2:11:1d:
         7a:1a:ef:00:d7:52:6a:85:75:42:53:f5:dc:fe:7e:1f:47:12:
         e6:b3:c5:a6:f5:00:6e:c7:84:b5:e7:17:cd:7f:71:53:d3:89:
         96:c1:ce:75:da:c2:e6:fb:bc:3c:f9:1d:11:11:c6:2c:54:ab:
         be:a9:fd:31:64:56:b4:d6:dc:7a:d7:d9:43:99:3d:6e:48:df:
         81:bd:78:d3:2a:bd:d3:bc:97:af:5b:54:9c:4a:e7:ee:af:8c:
         b2:53:96:83:f7:46:6a:d7:f4:5c:9f:81:24:54:92:3d:ed:4a:
         d7:bb:87:23:20:d1:5b:be:6c:5c:7d:70:e0:4d:30:79:cf:84:
         d7:0b:55:49:26:b0:21:30:79:71:fd:70:2e:7d:ec:5e:f5:19:
         dc:39:c1:de:9c:6d:89:7d:18:0f:a9:64:f1:fb:1c:ae:1f:59:
         a2:42:6b:20:75:d2:69:6f:3e:51:d1:80:93:d2:6f:e1:90:63:
         c6:de:4e:06:34:78:4b:40:30:0e:da:6c:12:03:ca:89:0c:ec:
         57:88:2b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:55:13 2026 by rpki-client