Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/323830343a333264343a3a2f33322d3332203d3e20323635313030.roa
File:                     323830343a333264343a3a2f33322d3332203d3e20323635313030.roa (raw, json)
Hash identifier:          Q9KP5wCh+ZPDTItZbChYfaToBd4KkV1aPEf2axonbTk=
Subject key identifier:   C5:68:36:26:B7:A1:EC:D3:25:C3:76:DE:B5:F9:3F:7E:E5:08:F5:8D
Certificate issuer:       /CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
Certificate serial:       17CC535E6AC56084C1A5B7D92FCE4850FCC77AC8
Authority key identifier: B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/323830343a333264343a3a2f33322d3332203d3e20323635313030.roa
Signing time:             Wed 04 Feb 2026 20:00:18 +0000
ROA not before:           Wed 04 Feb 2026 19:55:18 +0000
ROA not after:            Wed 03 Feb 2027 20:00:18 +0000
asID:                     265100
IP address blocks:        2804:32d4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl
                          rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:cc:53:5e:6a:c5:60:84:c1:a5:b7:d9:2f:ce:48:50:fc:c7:7a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
        Validity
            Not Before: Feb  4 19:55:18 2026 GMT
            Not After : Feb  3 20:00:18 2027 GMT
        Subject: CN=C5683626B7A1ECD325C376DEB5F93F7EE508F58D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:36:36:63:78:ba:90:ce:aa:87:c2:89:9f:06:
                    7e:fc:9c:bd:0d:f0:00:7f:c2:88:c7:3c:69:40:dd:
                    39:e4:dc:a1:e9:cf:9d:5e:81:f5:f1:83:43:1a:a4:
                    87:d3:09:3e:92:33:b2:de:b2:44:4b:7f:34:1c:96:
                    83:29:60:dd:5a:07:ac:e9:78:9e:3c:a4:5f:7f:f4:
                    8c:a7:3f:61:92:76:2f:f8:a4:fe:7e:56:f4:8d:20:
                    11:b8:ad:ed:6a:06:01:ec:99:62:9b:40:e5:c9:7b:
                    e6:f4:85:6a:82:34:25:1d:55:57:7b:b8:bf:ab:b2:
                    30:e1:8f:43:bb:47:2e:7d:fa:ec:43:8d:54:bf:5c:
                    26:ee:4a:65:df:25:9a:7d:51:cb:bf:27:dc:c1:87:
                    df:db:36:54:01:8e:93:21:33:a4:31:17:2f:61:f2:
                    8f:94:f0:b0:79:ed:08:5d:5d:37:1a:60:65:d2:c3:
                    26:81:06:89:c7:c5:45:b1:dd:8b:3c:fe:e2:1b:86:
                    d2:46:22:56:97:b1:d3:1d:9e:97:5d:76:89:bc:68:
                    ce:54:36:56:51:23:f4:a7:03:07:d5:0e:d8:88:41:
                    d0:74:ae:2e:6d:69:c2:f1:ae:ee:ff:18:b9:e1:9d:
                    3c:db:b0:bc:05:a5:f6:ce:6e:7f:59:db:f5:db:48:
                    c5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:68:36:26:B7:A1:EC:D3:25:C3:76:DE:B5:F9:3F:7E:E5:08:F5:8D
            X509v3 Authority Key Identifier:
                keyid:B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/323830343a333264343a3a2f33322d3332203d3e20323635313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:17:eb:e9:ae:4b:bf:dc:2c:82:f3:01:58:5c:be:41:74:8e:
         d0:a1:92:5e:dc:54:08:de:a7:6b:c3:dc:41:0f:ca:2e:1f:5e:
         94:26:90:db:22:0b:31:45:6c:a6:6c:6f:63:5d:39:34:89:8b:
         f2:9d:65:3f:72:a9:e9:01:19:83:50:86:22:f5:21:c8:6c:fe:
         08:8f:ee:6c:e5:81:96:7e:e2:67:c4:7a:42:85:eb:b6:ca:0e:
         dd:81:d8:b5:85:f5:dd:29:75:72:32:3c:82:e2:87:13:43:57:
         db:4d:d5:be:4b:46:7a:2c:5d:03:37:21:d1:48:06:1e:49:fb:
         2f:8b:a6:4d:6a:0d:c2:d2:51:51:c1:57:c7:fc:c2:5c:63:f3:
         ce:97:ac:76:ba:86:8b:e5:43:50:9b:77:8f:e8:73:89:0f:5d:
         1e:77:ea:5f:38:9a:ee:43:cf:5c:c0:b2:7a:51:23:79:4e:ab:
         29:83:88:7a:31:ac:52:7a:07:53:fd:bd:bd:c4:dd:d9:10:c9:
         a9:d6:10:17:c4:49:a5:3f:17:2d:06:56:02:9f:fe:70:cb:94:
         b0:c5:a8:5d:5b:aa:0c:e1:30:9f:87:92:26:9f:c2:ad:42:5c:
         41:f1:7a:c8:86:44:56:99:86:4d:e9:fb:0f:36:10:48:13:d2:
         87:6d:5c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:56:36 2026 by rpki-client