Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/323830343a336439303a3a2f33322d3438203d3e20323032.roa
File:                     323830343a336439303a3a2f33322d3438203d3e20323032.roa (raw, json)
Hash identifier:          ADA/7Voc0n5kG8bPAn9PB73z6f9tQWKkTLxuDnuw/T4=
Subject key identifier:   AF:F5:C7:59:FC:E5:34:E9:21:23:47:C5:3F:99:BF:25:44:5F:BA:00
Certificate issuer:       /CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
Certificate serial:       52025B2778D9BE1B3DA1F0F149C01502EB86EB33
Authority key identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/323830343a336439303a3a2f33322d3438203d3e20323032.roa
Signing time:             Thu 05 Feb 2026 04:23:06 +0000
ROA not before:           Thu 05 Feb 2026 04:18:06 +0000
ROA not after:            Thu 04 Feb 2027 04:23:06 +0000
asID:                     202
IP address blocks:        2804:3d90::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl
                          rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:02:5b:27:78:d9:be:1b:3d:a1:f0:f1:49:c0:15:02:eb:86:eb:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
        Validity
            Not Before: Feb  5 04:18:06 2026 GMT
            Not After : Feb  4 04:23:06 2027 GMT
        Subject: CN=AFF5C759FCE534E9212347C53F99BF25445FBA00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bb:7a:c9:da:4e:af:67:1c:5a:3a:6d:06:4a:
                    5b:7b:db:7e:d7:a7:26:5f:04:bc:f2:dc:44:f0:99:
                    d9:84:95:03:22:f9:f6:b1:eb:f9:57:c1:b2:4c:21:
                    b6:10:49:59:21:ca:0e:2e:f4:fb:20:a5:82:82:9f:
                    53:50:47:43:5e:e7:48:fe:e6:b5:33:53:60:00:6e:
                    ef:85:57:46:12:4f:d5:ca:c2:a3:25:9c:9f:fa:e8:
                    b6:3e:d8:a3:c8:cf:d8:26:1f:8e:c2:cc:9d:09:51:
                    e8:7d:32:1f:ea:e1:2d:e6:cb:56:31:56:0f:86:1f:
                    0d:23:38:71:a0:6c:46:2c:33:e6:f9:73:b1:23:c3:
                    bb:e8:fe:f2:8c:df:a4:ce:58:5a:8d:39:a6:4c:12:
                    1e:a9:28:ae:c3:36:70:97:2a:7e:f7:84:2e:da:18:
                    8e:95:08:1c:57:7d:b2:0f:c8:de:53:f6:6f:e1:b2:
                    d0:57:38:51:a1:f0:0f:26:3e:bc:64:8f:32:fc:30:
                    53:ec:e7:33:6d:02:9c:b9:e9:a1:b8:cd:f7:3c:ad:
                    97:2a:f4:f8:00:d8:39:34:c2:10:74:51:75:91:72:
                    cb:79:97:ad:4c:03:31:ff:48:9b:02:a8:95:14:ee:
                    02:58:52:06:b2:f0:c4:54:a3:73:c8:58:05:9a:f9:
                    44:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F5:C7:59:FC:E5:34:E9:21:23:47:C5:3F:99:BF:25:44:5F:BA:00
            X509v3 Authority Key Identifier:
                keyid:AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/323830343a336439303a3a2f33322d3438203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:ec:38:db:bb:ad:1d:b5:93:9b:29:ec:73:ae:4c:ac:c2:ed:
         54:4f:ac:c9:3d:0e:99:85:0d:6e:36:c3:71:d4:81:b6:12:62:
         be:25:cd:04:76:8b:a6:1d:fe:af:9b:6a:b5:e4:43:bf:d4:d3:
         f7:8b:8e:69:97:d3:ec:c4:5b:c8:18:8c:90:b5:31:c4:7b:df:
         1b:c8:8c:30:8b:be:bf:60:af:95:eb:c6:d6:60:c0:89:9d:02:
         f4:b1:a3:07:68:9b:21:12:90:73:f4:62:e9:ea:2b:08:f9:57:
         1f:ca:a6:fe:f6:0e:c0:31:b0:0c:5f:b1:82:f9:c2:36:44:78:
         14:56:29:b0:1d:72:96:77:48:a0:77:20:53:a6:52:d1:3b:50:
         5b:bb:ab:3d:44:88:85:23:0b:f7:ab:bd:0e:88:48:c8:17:7b:
         51:1b:6a:b6:cb:70:14:1b:cc:e3:aa:1f:5e:f5:d9:33:5c:52:
         77:b4:6d:94:b1:b7:4a:57:cd:28:8b:23:23:41:ba:10:7f:63:
         52:12:3d:65:b8:12:bc:13:54:a6:f4:29:52:e3:48:69:3f:bd:
         67:31:fe:9f:38:cc:1a:94:a7:3d:48:e2:62:c8:98:6c:bc:5f:
         4a:c4:11:a1:7f:92:8d:a5:ac:2e:5c:4a:b0:55:f1:17:69:bb:
         38:b3:f3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:34:49 2026 by rpki-client