Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/323830343a333165343a3a2f33322d3438203d3e20323635303433.roa
File:                     323830343a333165343a3a2f33322d3438203d3e20323635303433.roa (raw, json)
Hash identifier:          UjzRcYc/0vB4I0K2cDjkR6rb7/AVeHCSES4Q4zPEgPE=
Subject key identifier:   08:62:C9:7A:89:22:DD:58:14:C6:1F:7B:ED:B4:68:9D:BB:A3:43:32
Certificate issuer:       /CN=8F7C897DFF70774947A63DAC93567C79586D1B6C
Certificate serial:       75D7AC48048914E0D1851CB9C633AA0E2437F145
Authority key identifier: 8F:7C:89:7D:FF:70:77:49:47:A6:3D:AC:93:56:7C:79:58:6D:1B:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/323830343a333165343a3a2f33322d3438203d3e20323635303433.roa
Signing time:             Thu 05 Feb 2026 04:26:02 +0000
ROA not before:           Thu 05 Feb 2026 04:21:02 +0000
ROA not after:            Thu 04 Feb 2027 04:26:02 +0000
asID:                     265043
IP address blocks:        2804:31e4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.crl
                          rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 20:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d7:ac:48:04:89:14:e0:d1:85:1c:b9:c6:33:aa:0e:24:37:f1:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F7C897DFF70774947A63DAC93567C79586D1B6C
        Validity
            Not Before: Feb  5 04:21:02 2026 GMT
            Not After : Feb  4 04:26:02 2027 GMT
        Subject: CN=0862C97A8922DD5814C61F7BEDB4689DBBA34332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:08:f1:99:d0:28:45:35:70:31:5e:70:fe:94:
                    6e:45:d2:ea:8b:fa:3e:22:0d:ae:46:ca:c8:1b:68:
                    16:3d:b4:d9:7b:ad:32:26:9d:77:59:8d:09:9c:aa:
                    8c:46:59:8d:20:5a:0d:42:1e:33:b6:fe:8f:d7:d6:
                    69:9e:b3:9f:71:50:06:cc:b3:1d:a0:76:10:4e:0d:
                    49:21:63:af:58:ad:9f:71:4b:6d:bf:cb:0e:20:11:
                    76:d7:0e:6b:fd:a4:e6:4b:69:0f:13:26:68:06:a9:
                    f6:8e:3b:20:cb:4e:17:5b:8b:5d:f6:d0:87:14:22:
                    9f:e3:c4:c7:eb:99:fe:25:11:a3:62:5d:9b:ea:34:
                    d2:4e:af:1e:3f:1b:72:20:5c:94:c8:fd:9f:54:a5:
                    f1:dd:f5:6d:52:a9:b9:d6:99:22:ef:84:e3:8c:9f:
                    41:75:ba:71:93:76:18:79:a8:7f:ed:bf:54:fe:00:
                    7a:f7:aa:fd:33:85:f8:5e:a2:f8:94:84:49:cd:52:
                    7e:c4:6e:60:6a:76:de:40:6a:f8:02:f9:1f:d3:37:
                    07:a6:fc:6e:0b:17:e3:d9:90:b3:48:69:62:f5:be:
                    86:78:d8:01:65:18:ca:ae:7d:54:bb:55:68:af:a4:
                    94:e3:23:d4:90:f4:e5:31:06:f4:c7:52:6e:d7:92:
                    3c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:62:C9:7A:89:22:DD:58:14:C6:1F:7B:ED:B4:68:9D:BB:A3:43:32
            X509v3 Authority Key Identifier:
                keyid:8F:7C:89:7D:FF:70:77:49:47:A6:3D:AC:93:56:7C:79:58:6D:1B:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/323830343a333165343a3a2f33322d3438203d3e20323635303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:8f:80:9d:9e:d5:29:ef:4d:ab:a3:82:a5:41:21:78:d4:a2:
         d1:b2:eb:50:c5:5f:fb:ce:fc:1e:df:15:da:12:33:1c:0b:07:
         44:85:e3:03:f2:e3:c1:6a:b9:f5:58:75:52:fa:00:9d:86:38:
         3c:e8:f9:52:c4:25:30:a5:36:4f:d9:f9:fb:10:cc:d1:87:1d:
         3e:fa:6d:84:a4:73:be:f3:b8:3e:82:df:93:96:c5:9c:11:ad:
         1c:e5:90:40:5c:b2:5d:d5:23:8e:14:08:48:fc:0d:75:a1:97:
         6a:f9:96:8a:dc:22:e9:8b:a8:28:ef:93:fb:83:18:22:b4:1a:
         ee:a5:1f:03:7b:b9:65:99:c2:fa:be:c1:d3:49:41:75:7e:82:
         82:55:34:51:51:e6:e1:d1:ec:bd:22:c7:be:f5:ef:a8:63:ce:
         4e:1c:17:ee:9b:c1:41:5e:a2:26:2f:92:d7:f6:d7:44:42:9f:
         7c:b9:f2:37:f7:0b:52:44:b1:3c:22:0a:2a:b4:3f:c1:b2:f7:
         1b:cc:04:ac:68:4d:04:64:7f:29:fc:d9:81:a3:ce:bb:7c:40:
         2b:8f:b0:df:42:de:0f:3b:a9:fc:02:ec:b8:7a:b2:31:2c:77:
         bb:d6:60:f9:ee:d3:46:6b:e7:2a:08:bf:85:7a:64:ac:65:c6:
         14:bb:73:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:06:17 2026 by rpki-client