Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/323830343a3163633a3a2f33322d3438203d3e203238313330.roa
File:                     323830343a3163633a3a2f33322d3438203d3e203238313330.roa (raw, json)
Hash identifier:          Kne6QM8DQbSR/zgmLOoLRyaupfqmCeV0gbVUI5cBqso=
Subject key identifier:   12:3C:00:4B:A1:C9:F0:06:AA:1F:06:0F:55:E3:76:FC:3A:F1:55:0D
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       64A452F14506A7593CBD6D4AADF6DBE33385381F
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/323830343a3163633a3a2f33322d3438203d3e203238313330.roa
Signing time:             Thu 05 Feb 2026 08:16:45 +0000
ROA not before:           Thu 05 Feb 2026 08:11:45 +0000
ROA not after:            Thu 04 Feb 2027 08:16:45 +0000
asID:                     28130
IP address blocks:        2804:1cc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a4:52:f1:45:06:a7:59:3c:bd:6d:4a:ad:f6:db:e3:33:85:38:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Feb  5 08:11:45 2026 GMT
            Not After : Feb  4 08:16:45 2027 GMT
        Subject: CN=123C004BA1C9F006AA1F060F55E376FC3AF1550D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d8:0d:7f:ca:7b:d8:07:9d:b5:d3:e9:df:b9:
                    3a:44:f4:19:4a:f0:25:fe:1c:ce:49:df:ca:6e:3d:
                    a2:e9:57:b1:e3:7e:4c:e7:dc:51:88:1d:77:f4:cd:
                    6e:9d:b5:2e:ba:78:b2:7e:ff:fa:7e:10:fb:29:bd:
                    e7:fb:bd:d1:60:0b:b3:e2:4b:83:1f:ee:d4:ac:19:
                    bd:68:d4:a9:c7:ca:c0:14:cd:79:25:b7:e0:58:72:
                    2f:2e:d3:0a:46:92:8d:ea:ff:b3:33:8c:cc:5e:6c:
                    a5:e0:94:1a:ca:b7:5e:de:22:39:42:03:db:24:2e:
                    50:2a:62:84:3b:f5:44:96:5c:7a:74:01:99:9b:95:
                    71:14:4e:df:42:01:c2:6a:82:64:c0:af:80:07:14:
                    a6:65:45:fd:d6:3f:12:bd:bf:25:2d:4e:b9:af:e6:
                    ce:5e:0f:e9:a1:36:f0:ca:d7:ca:f4:ed:ca:a8:cb:
                    64:88:36:95:4a:29:5e:8f:ad:4a:f1:10:a8:71:e9:
                    c1:8c:95:b5:52:70:22:47:d8:8b:83:5b:b4:6b:c8:
                    93:ce:41:00:ea:ea:3c:51:87:5b:45:96:87:98:92:
                    6c:81:e3:34:4f:bc:16:d1:40:50:37:28:8e:03:77:
                    39:33:d9:d8:d0:f7:5d:f2:46:67:25:14:d9:b2:78:
                    f3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3C:00:4B:A1:C9:F0:06:AA:1F:06:0F:55:E3:76:FC:3A:F1:55:0D
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/323830343a3163633a3a2f33322d3438203d3e203238313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:52:2d:0a:84:fe:2a:a9:2e:88:5c:d0:c3:69:89:80:d0:71:
         89:97:01:09:b9:e8:3d:43:4d:9f:34:54:a8:ac:4f:a0:13:0a:
         80:76:5f:8c:af:7b:fc:9c:b9:aa:72:e3:37:c4:79:25:b3:42:
         8b:dd:8e:a1:0e:c8:58:ac:7f:38:f6:eb:41:94:7c:d9:1e:22:
         e6:49:2f:11:03:d1:a9:34:f3:db:08:cb:70:08:1d:8f:d7:98:
         63:96:b2:e4:d1:95:b8:46:50:dd:8f:54:f4:e1:62:5a:e9:bd:
         c7:ae:67:1b:bd:d6:eb:a5:5f:ec:ac:89:39:6b:b5:b7:68:2e:
         91:b6:13:cc:08:9b:36:27:7f:89:1d:ea:91:9e:f2:40:5f:f3:
         51:5a:72:0e:db:fb:1e:d3:5b:20:f7:c1:d3:12:06:ea:34:3f:
         af:fa:6c:cc:00:43:d4:33:38:50:68:6b:5f:1d:5e:bd:5e:76:
         fe:1c:67:62:ea:39:40:01:60:ef:cc:1c:3f:7e:83:c0:05:e0:
         c2:33:a1:7f:2e:60:ef:1a:a4:6c:e4:63:24:d9:d5:f4:bf:10:
         53:af:85:c1:4c:2e:38:db:8f:60:0e:ea:90:f6:46:ef:7d:9b:
         ac:36:d3:97:5a:0a:cd:40:92:f9:40:b7:6a:7e:20:77:12:55:
         38:66:d9:07
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUZKRS8UUGp1k8vW1Krfbb4zOFOB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEIxM0RCNjRCQ0MyNUM5RkE5OUZBMkI5REZBQzQ5NjFE
M0RDMDlFMDAeFw0yNjAyMDUwODExNDVaFw0yNzAyMDQwODE2NDVaMDMxMTAvBgNV
BAMTKDEyM0MwMDRCQTFDOUYwMDZBQTFGMDYwRjU1RTM3NkZDM0FGMTU1MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC52A1/ynvYB5210+nfuTpE9BlK
8CX+HM5J38puPaLpV7Hjfkzn3FGIHXf0zW6dtS66eLJ+//p+EPspvef7vdFgC7Pi
S4Mf7tSsGb1o1KnHysAUzXklt+BYci8u0wpGko3q/7MzjMxebKXglBrKt17eIjlC
A9skLlAqYoQ79USWXHp0AZmblXEUTt9CAcJqgmTAr4AHFKZlRf3WPxK9vyUtTrmv
5s5eD+mhNvDK18r07cqoy2SINpVKKV6PrUrxEKhx6cGMlbVScCJH2IuDW7RryJPO
QQDq6jxRh1tFloeYkmyB4zRPvBbRQFA3KI4Ddzkz2djQ913yRmclFNmyePPhAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUEjwAS6HJ8AaqHwYPVeN2/DrxVQ0wHwYDVR0j
BBgwFoAUSxPbZLzCXJ+pn6K536xJYdPcCeAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9oWHAzMTRBVm9uNVZVQjg1M29NVkQ2OWFaa3JLc3VHZkpEem95R3hnQXMy
LzEvNEIxM0RCNjRCQ0MyNUM5RkE5OUZBMkI5REZBQzQ5NjFEM0RDMDlFMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QjEzREI2NEJDQzI1QzlGQTk5
RkEyQjlERkFDNDk2MUQzREMwOUUwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQG
CCsGAQUFBzALhoGHcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9o
WHAzMTRBVm9uNVZVQjg1M29NVkQ2OWFaa3JLc3VHZkpEem95R3hnQXMyLzEvMzIz
ODMwMzQzYTMxNjM2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzgzMTMzMzAu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAP
MA0EAgACMAcDBQAoBAHMMA0GCSqGSIb3DQEBCwUAA4IBAQCZUi0KhP4qqS6IXNDD
aYmA0HGJlwEJueg9Q02fNFSorE+gEwqAdl+Mr3v8nLmqcuM3xHkls0KL3Y6hDshY
rH849utBlHzZHiLmSS8RA9GpNPPbCMtwCB2P15hjlrLk0ZW4RlDdj1T04WJa6b3H
rmcbvdbrpV/srIk5a7W3aC6RthPMCJs2J3+JHeqRnvJAX/NRWnIO2/se01sg98HT
EgbqND+v+mzMAEPUMzhQaGtfHV69Xnb+HGdi6jlAAWDvzBw/foPABeDCM6F/LmDv
GqRs5GMk2dX0vxBTr4XBTC44249gDuqQ9kbvfZusNtOXWgrNQJL5QLdqfiB3ElU4
ZtkH
-----END CERTIFICATE-----
Generated at Thu Feb 19 12:58:33 2026 by rpki-client