Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/1/323830343a343564303a3a2f33322d3438203d3e20323636393531.roa
File:                     323830343a343564303a3a2f33322d3438203d3e20323636393531.roa (raw, json)
Hash identifier:          uSHuRZAL0oo35KLgIl4B5gbakBkwEa2crXW45GfSVIU=
Subject key identifier:   02:49:2A:DB:D4:55:40:D6:4E:81:70:77:8C:44:39:36:7E:0C:B2:ED
Certificate issuer:       /CN=18E27D86DE5A1AD9A728285FD883143042230B27
Certificate serial:       5D6C0940DB61329B29F9BDC2279D7E6BF1855C3B
Authority key identifier: 18:E2:7D:86:DE:5A:1A:D9:A7:28:28:5F:D8:83:14:30:42:23:0B:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18E27D86DE5A1AD9A728285FD883143042230B27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/1/323830343a343564303a3a2f33322d3438203d3e20323636393531.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     266951
IP address blocks:        2804:45d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/1/18E27D86DE5A1AD9A728285FD883143042230B27.crl
                          rsync://rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/1/18E27D86DE5A1AD9A728285FD883143042230B27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18E27D86DE5A1AD9A728285FD883143042230B27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:6c:09:40:db:61:32:9b:29:f9:bd:c2:27:9d:7e:6b:f1:85:5c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18E27D86DE5A1AD9A728285FD883143042230B27
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=02492ADBD45540D64E8170778C4439367E0CB2ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:09:c4:38:a8:a2:eb:0a:21:df:9e:d9:68:a3:
                    e3:45:95:81:c4:63:ed:2c:6f:be:89:c2:95:13:da:
                    9e:25:56:07:5b:a1:e4:9f:35:44:a0:ed:e2:a6:68:
                    64:14:3d:db:72:25:22:94:ef:ca:61:a4:e3:df:4d:
                    07:1a:e3:94:82:d8:f0:c5:89:b6:bb:f2:8d:3e:72:
                    d4:aa:f4:01:39:1d:62:10:4f:92:8f:e2:4e:f7:aa:
                    7e:7c:c8:ea:8c:c8:89:28:52:1c:08:43:ce:48:b4:
                    70:95:22:4c:f1:59:8b:1a:99:16:8c:e0:6b:08:e2:
                    08:21:2a:d8:2b:b9:33:d2:09:85:bd:13:91:ac:7a:
                    02:7a:98:3e:84:72:25:6d:9d:fe:98:37:ad:ab:a1:
                    4f:5a:64:6b:f6:62:f4:72:ae:d4:89:8f:19:bd:16:
                    7a:f2:9a:11:9b:02:59:28:db:e3:23:41:aa:32:95:
                    fc:66:53:41:1f:de:a0:c0:f7:b2:e4:91:b7:4b:71:
                    64:b6:70:a0:1c:d5:b9:75:c4:da:fb:b7:99:73:de:
                    a5:57:1c:f7:43:22:f0:4c:2a:22:22:be:69:eb:a6:
                    57:37:17:5d:0a:ad:ba:0b:a8:fb:a6:38:1c:91:ed:
                    6d:d7:de:77:c4:e3:9e:f3:5e:c1:71:ec:b7:7e:72:
                    c8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:49:2A:DB:D4:55:40:D6:4E:81:70:77:8C:44:39:36:7E:0C:B2:ED
            X509v3 Authority Key Identifier:
                keyid:18:E2:7D:86:DE:5A:1A:D9:A7:28:28:5F:D8:83:14:30:42:23:0B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/1/18E27D86DE5A1AD9A728285FD883143042230B27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18E27D86DE5A1AD9A728285FD883143042230B27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/1/323830343a343564303a3a2f33322d3438203d3e20323636393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:51:8c:f8:00:e6:d5:fd:fc:3b:6d:fd:15:d7:bb:c5:72:f7:
         a2:19:db:6b:46:41:23:59:82:1c:43:9c:8e:8a:9b:c4:05:52:
         9b:58:bd:73:97:b7:be:f6:87:bf:1a:48:d1:15:00:35:fb:b7:
         dc:80:69:1d:d1:c0:e6:62:0e:ab:2b:d0:22:05:67:2d:ed:eb:
         3a:0a:ef:80:9a:5d:74:4c:5d:02:b3:38:1d:52:be:f0:be:02:
         16:5d:ea:5f:93:61:cc:fa:1a:b5:e1:aa:8d:87:e1:b1:61:fb:
         f8:37:15:5f:17:4a:21:ee:cc:12:93:6e:b2:12:37:a4:8b:63:
         72:53:c7:18:6a:db:42:a5:0c:61:1c:1b:8b:91:8a:42:bd:48:
         05:80:a4:35:f7:82:81:92:81:99:be:e1:42:f2:29:c6:dc:15:
         82:76:7b:94:73:2c:5a:c4:3b:c6:eb:11:af:06:af:9c:b5:d9:
         db:5a:7e:3b:43:69:21:e3:de:af:34:38:f5:e5:b6:53:10:46:
         54:17:2b:f0:de:27:12:8f:8f:c4:f5:85:80:92:1d:b5:fa:ab:
         a5:8a:50:84:c8:b5:31:8c:d4:26:20:62:b3:dc:f0:dd:ff:45:
         b8:7e:06:2b:2f:f6:7c:64:98:d5:ea:b2:64:77:27:0f:99:31:
         93:5d:f9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 13:14:45 2026 by rpki-client