Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/323830343a353965343a383030303a3a2f33342d3334203d3e20323638373332.roa
File:                     323830343a353965343a383030303a3a2f33342d3334203d3e20323638373332.roa (raw, json)
Hash identifier:          I+YKqgDv9olbwrg9hW0tmOFPUX98AgcUkQKwbp8N/Lw=
Subject key identifier:   AE:C3:12:1C:47:D0:4A:CC:67:DB:40:13:D4:9A:1C:D3:A6:68:B8:AC
Certificate issuer:       /CN=B7124651D19D132543E991B7A74DD4A680768A09
Certificate serial:       3BF4302317D2D8B750E4C37BB5023D297EBA8DD8
Authority key identifier: B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/323830343a353965343a383030303a3a2f33342d3334203d3e20323638373332.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     268732
IP address blocks:        2804:59e4:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl
                          rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 18:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f4:30:23:17:d2:d8:b7:50:e4:c3:7b:b5:02:3d:29:7e:ba:8d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7124651D19D132543E991B7A74DD4A680768A09
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=AEC3121C47D04ACC67DB4013D49A1CD3A668B8AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:69:33:e5:33:b6:43:d0:6f:de:95:30:7e:7c:
                    49:ba:bb:7f:0f:97:fe:fe:0a:29:9a:8d:94:8a:46:
                    5f:d3:b8:c6:44:f3:77:f3:12:c3:05:28:ff:7c:1b:
                    e2:0a:10:38:3e:8d:a2:ec:40:77:57:ef:e9:b0:6c:
                    88:51:79:34:ba:b0:64:9c:5b:ca:fd:9e:e8:17:15:
                    05:da:4b:26:19:4b:11:ca:a0:4e:5a:95:55:e9:66:
                    08:d1:fe:11:52:3f:a2:c7:b3:aa:a0:97:c3:7e:2d:
                    23:60:4b:aa:b6:62:bf:f3:8d:1e:8d:a2:40:8d:57:
                    57:b1:4d:33:fe:f2:b1:2e:ff:1e:a0:a6:ee:8d:63:
                    82:dd:52:a4:85:87:9d:bf:b9:78:95:ae:b4:16:59:
                    a2:d1:73:6d:a3:d5:e9:2b:c6:71:4c:e4:b1:bb:8e:
                    c9:29:ea:cb:eb:30:e9:b1:8f:8b:62:33:dd:e6:44:
                    0b:6e:c9:36:32:64:e3:a6:18:72:d7:aa:bc:d1:63:
                    38:ad:ec:b3:bc:db:c4:8b:2c:1f:bf:52:7f:7d:bb:
                    33:56:a2:be:fe:01:b9:54:87:af:2a:24:30:b7:6c:
                    ba:35:4e:1e:28:86:a9:fc:f3:7e:bd:20:f6:04:f6:
                    46:00:62:4c:c4:e6:61:af:db:c0:41:fa:04:f3:22:
                    ae:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C3:12:1C:47:D0:4A:CC:67:DB:40:13:D4:9A:1C:D3:A6:68:B8:AC
            X509v3 Authority Key Identifier:
                keyid:B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/323830343a353965343a383030303a3a2f33342d3334203d3e20323638373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59e4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         04:23:c1:39:25:da:c6:c0:fe:e7:c1:9c:5a:72:6d:00:22:22:
         cb:53:ec:64:9d:b5:5a:5e:30:30:01:d7:6e:30:bb:6a:d6:44:
         f3:ca:2a:b5:44:44:4b:0b:9d:7b:18:7b:48:dc:44:0a:c1:43:
         e0:97:49:43:16:a2:60:9b:d4:93:8d:a1:de:4b:61:e7:93:8a:
         8c:0f:5a:d8:55:ff:b5:3b:42:32:f0:90:d3:42:6e:88:53:1e:
         c8:24:b8:63:0b:22:87:c1:1e:ad:af:9b:ae:a9:f5:75:db:7e:
         08:e2:a0:40:bb:df:c3:24:53:32:16:4c:bd:68:d2:4f:64:05:
         29:34:a1:fd:0a:4d:c1:bb:a3:d1:d8:ae:3c:c9:18:43:75:4b:
         06:d4:45:bb:10:f8:2b:4f:cd:f6:4f:59:df:e4:b2:e9:68:46:
         21:0c:19:22:b3:24:0a:7b:a9:60:3d:b9:a0:a3:ed:b1:fa:fa:
         2e:d7:f1:e2:81:46:62:72:9f:bb:e2:ad:ee:d7:fd:cf:87:b5:
         20:c3:bf:2d:68:db:96:44:c6:a8:79:47:dd:98:df:ae:9b:68:
         58:dc:7e:96:0b:0d:b1:d9:eb:e1:ec:ac:4c:db:b6:e7:ba:cf:
         33:8c:11:7c:24:b6:2e:d6:a8:9e:39:a5:8f:d9:de:ae:69:d2:
         e9:78:fd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:37:32 2026 by rpki-client