Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/pftEPEja9SRnSStKduoLCyptYQrf1GJDUqVR711dG4M/1/323830343a343664633a3a2f33322d3438203d3e20323637303136.roa
File:                     323830343a343664633a3a2f33322d3438203d3e20323637303136.roa (raw, json)
Hash identifier:          /A2tEVM3p5x4YS0eK3O0pKJfqpzuUcM3WTek9U4CUJM=
Subject key identifier:   22:0B:DD:A4:3B:5E:B5:2A:F0:A7:36:2D:61:98:8D:E7:61:2F:88:E7
Certificate issuer:       /CN=462DDD71CA49B52AB4576EB8AE36E9D695B64F92
Certificate serial:       467DD5300C8E3DDA06085A46750C7CEE16876C88
Authority key identifier: 46:2D:DD:71:CA:49:B5:2A:B4:57:6E:B8:AE:36:E9:D6:95:B6:4F:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/462DDD71CA49B52AB4576EB8AE36E9D695B64F92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/pftEPEja9SRnSStKduoLCyptYQrf1GJDUqVR711dG4M/1/323830343a343664633a3a2f33322d3438203d3e20323637303136.roa
Signing time:             Thu 05 Feb 2026 07:08:23 +0000
ROA not before:           Thu 05 Feb 2026 07:03:23 +0000
ROA not after:            Thu 04 Feb 2027 07:08:23 +0000
asID:                     267016
IP address blocks:        2804:46dc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/pftEPEja9SRnSStKduoLCyptYQrf1GJDUqVR711dG4M/1/462DDD71CA49B52AB4576EB8AE36E9D695B64F92.crl
                          rsync://rpki-repo.registro.br/repo/pftEPEja9SRnSStKduoLCyptYQrf1GJDUqVR711dG4M/1/462DDD71CA49B52AB4576EB8AE36E9D695B64F92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/462DDD71CA49B52AB4576EB8AE36E9D695B64F92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:56:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7d:d5:30:0c:8e:3d:da:06:08:5a:46:75:0c:7c:ee:16:87:6c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=462DDD71CA49B52AB4576EB8AE36E9D695B64F92
        Validity
            Not Before: Feb  5 07:03:23 2026 GMT
            Not After : Feb  4 07:08:23 2027 GMT
        Subject: CN=220BDDA43B5EB52AF0A7362D61988DE7612F88E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:91:ad:55:66:ad:37:23:59:e9:29:ec:b2:e0:
                    00:27:52:a4:ea:42:e8:71:0d:01:a8:29:b3:fd:23:
                    37:1b:15:a2:85:98:e2:d2:36:71:76:52:bc:5d:17:
                    f0:ea:75:f7:af:5d:0d:b7:f9:fa:c8:85:4a:05:b0:
                    35:ec:ef:aa:0a:14:c4:b6:8c:2f:70:5c:04:00:8a:
                    af:23:4f:d1:b1:8b:24:49:9e:c4:8f:e7:56:fe:eb:
                    e7:39:ae:b2:ea:54:ea:b9:b8:ce:c3:0a:10:c9:33:
                    c9:cf:4c:ff:6f:b7:48:83:ce:09:28:29:fa:9b:b8:
                    b0:68:c6:81:90:ba:1d:95:7e:80:f4:5f:7e:e9:e2:
                    8a:69:11:29:d2:d0:ba:0b:1b:6d:87:78:18:b1:60:
                    5c:8a:15:65:e5:fd:3f:71:0b:69:c8:4b:d7:f3:a4:
                    f0:da:fb:70:a7:fc:41:79:e6:38:dd:62:e2:af:dc:
                    b0:1d:57:dd:8b:fb:44:ad:24:0c:67:9b:f5:bf:7f:
                    bb:08:36:d6:db:fe:6b:5d:bd:68:7d:17:70:51:be:
                    19:11:e9:4f:d9:94:8d:cb:4e:d9:d9:97:54:5e:f5:
                    70:7a:4c:c9:91:37:65:4f:e3:8f:61:2e:b4:45:5e:
                    95:dc:66:2f:b4:2e:66:ae:28:79:da:05:41:e4:55:
                    b0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0B:DD:A4:3B:5E:B5:2A:F0:A7:36:2D:61:98:8D:E7:61:2F:88:E7
            X509v3 Authority Key Identifier:
                keyid:46:2D:DD:71:CA:49:B5:2A:B4:57:6E:B8:AE:36:E9:D6:95:B6:4F:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/pftEPEja9SRnSStKduoLCyptYQrf1GJDUqVR711dG4M/1/462DDD71CA49B52AB4576EB8AE36E9D695B64F92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/462DDD71CA49B52AB4576EB8AE36E9D695B64F92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/pftEPEja9SRnSStKduoLCyptYQrf1GJDUqVR711dG4M/1/323830343a343664633a3a2f33322d3438203d3e20323637303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:f8:57:c4:f9:10:cc:3b:0a:f4:61:84:12:a6:91:f0:26:5b:
         23:cf:73:48:4f:f6:27:8f:d4:76:8b:92:45:f4:69:f5:bc:93:
         b4:c5:e6:9c:46:c3:be:49:10:79:22:3c:7c:5a:91:05:b9:46:
         dc:b8:09:be:e2:42:03:79:eb:ff:58:95:e8:4e:99:88:7a:7c:
         3a:04:0d:18:68:72:f6:d9:23:13:c2:88:c1:d4:ed:e5:1b:e3:
         5e:7b:c8:41:4a:e5:1e:7d:6b:d6:6f:4f:a5:fb:42:69:d2:52:
         e0:4b:3b:52:05:9c:9f:59:62:99:3f:5f:d2:6a:8a:13:a7:2e:
         69:61:61:8f:db:9d:16:2e:53:a6:8c:00:07:2c:3c:2b:8b:ed:
         3e:a2:35:c2:72:1d:1e:35:ef:46:52:c1:de:95:52:65:87:ae:
         fe:17:03:27:8d:e5:e1:48:1c:93:98:25:44:62:57:fc:b5:df:
         a7:a4:9d:7b:ee:b0:e9:92:bc:33:bf:5c:53:1a:16:07:d7:07:
         d2:eb:f0:86:ec:0a:78:4d:dd:23:af:ed:c9:df:53:78:94:e7:
         44:53:9c:32:5c:94:9e:d8:e0:37:c3:a4:ce:0a:5f:2c:df:ab:
         db:77:0e:d0:30:8c:aa:55:14:67:b4:d8:a1:01:a9:19:61:c5:
         a1:56:15:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:04 2026 by rpki-client