Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a323030303a3a2f34302d3434203d3e20323731333830.roa
File:                     323830343a376139343a323030303a3a2f34302d3434203d3e20323731333830.roa (raw, json)
Hash identifier:          aDCaPtEG7GxPI4HdX0fbzGPb+5KIpz6CZyrD5JZMnLM=
Subject key identifier:   18:32:60:00:0B:68:D8:4C:58:C0:DB:EC:7B:CD:9D:C9:95:B7:44:29
Certificate issuer:       /CN=4AB61C2BEB228083B61C39B853C001DD574DE2FB
Certificate serial:       03A75678C206868DE79B5DEDE4E4D7FE2B90859D
Authority key identifier: 4A:B6:1C:2B:EB:22:80:83:B6:1C:39:B8:53:C0:01:DD:57:4D:E2:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a323030303a3a2f34302d3434203d3e20323731333830.roa
Signing time:             Thu 05 Feb 2026 14:46:23 +0000
ROA not before:           Thu 05 Feb 2026 14:41:23 +0000
ROA not after:            Thu 04 Feb 2027 14:46:23 +0000
asID:                     271380
IP address blocks:        2804:7a94:2000::/40 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl
                          rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a7:56:78:c2:06:86:8d:e7:9b:5d:ed:e4:e4:d7:fe:2b:90:85:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB61C2BEB228083B61C39B853C001DD574DE2FB
        Validity
            Not Before: Feb  5 14:41:23 2026 GMT
            Not After : Feb  4 14:46:23 2027 GMT
        Subject: CN=183260000B68D84C58C0DBEC7BCD9DC995B74429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4b:4c:40:0b:fd:7e:46:fa:8d:00:86:34:53:
                    b6:c4:e9:3c:1e:87:62:0a:13:39:8a:ed:8f:44:58:
                    a0:6a:f4:ec:02:ab:e3:c4:a8:1b:d9:3a:4f:9f:64:
                    4e:56:b0:44:e6:b1:bb:e2:3f:7c:77:bb:c9:d8:c3:
                    2e:3a:42:d2:5b:ca:ba:bc:66:e0:9b:62:9c:4a:7e:
                    1c:e8:b5:b9:6c:4e:c4:e4:b1:81:c6:51:3b:2b:2e:
                    58:bc:90:35:68:62:cf:b1:63:d8:c4:43:d9:ff:a3:
                    23:8f:2c:3b:72:f5:e1:a8:58:a3:62:4c:0e:09:fe:
                    45:d4:ba:03:62:2c:8a:b5:2f:98:a0:d8:c9:54:74:
                    13:1d:03:f9:0b:19:86:47:f9:06:55:9e:79:1d:07:
                    9b:b2:77:ed:a4:03:42:d8:4b:fe:34:f8:86:b6:c8:
                    0e:5b:da:b7:3d:9d:42:50:1d:91:94:03:81:e6:b9:
                    0f:d0:8c:cf:ee:8c:2a:8d:9c:51:8a:d0:9c:1e:ae:
                    72:c2:8e:d2:89:cb:b3:20:94:58:59:ce:32:1d:62:
                    60:38:82:28:fa:5b:1c:60:eb:dd:44:b9:2a:cc:05:
                    6c:7c:bc:69:47:a7:88:33:c0:1d:eb:1b:a7:5f:f2:
                    2a:b4:7d:55:36:30:fb:5c:cb:5a:e9:97:a1:5b:24:
                    32:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:32:60:00:0B:68:D8:4C:58:C0:DB:EC:7B:CD:9D:C9:95:B7:44:29
            X509v3 Authority Key Identifier:
                keyid:4A:B6:1C:2B:EB:22:80:83:B6:1C:39:B8:53:C0:01:DD:57:4D:E2:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a323030303a3a2f34302d3434203d3e20323731333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a94:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:5e:e0:4a:70:44:91:7b:05:4d:da:c8:98:c4:78:08:87:a0:
         4e:25:9f:33:ac:24:f0:8e:93:4d:99:34:33:95:52:e2:cc:ad:
         83:f7:48:4d:e5:15:0c:af:4b:4b:07:b1:73:54:6e:5e:47:0e:
         71:fa:62:ba:0f:a1:73:89:75:01:41:12:a3:e8:87:32:d8:d1:
         39:63:a2:8b:a2:1e:4b:df:11:4e:c7:dc:19:b1:a9:b5:98:2d:
         e8:16:80:26:86:e3:9c:b9:d3:db:eb:32:e7:33:92:f2:d8:29:
         3d:98:1b:e9:a7:f8:15:0b:33:19:10:2c:0b:7b:a2:20:32:56:
         02:12:93:3e:f8:65:dc:38:3d:38:54:f6:33:ec:59:14:a0:d7:
         aa:0a:c0:4f:8f:ad:96:c5:ae:a4:12:b7:3f:cd:a7:27:b7:32:
         15:38:67:dc:1c:4d:ca:c5:21:96:f5:62:03:4c:be:1e:ef:18:
         b9:51:49:6f:99:86:b7:a9:8b:4a:ae:14:7c:6d:36:ea:5c:6f:
         71:c9:77:f6:cd:34:c5:7e:d6:77:50:56:ec:aa:be:6d:99:9a:
         4c:50:1a:78:a0:46:ed:53:e3:27:50:bc:da:c9:3b:9b:da:c6:
         e4:c2:4d:ad:e5:ea:f6:c9:2a:12:68:45:0d:34:9f:be:83:43:
         05:13:54:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:42 2026 by rpki-client