Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/323830343a376562383a3a2f33322d3438203d3e20323731363433.roa
File:                     323830343a376562383a3a2f33322d3438203d3e20323731363433.roa (raw, json)
Hash identifier:          LS4DNtQrJ+GGMQ4IK5kQgNDAX4T6QDuoseVbAHsiTzc=
Subject key identifier:   BA:F8:D3:E9:4E:7E:E3:4A:88:52:23:69:5E:9E:65:B9:F2:D0:FC:C2
Certificate issuer:       /CN=E42331AAE3C1DE63F2F680A164FA0A748FBDBDDB
Certificate serial:       5736F083484F39A0E841ED512B8CDAED840BA0EF
Authority key identifier: E4:23:31:AA:E3:C1:DE:63:F2:F6:80:A1:64:FA:0A:74:8F:BD:BD:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E42331AAE3C1DE63F2F680A164FA0A748FBDBDDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/323830343a376562383a3a2f33322d3438203d3e20323731363433.roa
Signing time:             Fri 20 Feb 2026 01:46:33 +0000
ROA not before:           Fri 20 Feb 2026 01:41:33 +0000
ROA not after:            Fri 19 Feb 2027 01:46:33 +0000
asID:                     271643
IP address blocks:        2804:7eb8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/E42331AAE3C1DE63F2F680A164FA0A748FBDBDDB.crl
                          rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/E42331AAE3C1DE63F2F680A164FA0A748FBDBDDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E42331AAE3C1DE63F2F680A164FA0A748FBDBDDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 02:54:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:36:f0:83:48:4f:39:a0:e8:41:ed:51:2b:8c:da:ed:84:0b:a0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E42331AAE3C1DE63F2F680A164FA0A748FBDBDDB
        Validity
            Not Before: Feb 20 01:41:33 2026 GMT
            Not After : Feb 19 01:46:33 2027 GMT
        Subject: CN=BAF8D3E94E7EE34A885223695E9E65B9F2D0FCC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:85:fe:81:ed:60:46:62:be:11:e3:c6:cc:d5:
                    c8:20:a1:5b:eb:c2:81:63:69:0f:33:82:72:fd:ea:
                    be:00:ad:81:cf:50:f0:d1:51:ef:59:06:6d:30:20:
                    d3:96:cc:c0:71:e6:32:f3:1d:7a:2f:55:37:05:eb:
                    44:0d:95:cc:66:5f:b8:bb:d3:7a:2b:d6:6c:4f:4e:
                    c3:1f:ac:64:ca:e9:11:50:35:13:cd:af:d1:bd:5f:
                    c0:91:12:57:7b:92:4e:cf:21:38:7d:50:75:90:0c:
                    5e:cb:02:1d:c3:da:68:fe:4e:06:85:dd:f9:ee:67:
                    6b:59:a8:f0:50:9f:45:de:ad:48:36:f0:36:93:02:
                    7d:6a:6f:83:b1:3b:bb:3d:c2:c5:7b:1d:71:dc:f8:
                    b8:c4:1c:70:52:ff:2b:19:6f:2e:5b:ae:c8:3e:c8:
                    80:b5:72:27:58:75:b3:66:08:5d:ff:ea:3b:04:ea:
                    8e:6f:24:46:70:24:d7:6a:f4:d0:8f:62:ca:48:ba:
                    e2:28:db:84:f8:8f:a9:bd:5e:27:1a:b3:1d:12:a8:
                    33:a1:9e:20:af:14:71:13:c0:2b:3b:d6:eb:24:7f:
                    4c:a3:f3:ff:d1:8e:88:46:16:72:c3:a9:1e:0c:82:
                    3c:2f:f1:7b:45:5b:e5:9a:eb:13:61:b4:8b:e5:27:
                    1b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F8:D3:E9:4E:7E:E3:4A:88:52:23:69:5E:9E:65:B9:F2:D0:FC:C2
            X509v3 Authority Key Identifier:
                keyid:E4:23:31:AA:E3:C1:DE:63:F2:F6:80:A1:64:FA:0A:74:8F:BD:BD:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/E42331AAE3C1DE63F2F680A164FA0A748FBDBDDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E42331AAE3C1DE63F2F680A164FA0A748FBDBDDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/323830343a376562383a3a2f33322d3438203d3e20323731363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7eb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:b8:26:cf:3f:83:b5:1e:bf:e5:95:8c:57:91:dd:2d:d8:ca:
         72:26:ea:af:3a:9c:4a:bf:01:5b:83:e1:83:6f:26:a1:5d:64:
         33:f0:82:4a:41:41:ca:24:0f:8c:19:7d:23:e2:fa:05:d7:45:
         6e:d1:ba:08:77:e3:9e:7d:fb:51:7a:48:79:43:ed:8a:99:a3:
         70:72:db:89:b2:95:08:b8:59:98:97:19:2b:22:96:32:7c:c8:
         e6:05:2a:4e:56:bc:4c:bc:f9:95:57:1e:f8:fb:86:b6:62:0e:
         de:95:04:fd:7e:93:f3:de:fa:a7:d0:c5:ca:99:c0:52:1f:ad:
         31:ae:25:fe:35:62:b6:20:9b:a6:6f:46:ce:0c:30:f0:51:ae:
         86:b1:eb:8f:c6:38:ee:29:10:80:fc:bf:01:d2:f7:23:5a:48:
         eb:d8:25:ab:08:1a:6f:46:23:84:00:f2:9a:54:62:d0:24:c5:
         dc:3c:3f:cb:91:39:2b:b8:a1:89:04:ea:bb:30:cf:dc:ba:88:
         da:25:dc:03:81:b6:c9:0c:6a:6b:6b:99:80:66:36:c1:c8:b9:
         84:f2:66:c5:60:e1:26:a4:b7:bd:e2:78:c3:26:70:43:e4:57:
         5e:50:fb:4f:f6:c8:48:3e:09:07:1a:97:26:c4:a0:ac:b3:2f:
         9c:58:4d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:51:45 2026 by rpki-client