Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/323830343a336237383a3a2f33322d3332203d3e20323636313531.roa
File:                     323830343a336237383a3a2f33322d3332203d3e20323636313531.roa (raw, json)
Hash identifier:          hJAH6dNpNL2oDMBGqGe8W9FSuKTfgAMDKoEfy1ttrBU=
Subject key identifier:   D0:43:C9:E5:8C:D6:49:8F:C5:AE:FA:AE:5D:C3:AE:CB:B5:EC:12:C1
Certificate issuer:       /CN=77D157822A54058798E472D529CD09C08A291356
Certificate serial:       13415BBED2ED50B23FE40B5E107734A485194ACC
Authority key identifier: 77:D1:57:82:2A:54:05:87:98:E4:72:D5:29:CD:09:C0:8A:29:13:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77D157822A54058798E472D529CD09C08A291356.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/323830343a336237383a3a2f33322d3332203d3e20323636313531.roa
Signing time:             Fri 06 Feb 2026 18:43:07 +0000
ROA not before:           Fri 06 Feb 2026 18:38:07 +0000
ROA not after:            Fri 05 Feb 2027 18:43:07 +0000
asID:                     266151
IP address blocks:        2804:3b78::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/77D157822A54058798E472D529CD09C08A291356.crl
                          rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/77D157822A54058798E472D529CD09C08A291356.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77D157822A54058798E472D529CD09C08A291356.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 19:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:41:5b:be:d2:ed:50:b2:3f:e4:0b:5e:10:77:34:a4:85:19:4a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77D157822A54058798E472D529CD09C08A291356
        Validity
            Not Before: Feb  6 18:38:07 2026 GMT
            Not After : Feb  5 18:43:07 2027 GMT
        Subject: CN=D043C9E58CD6498FC5AEFAAE5DC3AECBB5EC12C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:24:79:bc:65:ca:6a:34:b1:b2:e4:d5:f3:7d:
                    2a:75:3d:1c:bc:5f:73:3d:64:94:5a:ff:72:44:5f:
                    ee:4a:99:57:6c:5d:50:9f:c4:a5:4a:e3:9b:a3:22:
                    47:67:67:f7:3e:15:33:28:0d:1c:85:5a:d2:e9:d0:
                    73:ae:f4:2b:3f:07:b0:24:2e:6f:dc:9d:e0:fe:f0:
                    42:ae:ac:67:63:97:39:c4:1e:67:0a:c9:51:0e:2a:
                    73:7e:c2:ea:b8:7b:61:70:34:d3:19:74:84:c9:e6:
                    ea:7b:46:e5:64:8e:3c:3c:97:b0:ff:38:9f:70:64:
                    1c:4d:b4:a2:88:29:26:1c:bb:5f:3e:df:fb:6a:e8:
                    e4:18:67:07:87:50:cb:77:f4:12:7e:f8:5c:b6:71:
                    10:32:a7:49:19:f0:8f:73:ee:c7:a2:e4:4f:8a:59:
                    07:96:fd:9b:42:bb:0c:5b:97:87:3b:5e:d5:91:c7:
                    b8:d8:ee:a8:2d:6b:c9:a6:23:8f:ff:71:e4:88:c6:
                    dd:da:f9:19:fb:ff:d0:86:2d:a2:e1:cc:f6:c2:04:
                    d0:04:69:d8:ae:4e:1d:ae:7a:3f:4a:00:16:f0:d7:
                    56:19:cd:6e:e1:4d:e7:a9:84:cf:f6:8c:2d:22:1b:
                    31:b1:ea:3e:a6:3e:fb:08:b9:21:71:cb:a7:2f:ac:
                    fc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:43:C9:E5:8C:D6:49:8F:C5:AE:FA:AE:5D:C3:AE:CB:B5:EC:12:C1
            X509v3 Authority Key Identifier:
                keyid:77:D1:57:82:2A:54:05:87:98:E4:72:D5:29:CD:09:C0:8A:29:13:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/77D157822A54058798E472D529CD09C08A291356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77D157822A54058798E472D529CD09C08A291356.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/323830343a336237383a3a2f33322d3332203d3e20323636313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b78::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:e0:10:c4:3e:d4:22:14:41:27:d9:19:96:4d:dd:f2:26:21:
         dc:25:16:48:1c:0f:25:73:7d:0e:9c:1b:30:78:0b:35:a7:e3:
         90:97:b5:42:93:fd:c1:7a:95:78:78:9f:97:ed:06:bd:d2:ac:
         4b:55:54:7a:d8:da:00:32:82:4a:ea:87:b3:f9:f7:de:bf:e6:
         93:a1:11:8a:c5:b8:ea:4a:84:29:53:71:99:ae:0f:b7:1e:b3:
         57:84:31:da:03:e6:2d:f3:b5:58:08:2a:0c:3f:a4:db:11:38:
         2a:0f:2a:ff:22:5a:44:7a:1d:ab:aa:8f:22:79:dd:61:d5:4f:
         4d:01:dc:92:7a:8d:ee:8e:7e:42:9f:73:8b:17:78:9d:33:07:
         13:fe:47:1f:b3:7e:08:73:92:dc:fe:0a:4e:ac:ad:64:2d:6e:
         00:14:b1:1a:ee:e6:c4:0f:f2:d2:71:ca:48:89:09:5b:74:a0:
         08:81:da:c1:2a:1d:04:38:24:fd:c8:3a:8e:0f:41:5a:e8:2e:
         c7:34:05:93:70:0a:06:65:4c:d1:98:db:d7:3e:3f:c3:a3:91:
         65:50:d6:c2:b6:ab:cd:2d:5a:04:ec:06:b8:24:28:88:f7:82:
         73:3e:0b:60:ab:90:5b:12:cf:74:1b:cf:d6:5f:e3:43:e6:f0:
         26:1c:77:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 03:05:17 2026 by rpki-client