Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/0/323830343a333234383a3a2f33322d3438203d3e203631353832.roa
File:                     323830343a333234383a3a2f33322d3438203d3e203631353832.roa (raw, json)
Hash identifier:          6uJS3A2OLgY+dAcNOkR0xrmuDEswjjnRyELRb6F2pmk=
Subject key identifier:   E5:E2:19:6E:93:A4:21:0A:31:6A:BF:19:59:B7:BA:68:DF:13:25:75
Certificate issuer:       /CN=F3A58196CD0A4AD290F3F47F168D539B895B28A6
Certificate serial:       395068829B542AB2E0DFF8281F9055B0BD486BD7
Authority key identifier: F3:A5:81:96:CD:0A:4A:D2:90:F3:F4:7F:16:8D:53:9B:89:5B:28:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3A58196CD0A4AD290F3F47F168D539B895B28A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/0/323830343a333234383a3a2f33322d3438203d3e203631353832.roa
Signing time:             Tue 17 Feb 2026 15:21:40 +0000
ROA not before:           Tue 17 Feb 2026 15:16:40 +0000
ROA not after:            Tue 16 Feb 2027 15:21:40 +0000
asID:                     61582
IP address blocks:        2804:3248::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/0/F3A58196CD0A4AD290F3F47F168D539B895B28A6.crl
                          rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/0/F3A58196CD0A4AD290F3F47F168D539B895B28A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3A58196CD0A4AD290F3F47F168D539B895B28A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:50:68:82:9b:54:2a:b2:e0:df:f8:28:1f:90:55:b0:bd:48:6b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3A58196CD0A4AD290F3F47F168D539B895B28A6
        Validity
            Not Before: Feb 17 15:16:40 2026 GMT
            Not After : Feb 16 15:21:40 2027 GMT
        Subject: CN=E5E2196E93A4210A316ABF1959B7BA68DF132575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a2:87:ff:40:79:57:bf:5c:7f:dc:b3:42:e8:
                    36:14:4a:27:06:4c:67:d4:08:68:fc:74:96:ae:d9:
                    fc:3a:76:4b:51:a7:3e:09:5f:e9:fd:26:6d:e1:33:
                    6e:15:39:4e:ff:6b:db:95:ef:4e:6d:ba:12:c2:bc:
                    c1:c4:17:03:ae:15:68:05:f6:ee:bc:25:64:ee:ff:
                    63:24:ac:90:6b:b2:64:92:b0:c0:e5:bb:03:bc:7f:
                    be:2e:4c:0b:6e:e1:76:7b:b8:9b:8b:4d:75:c0:90:
                    16:a4:58:59:72:4e:9a:40:ad:9c:09:e3:25:df:79:
                    44:59:7e:cf:97:6d:d7:45:da:79:ac:93:b6:e6:50:
                    d8:f6:d0:5d:9e:96:0f:76:91:f4:e2:9c:cf:54:ce:
                    a9:4c:91:ee:53:01:9a:b5:83:0e:60:e7:34:c7:19:
                    a1:a7:e3:c1:31:c1:26:ad:b1:0c:56:e1:52:26:85:
                    ea:d3:84:fb:15:52:0f:5a:ea:ba:ac:3a:22:4c:68:
                    ed:ab:ce:17:ac:ce:4c:0e:52:b7:da:e9:63:36:38:
                    45:a4:f8:78:c5:d7:f0:d7:60:02:a1:f6:7b:be:a3:
                    be:40:e2:ca:f5:ff:e7:7c:84:79:e4:6d:30:38:ce:
                    90:d1:88:35:d5:4e:5c:1c:e5:dd:5c:43:0c:f6:51:
                    bd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E2:19:6E:93:A4:21:0A:31:6A:BF:19:59:B7:BA:68:DF:13:25:75
            X509v3 Authority Key Identifier:
                keyid:F3:A5:81:96:CD:0A:4A:D2:90:F3:F4:7F:16:8D:53:9B:89:5B:28:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/0/F3A58196CD0A4AD290F3F47F168D539B895B28A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3A58196CD0A4AD290F3F47F168D539B895B28A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/0/323830343a333234383a3a2f33322d3438203d3e203631353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3248::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:e3:90:86:78:79:62:c0:db:1c:27:40:f2:a5:07:fd:0d:f7:
         2f:28:0c:bf:2b:0b:5e:8b:58:7b:af:2f:20:c4:6f:f3:27:69:
         b0:fd:bd:83:dc:a7:07:c7:06:d3:71:6e:eb:16:8e:82:55:32:
         f4:11:d5:06:e3:da:b5:4a:6c:db:48:28:bb:5c:8d:57:bd:d2:
         ce:4d:76:66:65:f8:97:23:fb:f0:6a:c3:d3:6f:6f:70:d2:b5:
         c1:95:7d:45:bc:c8:3c:bd:30:17:cb:e7:5a:6b:cf:7b:43:a4:
         85:98:32:92:46:ff:7d:9f:90:12:57:77:fb:4b:03:f6:0c:64:
         7a:c2:b0:68:62:a8:48:42:a9:4a:e4:f1:bb:ac:1a:f6:3c:01:
         46:2b:0d:2b:48:86:d4:2b:a4:b0:a9:b4:e9:09:a3:2e:9c:38:
         e8:22:86:10:c7:f7:34:96:0e:85:7e:7d:e5:d6:44:a7:83:85:
         06:99:69:85:56:ab:7e:a3:5d:47:ae:f7:46:28:95:0e:62:25:
         33:c4:f7:1d:eb:3d:1b:d4:56:29:ea:3a:dc:9b:24:e7:cd:c6:
         55:66:7f:60:62:cd:2d:53:16:a9:cf:e3:df:81:b2:09:ee:b5:
         4d:fe:76:24:0f:d8:f7:6d:d2:c8:ce:3a:ba:3e:7d:31:bf:6a:
         c7:f4:a6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:24:06 2026 by rpki-client