Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/323830343a356235383a3a2f33322d3438203d3e20323638383336.roa
File:                     323830343a356235383a3a2f33322d3438203d3e20323638383336.roa (raw, json)
Hash identifier:          HxC3Rg85DNHe7Ts2hx2cQsJ5McC+emoCitTgJQitpak=
Subject key identifier:   A5:9C:29:86:53:D0:06:5A:98:19:2B:33:D7:B9:23:A0:EB:59:6F:60
Certificate issuer:       /CN=30A2A4F6F38B7B5134D3C1CD60F47C60E0953FF8
Certificate serial:       3C37CA1BA9671E549E54908C2141D3EA21123C84
Authority key identifier: 30:A2:A4:F6:F3:8B:7B:51:34:D3:C1:CD:60:F4:7C:60:E0:95:3F:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30A2A4F6F38B7B5134D3C1CD60F47C60E0953FF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/323830343a356235383a3a2f33322d3438203d3e20323638383336.roa
Signing time:             Mon 09 Feb 2026 18:25:56 +0000
ROA not before:           Mon 09 Feb 2026 18:20:56 +0000
ROA not after:            Mon 08 Feb 2027 18:25:56 +0000
asID:                     268836
IP address blocks:        2804:5b58::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/30A2A4F6F38B7B5134D3C1CD60F47C60E0953FF8.crl
                          rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/30A2A4F6F38B7B5134D3C1CD60F47C60E0953FF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30A2A4F6F38B7B5134D3C1CD60F47C60E0953FF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 17:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:37:ca:1b:a9:67:1e:54:9e:54:90:8c:21:41:d3:ea:21:12:3c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30A2A4F6F38B7B5134D3C1CD60F47C60E0953FF8
        Validity
            Not Before: Feb  9 18:20:56 2026 GMT
            Not After : Feb  8 18:25:56 2027 GMT
        Subject: CN=A59C298653D0065A98192B33D7B923A0EB596F60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f9:53:8f:e3:fa:9c:bd:c1:6a:55:c9:05:7a:
                    e7:11:aa:a0:9b:27:02:ac:b4:79:b5:b3:a1:1b:b3:
                    85:5a:e6:cb:e1:e1:25:27:94:cc:a7:d1:f8:db:ac:
                    65:9d:a9:32:87:5f:f5:0e:96:b8:34:2c:e6:b2:02:
                    fb:36:02:45:01:69:b6:a0:2a:93:0a:f3:e4:78:2f:
                    f2:e9:ad:af:4b:4a:c7:a3:f1:13:a4:44:df:0c:ad:
                    63:b9:ed:54:7d:40:e7:44:82:b7:46:7c:50:94:2b:
                    e4:f0:33:4f:72:91:0a:e5:48:ee:58:30:f3:f8:86:
                    2d:8f:99:1c:cc:21:fd:45:78:74:d0:70:80:a2:5b:
                    6c:4c:bd:fb:d6:23:9e:d6:df:ff:46:b9:6c:b8:c8:
                    d3:b7:c4:36:34:66:c2:54:ec:71:ed:0e:6a:5c:a7:
                    d5:cb:be:0d:51:8d:ee:fa:43:e9:46:8f:c2:75:70:
                    97:ec:01:56:78:16:ca:c5:b8:35:30:a4:5f:bb:00:
                    74:ef:8f:d8:06:95:ea:25:a8:4b:a4:9d:6a:8c:6c:
                    8e:41:c4:01:61:8b:a1:03:fa:26:c4:9b:9f:08:04:
                    43:89:af:8e:2a:0f:53:1e:82:3a:9a:33:d4:24:01:
                    7c:b5:5d:34:05:83:69:69:56:39:72:ee:6b:12:68:
                    29:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9C:29:86:53:D0:06:5A:98:19:2B:33:D7:B9:23:A0:EB:59:6F:60
            X509v3 Authority Key Identifier:
                keyid:30:A2:A4:F6:F3:8B:7B:51:34:D3:C1:CD:60:F4:7C:60:E0:95:3F:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/30A2A4F6F38B7B5134D3C1CD60F47C60E0953FF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30A2A4F6F38B7B5134D3C1CD60F47C60E0953FF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/323830343a356235383a3a2f33322d3438203d3e20323638383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b58::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:21:e9:c1:b2:19:02:ec:07:05:9d:60:56:34:45:57:80:b7:
         ad:56:3d:05:44:b5:f8:fa:29:7b:a5:76:1c:fd:63:81:83:19:
         5b:1f:19:aa:79:c8:60:b9:e7:fc:0a:29:4f:71:3c:d5:a0:58:
         e5:f1:3d:42:38:10:73:9b:60:07:7c:60:ac:a8:b1:bc:fe:8c:
         e8:63:8d:f9:e1:c2:21:d7:40:97:08:74:cd:8f:88:9f:1b:13:
         0c:56:ad:10:7f:ce:a9:16:71:41:1d:fc:e8:50:d6:04:9d:c1:
         8d:83:f8:c2:bb:fd:26:bd:3f:7a:85:26:76:35:0b:e6:ac:aa:
         dd:92:09:5c:bd:57:c7:ac:cb:f3:47:0f:00:54:9f:2f:48:d6:
         8f:16:28:db:55:79:84:9b:9e:cd:1d:3a:0c:46:50:4b:0d:07:
         5b:e4:7a:ef:02:e0:7d:c6:e4:52:32:a4:a9:a9:2e:0b:69:87:
         db:61:93:de:f0:0e:57:a3:2e:22:5b:85:d7:c6:e3:1f:d6:03:
         f2:76:6a:17:78:f1:0c:d6:2a:df:ab:2f:19:8d:e0:a7:67:1d:
         95:1e:c2:e0:62:cb:12:5d:72:64:59:88:8f:b3:88:e3:db:5d:
         38:af:e1:da:10:99:03:5f:94:1b:05:33:52:86:bd:88:01:2a:
         b5:b0:df:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:03:52 2026 by rpki-client