Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/0/323830343a343662343a3a2f33322d313238203d3e20323637303036.roa
File:                     323830343a343662343a3a2f33322d313238203d3e20323637303036.roa (raw, json)
Hash identifier:          3ESTssKrO59TEX6cyJb31b74gWXJaUZoZeY9XHKgg/A=
Subject key identifier:   F6:6C:D7:42:A2:07:5C:EB:1E:39:21:6B:13:FE:EA:0B:76:C9:92:F2
Certificate issuer:       /CN=3F250E6FBCF5BE6DED3851E05B024BB83DE750AB
Certificate serial:       3B0F000DE17C1D19FD4B6B019AEDA08254971E26
Authority key identifier: 3F:25:0E:6F:BC:F5:BE:6D:ED:38:51:E0:5B:02:4B:B8:3D:E7:50:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F250E6FBCF5BE6DED3851E05B024BB83DE750AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/0/323830343a343662343a3a2f33322d313238203d3e20323637303036.roa
Signing time:             Thu 29 Jan 2026 22:18:10 +0000
ROA not before:           Thu 29 Jan 2026 22:13:10 +0000
ROA not after:            Thu 28 Jan 2027 22:18:10 +0000
asID:                     267006
IP address blocks:        2804:46b4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/0/3F250E6FBCF5BE6DED3851E05B024BB83DE750AB.crl
                          rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/0/3F250E6FBCF5BE6DED3851E05B024BB83DE750AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F250E6FBCF5BE6DED3851E05B024BB83DE750AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 23:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0f:00:0d:e1:7c:1d:19:fd:4b:6b:01:9a:ed:a0:82:54:97:1e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F250E6FBCF5BE6DED3851E05B024BB83DE750AB
        Validity
            Not Before: Jan 29 22:13:10 2026 GMT
            Not After : Jan 28 22:18:10 2027 GMT
        Subject: CN=F66CD742A2075CEB1E39216B13FEEA0B76C992F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8c:0e:fa:54:b5:cc:a3:45:08:eb:ee:c9:eb:
                    ea:e3:e8:d8:f7:2d:57:5f:c4:12:aa:89:51:85:3d:
                    6f:cf:4c:ba:21:c0:cd:4c:56:fb:c4:d5:d5:0b:26:
                    4b:7f:d4:12:5c:c8:36:34:78:24:c1:76:06:8f:f8:
                    f1:ca:82:24:87:cc:8a:48:72:ea:72:fd:48:4c:4b:
                    cd:ec:18:69:ab:a7:4c:0c:f6:58:98:55:3b:ab:89:
                    f7:7d:37:52:fa:f2:cb:f9:0b:12:84:09:3e:9d:d0:
                    64:86:55:da:31:16:47:65:55:9d:cb:c1:cb:bd:2a:
                    99:eb:2b:00:4a:42:92:3c:d3:ec:22:eb:6f:2e:cf:
                    df:23:75:a4:69:3d:77:ca:6a:6b:50:cb:c0:7d:3c:
                    c5:99:5c:a5:51:30:5e:99:9a:55:5f:ae:72:d9:c8:
                    e1:1a:47:96:c0:9b:8c:6a:af:93:41:fa:e4:49:28:
                    ed:92:a3:a3:91:ff:75:93:c9:e7:d2:b4:5e:fc:a0:
                    96:d3:94:77:da:5e:ba:f7:70:f2:41:e6:1f:70:5a:
                    4d:25:6d:f6:ad:6e:5f:c6:9a:a4:ce:93:b0:01:f4:
                    a9:b4:90:f2:3d:c5:cc:aa:00:ed:f7:44:b8:8f:01:
                    68:82:c7:8e:20:1c:76:16:96:ba:99:dc:af:f6:71:
                    4e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6C:D7:42:A2:07:5C:EB:1E:39:21:6B:13:FE:EA:0B:76:C9:92:F2
            X509v3 Authority Key Identifier:
                keyid:3F:25:0E:6F:BC:F5:BE:6D:ED:38:51:E0:5B:02:4B:B8:3D:E7:50:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/0/3F250E6FBCF5BE6DED3851E05B024BB83DE750AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F250E6FBCF5BE6DED3851E05B024BB83DE750AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/0/323830343a343662343a3a2f33322d313238203d3e20323637303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:3c:49:f5:f8:02:a0:74:ac:2d:30:3e:4f:a8:d4:42:3b:50:
         46:24:c8:b2:fe:ab:24:dd:9d:dd:53:20:23:5b:08:21:ee:1c:
         75:7c:7f:46:8c:b9:c3:42:45:6b:46:cf:7d:ef:78:5d:ee:70:
         a1:63:5d:17:09:4e:4b:fa:45:34:b7:b6:8e:59:d7:4f:b2:f5:
         42:0d:26:72:76:7d:cf:d1:f1:67:cb:83:34:c3:88:18:30:d3:
         8a:3d:46:f1:42:f8:45:2a:7e:ac:6a:9e:3c:86:30:2b:27:91:
         82:a2:b8:80:97:16:d9:3b:f8:b0:1c:8d:45:4d:64:bd:af:75:
         00:15:f4:25:d2:87:44:ae:bd:53:0b:1b:f4:a2:38:31:ee:e3:
         11:4d:3f:6f:3d:3b:6d:1f:b9:a8:c7:1f:f0:24:e3:48:df:8a:
         b6:b5:e0:14:db:da:59:47:b7:22:34:34:cc:77:5b:a2:ab:6b:
         37:6f:ac:66:e0:4a:74:d5:13:46:9b:c6:7b:88:62:65:57:75:
         11:8d:6f:23:ec:8e:d0:35:db:00:24:56:8a:98:f0:1a:6d:9a:
         33:e6:67:99:ae:ae:e3:d7:81:6e:14:bd:f3:fa:5a:99:8c:07:
         1d:2a:1f:b3:59:2b:0f:2e:cc:73:0b:72:7c:0f:4f:67:74:56:
         c6:ac:89:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:36:16 2026 by rpki-client