Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/323830343a346435633a3a2f33322d3334203d3e20323638313932.roa
File:                     323830343a346435633a3a2f33322d3334203d3e20323638313932.roa (raw, json)
Hash identifier:          QCWNIP+obEnCN+TrtmX7vj0VlRAJ83suk46TdViw9/U=
Subject key identifier:   51:94:8E:67:F7:16:14:EA:99:E5:52:3A:7F:4B:4A:CF:50:11:3C:D5
Certificate issuer:       /CN=A955D3EDFAB3E2590F766F0D4CF5D8B31C713836
Certificate serial:       7BBC6DD024B65133C14939C50BE479B208A09CBD
Authority key identifier: A9:55:D3:ED:FA:B3:E2:59:0F:76:6F:0D:4C:F5:D8:B3:1C:71:38:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/323830343a346435633a3a2f33322d3334203d3e20323638313932.roa
Signing time:             Thu 19 Feb 2026 20:30:56 +0000
ROA not before:           Thu 19 Feb 2026 20:25:56 +0000
ROA not after:            Thu 18 Feb 2027 20:30:56 +0000
asID:                     268192
IP address blocks:        2804:4d5c::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.crl
                          rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:38:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:bc:6d:d0:24:b6:51:33:c1:49:39:c5:0b:e4:79:b2:08:a0:9c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A955D3EDFAB3E2590F766F0D4CF5D8B31C713836
        Validity
            Not Before: Feb 19 20:25:56 2026 GMT
            Not After : Feb 18 20:30:56 2027 GMT
        Subject: CN=51948E67F71614EA99E5523A7F4B4ACF50113CD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:47:03:48:c2:f3:09:fb:85:43:8a:8e:a1:2d:
                    30:f8:19:9a:1b:1a:2c:b0:b7:7c:e0:c2:ff:c2:a9:
                    c8:f9:b5:8a:e5:94:1a:45:67:51:e8:2f:e6:16:9b:
                    93:0d:ce:84:fa:bd:d8:d3:db:98:87:d9:3d:43:45:
                    8b:64:24:66:ea:a8:4b:b0:4d:9a:b3:3e:87:37:d1:
                    e9:44:fa:25:cc:51:a0:ce:13:af:9f:8d:8f:51:76:
                    75:15:ec:2e:86:4f:06:e6:86:8d:dc:6f:b2:1b:7d:
                    05:c4:2f:55:a6:bd:06:53:75:c0:85:32:51:e0:b4:
                    96:49:fd:71:bd:85:bd:27:3b:63:b7:c2:7b:2d:7a:
                    f9:b4:56:f2:fb:7f:bb:ed:58:2a:f2:74:0d:f1:14:
                    dd:59:9d:0e:f4:e7:ff:d0:de:71:86:1e:4e:79:b0:
                    5c:3a:e0:5a:96:fe:a2:bc:0e:49:69:77:9f:54:08:
                    9a:08:98:53:90:8d:81:01:7b:e4:a5:02:ef:e9:4e:
                    89:ad:c9:85:62:ec:66:72:5d:be:50:1b:a6:8d:17:
                    a8:8d:a3:92:cc:01:dd:b0:f9:47:7a:ad:ca:56:37:
                    53:3d:49:9b:c0:88:f3:f8:8a:cb:40:94:59:63:03:
                    13:e7:58:d0:ca:97:a0:6f:04:d0:31:5d:30:29:5b:
                    c2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:94:8E:67:F7:16:14:EA:99:E5:52:3A:7F:4B:4A:CF:50:11:3C:D5
            X509v3 Authority Key Identifier:
                keyid:A9:55:D3:ED:FA:B3:E2:59:0F:76:6F:0D:4C:F5:D8:B3:1C:71:38:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/323830343a346435633a3a2f33322d3334203d3e20323638313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:f7:c9:4a:42:0b:5b:b6:c9:1d:d2:c5:fd:93:83:10:a3:8a:
         52:47:6f:3a:f1:b4:84:95:91:2f:a4:0c:62:eb:6e:be:76:76:
         9e:fc:3f:8d:ee:96:75:58:96:d9:03:32:ca:48:90:f6:d8:27:
         0d:70:24:e3:ba:0b:91:d9:a2:c6:70:99:68:eb:d7:5a:39:2d:
         cb:32:69:02:9f:b1:63:56:01:c2:4e:f0:e0:03:d4:f9:ab:f1:
         df:9a:37:f5:90:a6:10:a5:90:a0:97:bb:86:85:34:8e:96:e5:
         0a:ae:15:2d:4f:cc:44:89:32:b0:eb:d2:81:a6:d6:66:8d:7e:
         7d:bd:f8:f0:d9:d6:41:97:f5:a4:f1:29:26:40:c7:d1:5b:ef:
         04:e6:58:53:9f:0f:1f:01:4d:df:48:48:10:fb:1d:0a:e1:2f:
         e6:50:09:2b:2d:9e:21:e7:8b:89:11:c8:91:43:16:1c:c6:34:
         06:54:8d:63:2b:05:53:28:11:e7:32:8e:73:2f:da:db:cd:06:
         bd:dd:d9:0f:61:7f:9c:82:a5:f4:5c:92:77:65:b8:73:03:36:
         76:37:87:36:ff:5c:fa:24:a9:f4:e8:cd:35:e0:f3:90:f8:27:
         b0:84:36:6b:38:59:cb:c9:75:12:51:bc:1c:5c:02:74:3d:88:
         be:a6:61:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 06:43:44 2026 by rpki-client