Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/323830343a6131383a3a2f33332d3334203d3e20323633303232.roa
File:                     323830343a6131383a3a2f33332d3334203d3e20323633303232.roa (raw, json)
Hash identifier:          yjK9/q0VgcOqLJIXxIANOWuPtctIThLNlbqPbh2mi6w=
Subject key identifier:   48:FF:06:18:35:4C:36:A2:02:F5:8B:12:22:FD:72:69:36:9D:78:45
Certificate issuer:       /CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Certificate serial:       6330AB58A98346E1D0C068270EB4DDE97B2593B1
Authority key identifier: BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/323830343a6131383a3a2f33332d3334203d3e20323633303232.roa
Signing time:             Wed 18 Feb 2026 04:19:54 +0000
ROA not before:           Wed 18 Feb 2026 04:14:54 +0000
ROA not after:            Wed 17 Feb 2027 04:19:54 +0000
asID:                     263022
IP address blocks:        2804:a18::/33 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 18:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:30:ab:58:a9:83:46:e1:d0:c0:68:27:0e:b4:dd:e9:7b:25:93:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
        Validity
            Not Before: Feb 18 04:14:54 2026 GMT
            Not After : Feb 17 04:19:54 2027 GMT
        Subject: CN=48FF0618354C36A202F58B1222FD7269369D7845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:63:1d:d4:ed:2d:21:9c:b7:34:99:91:40:43:
                    60:22:f2:fa:d4:83:5a:47:e7:9a:1e:3a:e1:cb:73:
                    21:af:3e:87:af:4e:9b:59:83:7c:97:d9:ad:63:e8:
                    0d:ff:a8:86:ea:b6:9a:9f:4d:5d:22:79:2a:a7:6c:
                    a3:89:60:47:c4:d0:08:6f:81:d5:4c:eb:b3:7d:90:
                    5e:9c:99:cc:b3:e2:2a:5d:59:76:0b:47:3d:55:37:
                    20:4d:96:9e:7a:77:d9:0a:f4:28:ab:60:88:5c:c9:
                    64:fb:52:b9:48:be:0c:c3:5e:fe:a1:14:1e:11:95:
                    8c:57:75:25:65:f9:21:0f:4e:9e:03:6d:03:5e:58:
                    0d:e1:06:8f:8b:8f:4f:2c:4b:c9:9e:71:ff:5d:27:
                    3a:fa:41:70:c2:9c:64:92:45:7d:6a:1c:e2:ee:97:
                    15:8f:4a:50:cc:61:4c:43:ad:5b:32:a6:c7:8b:d8:
                    78:2b:5f:34:aa:bc:78:f6:59:9a:85:5b:f0:ae:9c:
                    3e:7e:d2:d6:66:45:b1:b3:fe:42:85:4f:f8:80:2d:
                    e8:2e:19:d2:bc:8b:eb:86:e6:9b:90:ff:f8:68:10:
                    47:a9:e6:41:2f:b1:52:d1:5f:5d:3f:a0:86:c9:91:
                    04:52:fb:91:2d:d1:72:a2:e3:84:1d:e3:5f:92:32:
                    dc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FF:06:18:35:4C:36:A2:02:F5:8B:12:22:FD:72:69:36:9D:78:45
            X509v3 Authority Key Identifier:
                keyid:BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/323830343a6131383a3a2f33332d3334203d3e20323633303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a18::/33

    Signature Algorithm: sha256WithRSAEncryption
         7c:10:2d:bb:eb:90:94:b1:69:34:3d:7d:e5:e1:7c:29:4c:b9:
         19:c7:2b:43:80:05:6c:5f:1e:d0:0c:43:1c:0d:ef:88:69:9c:
         61:74:6d:bb:b9:8a:0d:f8:97:1b:5d:a7:57:28:7c:48:cd:14:
         06:12:29:1a:6b:61:de:79:db:8a:f6:d1:05:21:87:bb:b3:b5:
         6c:65:ac:a2:d3:d2:be:d6:67:31:92:74:94:9b:27:6f:cb:7b:
         39:d7:81:5f:b0:5a:a2:f9:1a:68:a6:d3:7a:97:b7:7e:cf:ec:
         c6:d6:df:e1:5d:ed:9c:5d:85:9f:4c:31:40:0d:af:26:a1:74:
         91:aa:02:9f:11:a0:a3:aa:2a:03:c2:98:36:7e:80:38:ab:7d:
         bc:49:d0:1d:e2:bf:2c:cd:45:f6:5e:89:ce:a8:64:b3:a6:93:
         ec:2a:03:a2:b7:62:69:20:d8:60:6f:67:9d:d9:2f:06:07:ca:
         eb:55:0e:8a:f7:16:65:15:ca:57:5c:f8:a2:5b:9a:80:8e:1c:
         2a:e7:d3:b6:e3:85:6d:21:d1:69:9b:f5:e7:67:1a:ed:4d:08:
         be:98:90:58:20:bd:13:b2:0d:a2:e6:35:79:98:ea:d6:65:98:
         11:5c:12:25:cb:70:11:ed:09:a2:cc:a5:cb:3c:86:94:26:ee:
         f5:8f:7c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:53:38 2026 by rpki-client