Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/1/323830343a346632343a383030303a3a2f33332d3333203d3e20323638333037.roa
File:                     323830343a346632343a383030303a3a2f33332d3333203d3e20323638333037.roa (raw, json)
Hash identifier:          boRHjQdC+CYX2zinenKRcUgl18e1fY6L75p8JSd/+TM=
Subject key identifier:   63:3F:3C:53:65:12:D6:CA:82:C7:3C:97:9F:D9:4A:61:53:FA:CC:3C
Certificate issuer:       /CN=D0441492A402DE782957BD53548E564CE233FB42
Certificate serial:       0F93C9C9F100FE52D8F59D84926CDA84942F6618
Authority key identifier: D0:44:14:92:A4:02:DE:78:29:57:BD:53:54:8E:56:4C:E2:33:FB:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0441492A402DE782957BD53548E564CE233FB42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/1/323830343a346632343a383030303a3a2f33332d3333203d3e20323638333037.roa
Signing time:             Mon 09 Feb 2026 15:01:52 +0000
ROA not before:           Mon 09 Feb 2026 14:56:52 +0000
ROA not after:            Mon 08 Feb 2027 15:01:52 +0000
asID:                     268307
IP address blocks:        2804:4f24:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/1/D0441492A402DE782957BD53548E564CE233FB42.crl
                          rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/1/D0441492A402DE782957BD53548E564CE233FB42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0441492A402DE782957BD53548E564CE233FB42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:93:c9:c9:f1:00:fe:52:d8:f5:9d:84:92:6c:da:84:94:2f:66:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0441492A402DE782957BD53548E564CE233FB42
        Validity
            Not Before: Feb  9 14:56:52 2026 GMT
            Not After : Feb  8 15:01:52 2027 GMT
        Subject: CN=633F3C536512D6CA82C73C979FD94A6153FACC3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0d:b3:01:6a:ec:73:0c:e4:01:f0:82:20:f4:
                    36:76:2e:fd:98:d2:19:41:15:94:ee:15:6b:b1:11:
                    20:ca:89:0d:3a:c3:f5:e1:34:5a:46:73:db:93:5f:
                    73:43:1d:6f:63:e2:b7:34:41:8d:af:a2:ef:0b:44:
                    e9:97:22:12:3c:d4:1a:cb:16:af:a9:29:12:93:ce:
                    fa:61:19:72:59:58:96:80:00:2f:9e:fc:1d:82:c0:
                    20:95:72:91:b1:a1:bc:3e:a1:cd:42:e4:38:b5:3e:
                    24:c5:98:20:11:b0:b4:bb:6e:15:bd:3b:6f:39:14:
                    e1:7e:b4:8b:b6:34:e6:ec:a1:13:be:b9:7e:dd:81:
                    43:36:a7:28:ba:2d:12:e5:a5:a8:d7:c3:70:68:f4:
                    5c:86:94:0b:14:7c:06:5e:df:f5:de:44:6b:34:b5:
                    c0:e8:4e:5f:d6:5a:0f:be:cd:4c:cf:8b:09:bf:a2:
                    ed:e0:f8:08:d2:05:7b:56:7b:4a:c6:68:72:ae:1d:
                    af:e7:7a:95:8a:f9:4b:3f:3e:18:38:75:70:fd:e3:
                    8f:a6:69:d1:0e:f0:27:6f:75:a7:2f:97:1f:f1:c4:
                    9f:f9:6a:10:ee:8d:0f:b7:98:56:86:0c:88:d4:54:
                    19:80:b5:b8:8f:d9:23:d8:c7:0c:2d:b9:fc:2c:e0:
                    94:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3F:3C:53:65:12:D6:CA:82:C7:3C:97:9F:D9:4A:61:53:FA:CC:3C
            X509v3 Authority Key Identifier:
                keyid:D0:44:14:92:A4:02:DE:78:29:57:BD:53:54:8E:56:4C:E2:33:FB:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/1/D0441492A402DE782957BD53548E564CE233FB42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0441492A402DE782957BD53548E564CE233FB42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/1/323830343a346632343a383030303a3a2f33332d3333203d3e20323638333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f24:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         4c:96:19:fb:bf:f6:21:d0:f4:5f:eb:05:12:ed:91:2b:6e:49:
         47:0f:dd:04:e3:12:9d:3f:55:e1:c6:f2:93:8a:70:58:41:bb:
         91:d3:7c:7f:f7:b2:ca:5f:d9:19:bd:f1:cd:66:cf:fd:91:d4:
         34:85:d2:d9:f3:54:a2:f2:10:7a:6e:f3:f1:88:c3:7f:a4:ed:
         5a:9d:18:80:32:f6:81:c9:99:66:09:0c:9a:71:80:62:00:e3:
         1d:f0:57:5f:3d:26:97:89:ef:9c:e0:18:53:e5:d7:c1:95:a0:
         37:90:1f:5a:2f:80:38:b9:ee:c4:69:b1:46:2f:9c:0f:7b:e9:
         38:39:33:4c:6b:8c:4e:9e:e4:df:c9:e7:f7:02:ab:c7:d4:be:
         96:3f:db:9f:c8:8e:da:72:bc:db:ea:5e:44:5c:24:b1:36:7d:
         8f:5a:0a:26:15:1b:3f:8d:2c:35:45:14:42:bb:c6:61:49:65:
         b7:1f:99:62:a7:fa:09:f1:20:20:41:10:0b:2d:2f:e4:63:12:
         d6:8c:10:7d:93:6e:f8:c9:1c:20:6b:1f:6d:6d:e2:b8:72:01:
         88:95:b9:d1:2e:4c:49:e2:fd:28:bb:df:2a:2e:5b:c2:a9:98:
         39:d3:dd:6f:25:d3:94:d2:70:17:43:3f:dc:6f:d4:a0:8b:70:
         f6:0b:0d:c1
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUD5PJyfEA/lLY9Z2EkmzahJQvZhgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA0NDE0OTJBNDAyREU3ODI5NTdCRDUzNTQ4RTU2NENF
MjMzRkI0MjAeFw0yNjAyMDkxNDU2NTJaFw0yNzAyMDgxNTAxNTJaMDMxMTAvBgNV
BAMTKDYzM0YzQzUzNjUxMkQ2Q0E4MkM3M0M5NzlGRDk0QTYxNTNGQUNDM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMDbMBauxzDOQB8IIg9DZ2Lv2Y
0hlBFZTuFWuxESDKiQ06w/XhNFpGc9uTX3NDHW9j4rc0QY2vou8LROmXIhI81BrL
Fq+pKRKTzvphGXJZWJaAAC+e/B2CwCCVcpGxobw+oc1C5Di1PiTFmCARsLS7bhW9
O285FOF+tIu2NObsoRO+uX7dgUM2pyi6LRLlpajXw3Bo9FyGlAsUfAZe3/XeRGs0
tcDoTl/WWg++zUzPiwm/ou3g+AjSBXtWe0rGaHKuHa/nepWK+Us/Phg4dXD944+m
adEO8Cdvdacvlx/xxJ/5ahDujQ+3mFaGDIjUVBmAtbiP2SPYxwwtufws4JRfAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUYz88U2US1sqCxzyXn9lKYVP6zDwwHwYDVR0j
BBgwFoAU0EQUkqQC3ngpV71TVI5WTOIz+0IwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FcFdUZUQ3NEszajY3MUxVNnR1ckN4WUZaaEhpNnFQektMSEs5ZzJFMXph
LzEvRDA0NDE0OTJBNDAyREU3ODI5NTdCRDUzNTQ4RTU2NENFMjMzRkI0Mi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9EMDQ0MTQ5MkE0MDJERTc4Mjk1
N0JENTM1NDhFNTY0Q0UyMzNGQjQyLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
cFdUZUQ3NEszajY3MUxVNnR1ckN4WUZaaEhpNnFQektMSEs5ZzJFMXphLzEvMzIz
ODMwMzQzYTM0NjYzMjM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNkM2Uy
MDMyMzYzODMzMzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygETySAMA0GCSqGSIb3DQEBCwUAA4IB
AQBMlhn7v/Yh0PRf6wUS7ZErbklHD90E4xKdP1XhxvKTinBYQbuR03x/97LKX9kZ
vfHNZs/9kdQ0hdLZ81Si8hB6bvPxiMN/pO1anRiAMvaByZlmCQyacYBiAOMd8Fdf
PSaXie+c4BhT5dfBlaA3kB9aL4A4ue7EabFGL5wPe+k4OTNMa4xOnuTfyef3AqvH
1L6WP9ufyI7acrzb6l5EXCSxNn2PWgomFRs/jSw1RRRCu8ZhSWW3H5lip/oJ8SAg
QRALLS/kYxLWjBB9k274yRwgax9tbeK4cgGIlbnRLkxJ4v0ou98qLlvCqZg5091v
JdOU0nAXQz/cb9Sgi3D2Cw3B
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:36:07 2026 by rpki-client