Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6tVWce4eude5bmLkw6PyHDBjYmi8XfijKTph2jqDLD2/0/323830343a393738383a3a2f33322d3438203d3e20323735363239.roa
File:                     323830343a393738383a3a2f33322d3438203d3e20323735363239.roa (raw, json)
Hash identifier:          5MijsvrS9O+CPA2wh4pX6gIIJ/nm2GIEpkvBLyaLqnQ=
Subject key identifier:   14:2C:B3:F3:15:EF:58:05:4A:C9:0C:EB:26:89:91:8C:B7:7B:0F:B6
Certificate issuer:       /CN=A44E649A99F20601703403DC7F7B180272110BD4
Certificate serial:       174F2D7ECD76F3174323A60B4C97A7EF4A23A7F5
Authority key identifier: A4:4E:64:9A:99:F2:06:01:70:34:03:DC:7F:7B:18:02:72:11:0B:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A44E649A99F20601703403DC7F7B180272110BD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6tVWce4eude5bmLkw6PyHDBjYmi8XfijKTph2jqDLD2/0/323830343a393738383a3a2f33322d3438203d3e20323735363239.roa
Signing time:             Tue 10 Feb 2026 19:57:19 +0000
ROA not before:           Tue 10 Feb 2026 19:52:19 +0000
ROA not after:            Tue 09 Feb 2027 19:57:19 +0000
asID:                     275629
IP address blocks:        2804:9788::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6tVWce4eude5bmLkw6PyHDBjYmi8XfijKTph2jqDLD2/0/A44E649A99F20601703403DC7F7B180272110BD4.crl
                          rsync://rpki-repo.registro.br/repo/F6tVWce4eude5bmLkw6PyHDBjYmi8XfijKTph2jqDLD2/0/A44E649A99F20601703403DC7F7B180272110BD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A44E649A99F20601703403DC7F7B180272110BD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 14:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:4f:2d:7e:cd:76:f3:17:43:23:a6:0b:4c:97:a7:ef:4a:23:a7:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A44E649A99F20601703403DC7F7B180272110BD4
        Validity
            Not Before: Feb 10 19:52:19 2026 GMT
            Not After : Feb  9 19:57:19 2027 GMT
        Subject: CN=142CB3F315EF58054AC90CEB2689918CB77B0FB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:62:b5:25:8f:cd:be:8d:41:68:0e:68:1f:f5:
                    2b:c0:aa:cc:a8:f2:7e:38:b1:20:96:e5:82:66:7a:
                    0e:65:0a:57:bd:49:15:e2:ad:98:cd:7e:c3:a8:6f:
                    c7:2c:9a:f4:d3:83:c2:f8:ed:c2:d3:cd:7f:d8:13:
                    b6:01:01:4f:eb:73:9c:64:f6:de:6f:c7:46:67:95:
                    20:73:a6:7d:bc:8f:b8:01:3e:e7:99:bb:f7:b8:7f:
                    dc:ce:9e:72:d7:cb:b5:b4:0a:d5:91:2c:01:c0:f7:
                    0c:d9:fd:6b:4c:1e:e6:de:5a:2b:92:41:8f:39:1a:
                    13:b8:4e:4d:fb:a1:84:da:7b:c8:99:01:91:9d:6d:
                    a4:4b:9c:8b:61:ed:30:c8:60:e4:47:0b:ef:e4:19:
                    75:72:cb:ff:5e:c5:37:1c:87:96:76:9f:c7:e4:97:
                    f4:8c:c2:7d:45:8f:33:c9:42:8a:36:8e:59:51:97:
                    2a:f6:2b:a6:b4:d0:64:86:46:7f:ae:e5:20:ab:dd:
                    28:9c:66:50:2d:35:52:98:73:04:11:67:26:60:f2:
                    3b:0c:98:86:63:87:d4:04:a0:de:f1:bf:37:9c:8a:
                    4f:d6:d6:89:a1:c1:00:47:3c:ca:65:97:c6:24:88:
                    c7:0c:6b:52:09:93:7b:b4:c2:c5:36:41:78:06:74:
                    91:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2C:B3:F3:15:EF:58:05:4A:C9:0C:EB:26:89:91:8C:B7:7B:0F:B6
            X509v3 Authority Key Identifier:
                keyid:A4:4E:64:9A:99:F2:06:01:70:34:03:DC:7F:7B:18:02:72:11:0B:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6tVWce4eude5bmLkw6PyHDBjYmi8XfijKTph2jqDLD2/0/A44E649A99F20601703403DC7F7B180272110BD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A44E649A99F20601703403DC7F7B180272110BD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6tVWce4eude5bmLkw6PyHDBjYmi8XfijKTph2jqDLD2/0/323830343a393738383a3a2f33322d3438203d3e20323735363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9788::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:ae:af:fa:03:08:54:eb:d9:c3:da:71:bf:cd:95:01:87:c8:
         62:85:53:4f:ea:24:43:42:8e:73:b7:0b:dc:27:9b:b2:53:5f:
         6f:92:f8:5f:56:34:23:5b:50:cc:6d:73:ee:5b:cf:e2:65:82:
         c8:65:52:ae:b1:6f:e4:20:3f:be:b8:15:c7:f1:93:52:88:f8:
         bf:99:3e:e9:af:d5:61:d1:5c:00:d3:16:3a:6b:13:36:75:c8:
         ef:6a:28:38:33:4a:73:35:53:3e:3f:b5:e9:5b:14:e0:91:0c:
         e5:07:b5:07:34:24:e8:ae:05:f4:be:04:9a:6f:dd:be:79:29:
         92:de:71:e5:4b:89:86:b1:c7:f5:f4:be:21:d4:df:eb:65:32:
         d0:16:c7:0b:85:4a:5f:57:70:03:74:21:97:4b:bd:c7:28:0a:
         c5:c3:6e:06:88:bd:40:e6:26:85:ec:9a:0f:a9:8a:9e:de:18:
         e8:4d:d8:e2:25:86:93:fb:ae:5d:43:ec:50:cd:21:36:84:02:
         2e:44:f9:38:b0:f9:ba:f5:88:48:9b:fe:1c:c4:6d:61:6d:65:
         10:24:b8:92:34:a0:37:f2:52:51:df:26:73:3e:14:e5:98:d2:
         fd:37:82:fb:1d:e7:e1:25:a5:48:51:9d:a1:0b:dc:91:9d:3b:
         4f:b6:e5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:30:35 2026 by rpki-client