Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/323830343a373964343a3a2f33322d3336203d3e20323731333330.roa
File:                     323830343a373964343a3a2f33322d3336203d3e20323731333330.roa (raw, json)
Hash identifier:          0MMOAs1MWxCvekbrZ3YR/igWWET3IbGvNy0LegCBu28=
Subject key identifier:   8F:E4:BE:47:E5:E1:2D:32:4F:F0:FD:99:1C:24:FE:C3:DB:99:61:87
Certificate issuer:       /CN=BB0A1EEFD67F36B7D7F60A6431C72C8138020661
Certificate serial:       192600D50E7700F447DA9489DE3285D8494EC213
Authority key identifier: BB:0A:1E:EF:D6:7F:36:B7:D7:F6:0A:64:31:C7:2C:81:38:02:06:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/323830343a373964343a3a2f33322d3336203d3e20323731333330.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     271330
IP address blocks:        2804:79d4::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl
                          rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:26:00:d5:0e:77:00:f4:47:da:94:89:de:32:85:d8:49:4e:c2:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB0A1EEFD67F36B7D7F60A6431C72C8138020661
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b7:37:6a:81:e7:6e:b0:72:16:8b:28:05:b4:
                    d4:e9:fe:0f:ef:36:b4:d3:a3:0d:17:d7:ba:56:8c:
                    3b:88:b7:f4:e9:8b:f6:72:d6:26:bb:f8:5c:e4:71:
                    bf:fb:b8:5e:07:23:67:6b:23:2b:64:e9:67:9d:d6:
                    b7:a8:fe:cf:d5:fd:0e:fa:c7:7d:6e:96:c3:c8:60:
                    2c:fa:67:59:47:07:42:a6:8a:e1:08:7f:9d:e3:0a:
                    75:9c:1c:3d:10:73:22:4e:e3:ad:bc:e0:84:99:6d:
                    0d:27:3b:79:11:42:99:fa:f5:9e:ce:c4:ea:c9:3c:
                    c2:d5:4c:d7:34:45:1c:1e:f0:5c:fb:31:ad:e5:e7:
                    53:5f:11:0f:06:a4:42:0e:dc:47:a0:9d:60:8c:38:
                    00:b5:c6:78:9e:d1:77:0b:28:c8:98:9c:1a:2d:fb:
                    af:51:11:36:a3:72:83:17:1b:f4:36:d6:96:b0:93:
                    87:3e:3f:96:8a:e5:85:69:5a:96:0c:71:71:88:51:
                    21:32:f8:5c:8a:df:d6:cb:ba:f2:db:6c:10:04:58:
                    13:b3:90:99:3a:15:99:cb:4f:79:03:f9:9e:32:91:
                    fa:5b:d0:5e:da:74:89:97:ca:c2:8d:da:8f:cd:03:
                    f3:ab:e1:1c:b1:a2:cf:0e:35:7c:8d:8d:30:99:5d:
                    4a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E4:BE:47:E5:E1:2D:32:4F:F0:FD:99:1C:24:FE:C3:DB:99:61:87
            X509v3 Authority Key Identifier:
                keyid:BB:0A:1E:EF:D6:7F:36:B7:D7:F6:0A:64:31:C7:2C:81:38:02:06:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/323830343a373964343a3a2f33322d3336203d3e20323731333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:11:66:c3:16:14:68:22:3b:5f:0a:00:1d:48:f6:c2:f3:2f:
         63:55:f5:bc:4d:0c:40:d2:9c:3c:d4:10:e0:fb:1d:80:52:2f:
         34:a8:1e:fa:69:c8:7b:ea:55:89:ca:01:1a:7f:e0:27:e6:d5:
         64:a8:3d:e3:d0:87:64:3d:b7:95:f7:5d:87:b2:90:92:5c:50:
         06:a7:de:9a:1c:38:7f:08:12:0b:dd:b5:8c:83:3c:6b:f8:c5:
         7c:2a:b4:64:9c:ba:43:fc:09:df:3a:f0:6d:42:17:81:c8:f9:
         6b:a1:fb:b3:3f:1f:fc:59:c1:a0:2c:73:2c:e3:9b:63:5c:cd:
         1b:af:e5:67:9f:c1:a3:7e:28:46:4d:10:c5:0d:3e:35:2e:81:
         ac:fd:3f:38:51:26:69:3c:d6:4e:c4:d9:cb:ad:22:de:24:b2:
         8e:36:91:49:e6:cc:a0:10:60:30:fd:b1:67:2b:ac:20:ba:d8:
         1d:f4:e1:37:71:6f:72:2d:c4:72:60:b8:d3:ea:b3:f7:f0:7c:
         6e:ba:dc:90:c4:3d:66:62:d0:9f:47:8e:1c:f9:7a:8e:e8:92:
         75:bf:90:43:7b:65:0e:dc:8e:1d:dc:4b:11:ec:19:54:9e:3f:
         3e:37:b0:df:df:12:34:ff:94:99:ea:dc:0b:da:cc:23:46:25:
         95:71:4e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:49 2026 by rpki-client