Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/323830343a356338343a3a2f33322d313238203d3e20323638393133.roa
File:                     323830343a356338343a3a2f33322d313238203d3e20323638393133.roa (raw, json)
Hash identifier:          4psnTXdLSw12WNhcpdrrRdiW1o6SQJjb27/rcdEonew=
Subject key identifier:   78:04:47:97:42:8B:E6:0E:C2:FA:BC:23:A8:95:74:BA:D7:B2:AB:97
Certificate issuer:       /CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1
Certificate serial:       013068EC16566349734BE1B5C6BFFD140DD1B49C
Authority key identifier: 3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/323830343a356338343a3a2f33322d313238203d3e20323638393133.roa
Signing time:             Thu 05 Feb 2026 16:03:13 +0000
ROA not before:           Thu 05 Feb 2026 15:58:13 +0000
ROA not after:            Thu 04 Feb 2027 16:03:13 +0000
asID:                     268913
IP address blocks:        2804:5c84::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl
                          rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:30:68:ec:16:56:63:49:73:4b:e1:b5:c6:bf:fd:14:0d:d1:b4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1
        Validity
            Not Before: Feb  5 15:58:13 2026 GMT
            Not After : Feb  4 16:03:13 2027 GMT
        Subject: CN=78044797428BE60EC2FABC23A89574BAD7B2AB97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5a:d6:0e:9e:57:f8:45:c7:b2:29:90:a2:a1:
                    c6:f0:09:b7:d0:51:dd:54:84:5a:0f:8f:0a:3b:ce:
                    1e:68:95:8e:09:e2:5a:fa:60:b5:56:a2:ad:49:fe:
                    1e:75:e2:02:2b:c9:66:5c:de:cc:5d:1f:d0:6d:39:
                    1b:34:be:dd:74:6b:2a:e3:ac:6a:8d:1c:e4:1c:bd:
                    d2:28:2e:2b:26:56:d6:48:95:a3:54:bc:d9:7c:e7:
                    69:e2:c4:7b:90:29:aa:38:43:89:63:36:c8:2f:40:
                    93:50:c8:bc:cf:06:c7:83:b3:e1:bc:6a:72:2d:ad:
                    79:fd:96:e5:28:b9:51:3e:e7:ea:15:fe:68:d5:b6:
                    44:89:e2:39:83:46:a9:8b:72:c5:a0:56:74:91:6f:
                    7f:47:2c:7d:4a:4f:f1:a0:f4:54:4a:74:e3:18:3b:
                    89:27:eb:1f:c5:92:f5:3d:13:d6:85:65:ee:b2:f5:
                    2b:38:89:0e:8c:9c:df:c0:79:a9:87:2a:8d:e5:a1:
                    73:6b:f2:4c:9e:4b:1f:8d:4a:9e:91:0e:f0:90:1d:
                    b0:a9:68:3f:79:10:6e:8f:0e:9c:5a:63:02:37:35:
                    9c:55:3c:3b:6e:b3:3d:15:90:31:50:87:ce:b4:5d:
                    51:6f:85:f5:06:3c:75:34:62:51:33:cc:90:07:e9:
                    83:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:04:47:97:42:8B:E6:0E:C2:FA:BC:23:A8:95:74:BA:D7:B2:AB:97
            X509v3 Authority Key Identifier:
                keyid:3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/323830343a356338343a3a2f33322d313238203d3e20323638393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c84::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:0e:73:4c:dd:14:ad:78:c2:bd:97:17:38:e2:b6:83:77:79:
         db:2a:7e:53:03:6f:92:74:6c:b3:72:86:75:e5:6c:8d:50:6e:
         e8:27:61:49:de:2a:a7:ce:88:12:f7:99:52:fa:f0:ac:4e:3e:
         44:0d:65:a3:32:d3:56:fd:67:45:87:75:d2:e0:9b:38:b5:75:
         7d:4a:93:dc:de:a1:8c:e7:44:54:69:8c:80:1c:d0:a0:82:cb:
         34:11:4d:19:bb:b9:69:a7:48:b6:1b:73:e7:ba:32:6e:90:4d:
         99:c3:a5:d7:cc:21:6a:7d:57:ea:39:ea:32:59:af:56:2a:f7:
         51:2e:14:76:a0:39:45:76:e1:26:ef:46:08:d1:f8:61:59:bc:
         db:6c:ff:d3:e9:bf:0e:aa:8b:c9:a4:b0:c7:ea:9b:1a:e1:c0:
         33:ee:5a:a1:1b:70:64:7a:93:df:ec:13:65:cc:99:3c:e1:0c:
         5a:da:bc:12:84:f5:a4:1d:cf:e1:73:46:b2:3c:9f:67:58:dc:
         30:5d:b7:2f:8b:eb:72:80:7c:53:61:e6:50:de:f2:41:97:56:
         76:b6:1a:18:d8:52:a5:8a:28:08:a2:3d:60:09:97:e0:ad:21:
         49:8d:d9:7d:d4:a4:78:69:e1:f9:60:b4:e8:7a:e9:fa:8f:59:
         f0:9c:77:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:54:26 2026 by rpki-client