Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/323830343a346633383a3a2f33322d3332203d3e20323638333132.roa
File:                     323830343a346633383a3a2f33322d3332203d3e20323638333132.roa (raw, json)
Hash identifier:          T0Qf0he0SYVvTvjV370TqIwbc6SDf9zX4gvBac0AK9s=
Subject key identifier:   A8:32:8C:33:0B:F9:1C:CC:09:33:4A:C5:ED:4A:0C:A8:3C:25:36:FD
Certificate issuer:       /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Certificate serial:       47D95B297700F28BE37D0791FE8BA8A5B7CF5DE5
Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/323830343a346633383a3a2f33322d3332203d3e20323638333132.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     268312
IP address blocks:        2804:4f38::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
                          rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d9:5b:29:77:00:f2:8b:e3:7d:07:91:fe:8b:a8:a5:b7:cf:5d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject: CN=A8328C330BF91CCC09334AC5ED4A0CA83C2536FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b5:a5:59:b8:ce:d4:ab:6d:04:d1:31:ba:3e:
                    c5:2f:73:99:ee:e0:44:f7:15:95:7e:40:0b:36:b4:
                    48:fc:63:2f:f9:39:32:f4:7b:c1:8a:15:9c:bd:af:
                    4e:42:a1:0f:d5:97:71:c2:42:6e:42:fa:c4:6f:01:
                    6a:82:5e:e0:13:3e:64:f9:8c:a5:f1:61:45:fb:bf:
                    44:e6:1b:df:c9:ca:4d:3e:25:15:b4:ec:f9:4d:2e:
                    f3:f5:33:e0:b4:20:f2:5b:6e:c3:7b:da:40:9c:cb:
                    a2:29:76:9f:19:a1:f9:95:8a:6b:b3:28:0d:42:f2:
                    fa:2f:7e:f7:74:57:a8:cc:dc:37:32:d6:ec:b0:29:
                    26:23:2f:bc:da:f5:4e:1e:79:1d:fa:9f:29:69:4c:
                    39:03:ac:22:e8:cb:9c:e2:c4:b3:6e:18:12:9c:72:
                    31:2b:fe:72:05:ce:cf:d5:11:f1:f5:03:b0:c6:82:
                    cc:95:a4:85:e7:7e:21:4d:d1:b9:84:3f:08:b5:42:
                    58:4a:9c:14:3e:30:03:fe:15:9a:01:4b:8c:2c:07:
                    76:8e:19:f8:b3:1c:6c:b3:31:52:16:69:c7:47:e1:
                    96:8a:72:c9:4d:31:52:39:5f:51:4c:d5:ac:21:94:
                    b2:67:8f:c8:ff:9d:c6:13:44:26:a5:84:3a:db:09:
                    b2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:32:8C:33:0B:F9:1C:CC:09:33:4A:C5:ED:4A:0C:A8:3C:25:36:FD
            X509v3 Authority Key Identifier:
                keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/323830343a346633383a3a2f33322d3332203d3e20323638333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f38::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:77:80:e7:f7:27:ab:bf:27:cd:b2:eb:ec:8e:07:1d:09:ee:
         c3:16:41:e3:5e:a3:f1:3f:9b:5f:63:5e:28:80:fd:f6:c3:a5:
         0f:e3:b5:f7:2d:06:88:02:6e:8b:70:78:63:43:58:65:3e:80:
         b9:27:7e:b6:4e:e6:23:3c:a5:4c:c1:40:97:d0:26:01:5f:77:
         f3:1c:43:57:8c:0f:2a:c4:46:3b:b8:f8:72:a3:79:92:9e:4f:
         e5:39:67:c2:6a:15:eb:b3:54:58:09:2a:fb:07:07:11:a3:fb:
         b9:d7:ee:38:3f:af:a5:6b:ea:bb:e8:34:e4:f7:e3:6b:ec:3f:
         f8:26:1e:a6:c3:d2:34:a5:74:77:10:2c:b0:cd:07:d9:d5:98:
         d4:26:c4:10:8c:1e:83:ea:af:01:35:13:a4:5a:b8:e0:be:84:
         1f:da:73:58:c5:f8:e5:9d:30:71:d2:ad:02:75:da:ea:ce:72:
         ff:e2:ee:39:a7:bf:cb:a6:d5:77:87:9a:20:72:f0:bc:50:25:
         07:ef:6d:84:66:f4:e3:c8:1c:7a:2d:b5:ec:85:15:24:bd:53:
         3f:b1:ac:0d:9b:cc:a4:43:a3:f8:db:e1:0c:49:b4:9f:91:4a:
         a0:b1:ff:b8:f3:e8:c8:16:5f:47:74:a1:f4:1e:e4:86:dd:a9:
         51:ce:f7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:23:14 2026 by rpki-client