Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/323830343a346461343a3a2f33322d3438203d3e20323638323130.roa
File:                     323830343a346461343a3a2f33322d3438203d3e20323638323130.roa (raw, json)
Hash identifier:          BqsWMLM/u3Iv7u6SzMJdwOeVBJ18HSQ2xCG37bDQd0M=
Subject key identifier:   5B:6F:D9:85:BE:67:23:20:4E:E0:75:69:C6:48:2E:48:96:E0:F0:0C
Certificate issuer:       /CN=0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D
Certificate serial:       51FF512D447C7CEBE1AA35686BDB5886B4ECDFF1
Authority key identifier: 0D:98:1F:5D:CF:29:A7:FC:5E:CE:93:D3:B9:1C:A3:AC:16:08:95:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/323830343a346461343a3a2f33322d3438203d3e20323638323130.roa
Signing time:             Fri 06 Feb 2026 19:00:00 +0000
ROA not before:           Fri 06 Feb 2026 18:55:00 +0000
ROA not after:            Sat 06 Feb 2027 19:00:00 +0000
asID:                     268210
IP address blocks:        2804:4da4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.crl
                          rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ff:51:2d:44:7c:7c:eb:e1:aa:35:68:6b:db:58:86:b4:ec:df:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D
        Validity
            Not Before: Feb  6 18:55:00 2026 GMT
            Not After : Feb  6 19:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b1:bd:66:2b:04:78:86:3b:81:41:b8:ca:ba:
                    0b:3c:2a:96:fe:94:95:82:5f:1f:26:a3:43:18:ae:
                    06:bb:7e:fb:fa:2d:ae:20:e3:92:24:85:f1:e3:c8:
                    e5:57:08:71:a8:a6:48:da:50:e7:e9:e9:fd:e8:be:
                    19:0f:56:e9:b8:81:9a:20:5f:36:ed:be:78:56:2d:
                    32:e8:92:2e:ce:9a:7c:09:f1:7b:42:97:bb:f9:e3:
                    14:c6:98:75:f5:ea:4b:fc:71:68:b5:ca:44:e0:8d:
                    34:c9:44:da:e4:ca:d7:53:7a:51:a7:cb:1a:84:95:
                    17:3b:7a:f6:62:97:54:90:bd:40:f3:e4:7e:83:7d:
                    22:28:42:e9:91:40:8a:05:b7:c8:d1:90:19:33:ca:
                    16:6b:50:8f:5f:a8:bb:48:4b:f9:25:53:dd:25:bb:
                    58:e0:0f:f5:e2:c9:10:70:80:fb:6f:ef:0b:35:a8:
                    b0:00:51:e9:67:4f:f1:a6:d5:f2:f8:d3:f9:c1:fe:
                    ba:cb:a6:a7:83:04:c1:5b:dd:77:5f:5d:2e:52:dc:
                    04:be:a7:26:e8:51:9a:c1:61:f3:6b:1b:69:43:d8:
                    ed:28:46:43:c6:4c:76:a7:da:a1:45:6e:aa:fc:e2:
                    93:bd:44:44:48:35:ce:30:06:e1:a7:d0:9c:30:fe:
                    64:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6F:D9:85:BE:67:23:20:4E:E0:75:69:C6:48:2E:48:96:E0:F0:0C
            X509v3 Authority Key Identifier:
                keyid:0D:98:1F:5D:CF:29:A7:FC:5E:CE:93:D3:B9:1C:A3:AC:16:08:95:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/323830343a346461343a3a2f33322d3438203d3e20323638323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4da4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:73:97:8d:1b:14:84:c3:f9:73:23:a8:28:c6:e6:fc:18:77:
         48:d4:9b:a5:fe:80:d4:0d:3c:1a:02:17:ab:c3:f6:64:e1:80:
         5e:86:20:69:f3:90:7d:0f:39:b7:24:59:d1:7f:e0:5b:22:31:
         8d:61:28:47:67:af:72:85:d3:bd:d8:43:6c:6b:49:1c:76:22:
         1d:09:d2:4d:3e:d5:a7:da:fe:ad:a9:13:2f:cc:9d:db:35:7b:
         9c:da:da:f8:85:fd:eb:14:38:1d:8b:17:87:79:55:9a:97:18:
         10:5a:59:2b:57:76:8a:6f:72:a7:6f:93:e6:bc:b2:97:6f:dd:
         9d:66:eb:10:55:e8:ab:69:6b:e2:f4:4c:9f:fd:97:d7:97:e4:
         f6:c6:64:f7:cc:93:c7:30:dc:1b:06:5e:4c:f0:0a:cd:5a:47:
         3f:77:07:93:a7:66:5c:26:44:e5:a5:03:14:6d:62:9c:f0:d1:
         eb:a5:c0:dd:35:da:48:89:0f:57:67:21:a5:f6:60:27:c3:29:
         fe:5d:83:55:88:32:f5:cf:e5:9d:3f:ff:fd:4d:1a:4e:13:b2:
         76:2d:1b:39:1f:80:cd:f0:e1:ea:34:1e:64:7d:6f:95:71:72:
         84:d7:5d:eb:c3:6d:8a:df:89:12:c1:28:9d:76:1e:60:fd:b2:
         7e:e6:76:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:53:44 2026 by rpki-client