Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a3a2f33322d3332203d3e20323636313239.roa
File:                     323830343a336231383a3a2f33322d3332203d3e20323636313239.roa (raw, json)
Hash identifier:          USazM2CtNeGZcr+7SYcBOSCAiwxDB2/Wq6p4DMndcEQ=
Subject key identifier:   8D:21:B4:29:53:05:40:A4:D5:87:6C:8B:AF:01:F1:BE:41:3F:BC:42
Certificate issuer:       /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial:       415A98278DC1CE44598E2C0A028B4CE93E8DF3A1
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a3a2f33322d3332203d3e20323636313239.roa
Signing time:             Wed 04 Feb 2026 20:00:13 +0000
ROA not before:           Wed 04 Feb 2026 19:55:13 +0000
ROA not after:            Wed 03 Feb 2027 20:00:13 +0000
asID:                     266129
IP address blocks:        2804:3b18::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
                          rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:5a:98:27:8d:c1:ce:44:59:8e:2c:0a:02:8b:4c:e9:3e:8d:f3:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
        Validity
            Not Before: Feb  4 19:55:13 2026 GMT
            Not After : Feb  3 20:00:13 2027 GMT
        Subject: CN=8D21B429530540A4D5876C8BAF01F1BE413FBC42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d1:7c:c8:4e:6a:01:08:c0:f3:56:c2:e1:87:
                    96:10:db:a5:9d:47:dc:ef:47:8f:24:49:66:8c:8f:
                    71:47:f0:18:cc:ed:7c:5d:f7:65:07:79:d4:6b:33:
                    87:7f:bc:33:ff:b5:d2:8e:e8:a9:1e:7a:5e:30:e3:
                    d3:9c:5e:2f:79:aa:d9:ae:7d:89:f8:2d:b2:66:8c:
                    95:dd:f2:02:79:34:3c:5a:9e:c6:8e:07:9d:59:35:
                    d3:98:eb:66:38:92:55:20:f3:aa:53:f0:18:fd:99:
                    e0:46:5a:da:7b:c4:a5:c7:93:ba:b6:84:b7:02:3b:
                    a9:52:01:cd:d4:94:2e:53:0a:43:75:3e:cd:88:b9:
                    49:4a:5c:75:05:87:d8:be:5d:a5:69:ff:d1:fe:61:
                    97:53:53:5b:36:f5:db:a9:f3:78:75:f2:ae:c6:ab:
                    cc:fe:93:6e:76:d2:d7:be:8e:4a:7c:68:26:0b:83:
                    36:18:ab:a3:2c:e6:51:27:25:0c:17:f3:ca:a7:5a:
                    68:5a:84:b3:27:f0:97:cd:7f:3e:d3:d6:71:cd:81:
                    a1:25:fb:86:38:44:72:3f:be:f2:18:b6:16:0e:57:
                    c2:df:93:bc:c4:73:af:58:bd:68:b7:58:1f:24:67:
                    4c:c5:a3:a1:ac:bf:3b:8b:d6:0b:ff:f5:56:19:d6:
                    b0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:21:B4:29:53:05:40:A4:D5:87:6C:8B:AF:01:F1:BE:41:3F:BC:42
            X509v3 Authority Key Identifier:
                keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a3a2f33322d3332203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b18::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:f0:40:37:59:38:7b:73:5f:cd:91:59:ca:bf:25:09:6d:b1:
         d4:dd:07:24:2d:86:3b:08:2c:ef:4f:55:4a:1a:69:d8:90:e0:
         a5:a2:16:8f:d5:dc:85:23:e7:34:df:9b:b3:21:f8:34:c8:2a:
         eb:d8:1e:ac:77:14:42:69:03:4f:6a:72:27:be:83:1e:35:22:
         83:9b:5c:3d:05:d8:50:e3:2a:59:72:54:f9:74:f4:68:59:e7:
         7c:7b:bb:61:5c:21:e8:ac:b9:ec:cc:43:38:74:72:03:5c:18:
         b4:13:01:05:f0:a8:ae:39:c4:36:a9:f3:d3:0e:23:69:8b:31:
         0e:c8:b8:08:f0:90:93:1a:3b:24:76:10:c5:b4:5d:43:fa:93:
         63:46:c2:ae:ea:42:b2:d9:fa:c7:89:6e:0a:9f:49:60:8b:c8:
         49:f0:83:b5:87:25:bc:4a:dd:a5:56:5d:3f:45:7b:71:04:6f:
         45:9e:fc:af:82:07:a5:f3:7d:64:ac:f1:cf:c2:f6:d7:f3:fa:
         90:4a:a6:c7:0d:11:56:9f:9c:fb:2a:60:05:3e:db:b8:cb:9f:
         f5:19:1c:93:8e:f9:82:3a:7c:ad:06:a7:84:54:d2:f1:3f:b7:
         2e:9b:98:c1:f6:bc:e6:56:85:02:f1:45:6a:1f:4d:d4:70:85:
         b3:bb:b7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:11 2026 by rpki-client