Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/323830343a376162343a3a2f33322d3332203d3e20323731333837.roa
File:                     323830343a376162343a3a2f33322d3332203d3e20323731333837.roa (raw, json)
Hash identifier:          jrzHToCZnAfHSUunzLnqiA5u2SSSEeLlq7E8GqBll24=
Subject key identifier:   45:C8:08:60:DF:7F:6D:2C:44:94:52:04:2F:D6:50:A5:29:CF:AF:05
Certificate issuer:       /CN=E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C
Certificate serial:       16B618275826B29F7DC573037A297FE3F320347C
Authority key identifier: E1:BA:EE:8C:47:55:5E:78:CA:DE:1F:AE:AA:82:C1:18:6C:DF:C1:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/323830343a376162343a3a2f33322d3332203d3e20323731333837.roa
Signing time:             Thu 01 Jan 2026 14:28:22 +0000
ROA not before:           Thu 01 Jan 2026 14:23:22 +0000
ROA not after:            Thu 31 Dec 2026 14:28:22 +0000
asID:                     271387
IP address blocks:        2804:7ab4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.crl
                          rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 10:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b6:18:27:58:26:b2:9f:7d:c5:73:03:7a:29:7f:e3:f3:20:34:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C
        Validity
            Not Before: Jan  1 14:23:22 2026 GMT
            Not After : Dec 31 14:28:22 2026 GMT
        Subject: CN=45C80860DF7F6D2C449452042FD650A529CFAF05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ed:58:84:be:d5:d2:e1:62:c7:f7:e1:0b:d5:
                    63:00:e2:2c:e3:3e:6d:24:64:ff:fb:1c:c6:81:5a:
                    dc:94:26:ac:f1:85:a3:e9:2d:06:35:55:31:b0:61:
                    d3:83:e5:d8:cf:c1:96:e1:a4:ac:87:c7:7e:77:01:
                    1d:69:08:a8:31:60:77:c7:2c:c4:8d:1a:f3:13:21:
                    6f:0a:d2:99:41:02:b6:6a:6a:15:95:7c:55:70:10:
                    a7:93:0f:bb:ff:ff:89:6b:a0:3d:e2:8c:ca:2d:50:
                    d0:b2:36:7b:a6:9b:b0:3d:79:6c:8b:cf:ac:66:41:
                    31:ed:f1:5e:5c:a2:46:75:db:69:b2:b6:6c:24:9d:
                    86:ce:09:dc:4c:da:05:a7:ca:c2:22:d7:52:ee:13:
                    54:15:81:96:13:5f:18:35:22:11:d6:d5:05:aa:6a:
                    ba:47:33:5e:26:c4:b9:30:11:63:81:50:84:b4:7a:
                    3b:06:b1:b2:49:ce:38:8e:35:e6:f0:19:78:08:30:
                    1f:23:4c:1b:4d:e7:3f:64:10:5c:1b:1d:3b:63:e7:
                    1c:e1:4f:a8:c4:ec:ce:91:a5:d7:71:ba:b2:7d:a4:
                    6b:95:72:90:03:a8:5d:99:ce:51:a7:c4:6e:98:7f:
                    7b:be:1c:87:50:9b:aa:6b:e0:45:f9:86:87:80:ad:
                    44:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C8:08:60:DF:7F:6D:2C:44:94:52:04:2F:D6:50:A5:29:CF:AF:05
            X509v3 Authority Key Identifier:
                keyid:E1:BA:EE:8C:47:55:5E:78:CA:DE:1F:AE:AA:82:C1:18:6C:DF:C1:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/323830343a376162343a3a2f33322d3332203d3e20323731333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ab4::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:aa:4a:1f:fa:17:0b:8f:6d:73:21:e2:8d:0f:af:91:96:fe:
         cc:86:e3:a9:ec:27:1d:61:36:6d:fb:55:dd:36:6c:94:dd:07:
         76:d0:88:bf:35:b4:b1:58:56:c2:dd:8f:b9:4e:e7:e6:b7:93:
         a5:64:90:b7:23:a8:01:66:6e:da:23:5c:e7:72:42:b9:ca:71:
         ca:d1:bd:1a:29:7c:c0:2e:03:59:0a:1d:70:be:f7:d5:02:d9:
         4f:a4:d2:7f:0a:93:f1:1c:59:cf:b1:4a:08:45:1d:0a:ef:3b:
         59:13:48:06:fe:e9:2b:73:b5:a5:6e:30:05:76:d3:7b:bc:77:
         0f:cd:48:54:de:ea:17:4d:fc:6a:13:35:69:cf:da:f4:d6:cf:
         fc:5d:a8:b0:f2:c9:53:73:cb:7f:d2:65:97:08:cf:35:e1:72:
         64:57:14:f8:e2:7c:9d:e1:a1:c0:e8:34:8f:9d:aa:fa:73:2c:
         4a:37:95:4e:03:7c:78:b6:0b:9c:f0:f6:8b:a8:65:81:3d:bf:
         d2:75:36:42:92:72:d2:4e:69:9f:3c:3f:04:19:6c:9d:b4:2b:
         28:95:15:ad:12:93:38:a2:53:dc:42:84:a8:9c:23:5c:b9:be:
         11:74:8d:fe:65:86:3f:38:80:46:a3:be:14:d8:09:6d:f7:a7:
         70:a1:f8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:07:39 2026 by rpki-client