Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/323830343a3137303a343430303a3a2f34302d3430203d3e203238313331.roa
File:                     323830343a3137303a343430303a3a2f34302d3430203d3e203238313331.roa (raw, json)
Hash identifier:          YarjLwp74GvKEpvklDqG1T64wh6amwHEuMmWpqvvJq8=
Subject key identifier:   01:E3:EA:22:FE:BA:EB:10:5D:A5:08:E6:AF:58:9C:91:3C:43:D7:E2
Certificate issuer:       /CN=03981ED1B457034CCBAC00F384454B3A021E294E
Certificate serial:       03436900BC35A816EF39B2AAD5B11A26806BAFB5
Authority key identifier: 03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/323830343a3137303a343430303a3a2f34302d3430203d3e203238313331.roa
Signing time:             Thu 05 Feb 2026 04:07:52 +0000
ROA not before:           Thu 05 Feb 2026 04:02:52 +0000
ROA not after:            Thu 04 Feb 2027 04:07:52 +0000
asID:                     28131
IP address blocks:        2804:170:4400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl
                          rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:43:69:00:bc:35:a8:16:ef:39:b2:aa:d5:b1:1a:26:80:6b:af:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03981ED1B457034CCBAC00F384454B3A021E294E
        Validity
            Not Before: Feb  5 04:02:52 2026 GMT
            Not After : Feb  4 04:07:52 2027 GMT
        Subject: CN=01E3EA22FEBAEB105DA508E6AF589C913C43D7E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9b:0b:db:d4:88:2b:cd:92:74:56:cb:2a:34:
                    b1:9e:e1:0e:77:dc:8c:1b:06:5c:6e:85:d1:3a:69:
                    e0:85:e1:48:f0:e6:2f:a1:7a:4f:e8:82:42:66:1b:
                    9b:a9:4e:dd:33:e2:91:f4:3e:70:dd:55:8b:39:ab:
                    be:2b:13:1e:e1:82:78:e7:4e:92:fe:e6:77:35:a7:
                    7c:b0:f5:a6:98:fe:6c:54:ca:bc:83:a7:bf:ce:06:
                    42:c0:d1:b1:96:29:cb:14:a1:99:ac:36:23:a4:5e:
                    df:d3:09:8a:0c:c9:3f:a1:26:f7:73:37:84:99:32:
                    65:70:1d:37:ba:c1:0b:c3:29:e2:06:37:6d:26:cf:
                    33:a5:03:8b:b5:f0:3c:aa:ed:a0:ee:0b:ce:f1:91:
                    e9:8c:06:81:63:f0:7b:c6:90:4b:0e:35:5e:f8:b5:
                    0a:b7:18:47:cd:bf:0f:17:0c:f9:3f:26:63:b9:80:
                    df:02:e7:73:5b:9f:2f:d1:63:aa:7e:5a:35:23:71:
                    b4:e9:17:ac:8f:22:a5:fa:93:dc:9d:27:e5:c8:5e:
                    98:ad:95:8b:f2:b5:23:24:2b:a6:36:21:3b:10:97:
                    80:fb:f4:b9:2d:2c:f2:9f:5b:7a:ad:4e:ed:bc:bb:
                    bd:75:48:a5:f7:64:d7:b5:22:3d:a7:03:b4:ad:15:
                    7e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E3:EA:22:FE:BA:EB:10:5D:A5:08:E6:AF:58:9C:91:3C:43:D7:E2
            X509v3 Authority Key Identifier:
                keyid:03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/323830343a3137303a343430303a3a2f34302d3430203d3e203238313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:170:4400::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:5b:78:46:26:6e:dc:7b:ca:ed:ce:ef:b6:79:0d:5f:57:63:
         13:23:a7:30:55:0b:f4:82:d4:98:2b:63:28:c4:f3:49:53:78:
         c1:3c:27:99:22:fe:16:af:44:65:98:19:ce:2f:e0:ad:55:5c:
         df:8b:90:d5:74:f8:e3:c9:05:24:ea:50:f4:97:9c:9d:eb:8c:
         95:d5:bd:6f:40:88:3c:83:14:a6:18:12:02:e8:35:5a:47:dd:
         c2:5f:b6:74:59:6b:af:99:f1:74:c1:9a:07:60:6c:81:5f:38:
         6f:5b:15:4f:df:df:36:8d:e7:c0:d8:e0:8c:23:58:71:e2:21:
         c7:d5:58:c5:48:34:fe:bd:f0:cf:16:12:90:cb:f0:e4:d8:d3:
         3b:3a:61:6d:1e:bf:87:47:98:8c:d5:8f:8a:d4:9b:34:c6:f7:
         95:71:0f:48:7b:30:10:3a:b7:5f:7f:a0:8c:b0:0a:00:05:a1:
         5b:f0:83:ae:85:9d:8d:a1:3e:8f:a2:66:8e:de:ff:0a:5c:b8:
         56:05:63:1a:56:e4:a9:96:7d:5d:74:0e:38:3e:49:cf:f6:28:
         e8:18:66:4d:b1:aa:bc:99:cb:03:7a:99:9a:d4:b3:80:9c:ef:
         c5:48:61:e3:84:37:b7:c1:21:88:75:04:11:41:e3:8e:14:f4:
         6e:07:e0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:22:35 2026 by rpki-client