Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/323830343a37343a383031303a3a2f34342d3434203d3e203532343638.roa
File:                     323830343a37343a383031303a3a2f34342d3434203d3e203532343638.roa (raw, json)
Hash identifier:          Rq2zzgByjZcsDzN++UTAmGVu74jcl5215UrNdstth6w=
Subject key identifier:   F6:2E:C5:D2:27:AA:CA:A5:7D:8C:01:3C:0C:0E:59:A8:74:C3:76:77
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       151CD87AD780FCCDA14C2F7B1E0564B616A46086
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/323830343a37343a383031303a3a2f34342d3434203d3e203532343638.roa
Signing time:             Tue 10 Feb 2026 00:00:00 +0000
ROA not before:           Mon 09 Feb 2026 23:55:00 +0000
ROA not after:            Tue 09 Feb 2027 00:00:00 +0000
asID:                     52468
IP address blocks:        2804:74:8010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:1c:d8:7a:d7:80:fc:cd:a1:4c:2f:7b:1e:05:64:b6:16:a4:60:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Feb  9 23:55:00 2026 GMT
            Not After : Feb  9 00:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a0:9a:fd:41:e3:7d:4c:ea:dc:13:b2:24:2d:
                    77:35:0c:02:52:6b:6c:e3:83:6e:36:83:79:7d:76:
                    ca:c7:1b:d5:da:a9:ad:b4:8d:d1:63:ec:de:8f:7f:
                    52:0d:3e:3f:f8:42:0a:f2:c3:19:ff:d9:75:48:1b:
                    72:b8:2a:1b:8f:f3:29:10:c9:ed:69:28:25:c5:6a:
                    d9:a1:a1:8e:29:a1:81:04:4c:eb:45:64:8a:08:5e:
                    4a:4a:37:92:bf:3e:db:a3:72:1b:f8:58:1e:cb:dd:
                    f7:42:af:ad:8e:ce:46:d5:7a:5a:ec:7b:0b:d4:30:
                    70:96:28:ca:d8:27:b8:36:db:32:3d:0f:4f:58:04:
                    7a:39:2a:75:44:3c:bb:2b:3d:15:88:0c:41:7b:92:
                    95:31:9e:dd:cf:3e:17:45:2a:8b:b7:47:2d:96:9e:
                    15:14:12:c1:f0:0f:95:1a:14:1c:4b:f4:9b:67:25:
                    e6:e6:4c:fc:ae:e9:39:e5:93:e5:48:08:61:93:e4:
                    21:b9:97:43:09:fb:67:75:a6:7c:63:77:0e:f3:2f:
                    17:b0:4a:46:83:74:e2:e5:44:ca:03:eb:c0:75:a6:
                    4c:35:4a:40:8c:d7:7d:83:c6:1b:c2:29:df:3c:e6:
                    8b:dc:12:3a:66:46:a9:de:51:ea:02:74:2a:2b:0c:
                    38:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2E:C5:D2:27:AA:CA:A5:7D:8C:01:3C:0C:0E:59:A8:74:C3:76:77
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/323830343a37343a383031303a3a2f34342d3434203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74:8010::/44

    Signature Algorithm: sha256WithRSAEncryption
         27:79:4b:7e:a2:83:16:90:db:8c:1e:f5:68:10:3a:2e:aa:f8:
         6e:1b:6c:c6:eb:af:76:15:ce:88:a5:65:1f:8c:69:3e:70:61:
         48:22:7a:62:52:02:fa:51:55:b6:35:19:4d:90:c6:f4:86:90:
         a5:b6:f7:6d:b1:8c:32:7b:39:32:46:bf:71:48:7e:21:c3:b8:
         75:0e:fd:44:7b:e0:36:78:83:60:f4:88:70:4e:e4:96:ec:10:
         40:ce:b5:ba:12:41:14:97:aa:a3:ce:df:97:66:aa:0a:3b:05:
         96:3c:8a:f9:cc:d1:d4:d3:98:64:96:6f:bf:6a:19:cd:2f:02:
         39:f7:0a:fe:fd:17:b6:25:ce:f2:4f:85:5c:fd:a0:77:51:85:
         22:ed:8b:09:83:28:24:4e:27:14:bd:a3:7d:b9:25:72:1a:c7:
         cb:4d:f9:14:1f:bc:e8:f7:a0:d4:71:7f:51:29:55:53:e7:ac:
         61:e1:d8:03:ce:15:6c:de:25:50:54:cb:5e:85:17:6a:a4:46:
         53:8e:96:4a:c2:61:0f:f4:7a:72:fc:ae:60:e1:83:9e:42:ce:
         d6:34:0d:fd:72:dd:9e:99:59:54:93:17:0d:36:ea:b5:7e:4c:
         f7:a3:b7:62:3b:f6:03:b3:83:fc:43:47:92:dd:d6:f9:ca:78:
         cc:83:b7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:56:49 2026 by rpki-client