Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/323830343a373039343a3a2f33322d3438203d3e20323730373335.roa
File:                     323830343a373039343a3a2f33322d3438203d3e20323730373335.roa (raw, json)
Hash identifier:          kk1a1e6ES6jdilaDbYwKXB+A8dWXQpLp9WLXbsGVmwM=
Subject key identifier:   97:56:76:E8:C5:73:23:8F:5B:2B:33:F7:AC:42:5D:D9:6B:C7:D2:3D
Certificate issuer:       /CN=275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE
Certificate serial:       0CA518BCDD032AD3562C75957A95C5F6D186E1AC
Authority key identifier: 27:5D:9E:0F:3E:6B:B4:0B:BC:90:C8:BA:26:99:DD:6A:35:6D:A2:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/323830343a373039343a3a2f33322d3438203d3e20323730373335.roa
Signing time:             Wed 04 Feb 2026 22:00:17 +0000
ROA not before:           Wed 04 Feb 2026 21:55:17 +0000
ROA not after:            Wed 03 Feb 2027 22:00:17 +0000
asID:                     270735
IP address blocks:        2804:7094::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.crl
                          rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a5:18:bc:dd:03:2a:d3:56:2c:75:95:7a:95:c5:f6:d1:86:e1:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE
        Validity
            Not Before: Feb  4 21:55:17 2026 GMT
            Not After : Feb  3 22:00:17 2027 GMT
        Subject: CN=975676E8C573238F5B2B33F7AC425DD96BC7D23D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8a:95:23:3a:4a:e6:d2:76:34:53:1d:c5:0c:
                    28:ca:2f:68:95:67:98:a8:97:f1:ef:cb:16:ab:26:
                    03:4a:10:66:8b:2d:ca:f2:f9:99:26:b6:49:80:af:
                    02:41:35:1e:8f:85:3c:e1:c1:ba:ab:c4:3e:75:e9:
                    8c:da:74:c5:1c:68:05:81:03:bc:48:db:76:28:5b:
                    6c:91:e8:4d:3c:f2:2b:78:41:2b:6c:02:43:0b:8d:
                    23:e7:7c:69:ce:76:8a:64:7e:4e:38:e6:07:b3:38:
                    1b:66:5e:f6:b5:90:32:f4:ee:cd:63:44:06:25:91:
                    3d:44:7f:a9:2f:f2:b9:78:db:07:d3:1b:93:0b:1a:
                    fe:f6:2f:48:e5:25:0f:0f:d1:bd:b1:7b:8e:8a:b2:
                    c8:12:08:d3:bd:4a:63:bd:52:cb:27:2d:ac:c0:ec:
                    81:76:2b:c4:fd:e1:30:44:11:b2:4f:a8:76:f6:81:
                    c7:0a:9a:1e:e5:be:fa:d4:79:b5:da:2a:82:ab:25:
                    12:4f:a8:91:a7:89:1b:9e:03:3c:a1:f4:da:70:d5:
                    a9:7b:c1:e2:8d:b5:b5:be:5a:49:00:3a:94:b6:28:
                    aa:aa:b0:8c:f9:d4:fe:a2:39:1b:2d:a2:3a:de:ba:
                    15:8b:07:c4:1e:ab:ea:e1:1b:c7:86:4a:a7:21:84:
                    cd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:56:76:E8:C5:73:23:8F:5B:2B:33:F7:AC:42:5D:D9:6B:C7:D2:3D
            X509v3 Authority Key Identifier:
                keyid:27:5D:9E:0F:3E:6B:B4:0B:BC:90:C8:BA:26:99:DD:6A:35:6D:A2:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/323830343a373039343a3a2f33322d3438203d3e20323730373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7094::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:f4:37:52:6a:8c:14:0d:a6:d3:4f:84:ab:88:5a:74:ad:bb:
         43:1d:30:f2:3a:25:37:b8:ef:5d:ae:84:48:c1:98:d4:bd:a8:
         38:9c:64:31:38:02:be:df:4a:98:95:02:00:0b:e4:1f:27:f7:
         95:4c:25:6a:dd:49:ed:e5:fe:95:91:8d:77:8d:86:2d:be:f0:
         1a:0f:ca:cf:54:9c:4b:f8:cc:df:d9:4d:d5:c8:16:b6:72:19:
         82:ef:2b:70:38:9c:c6:20:1d:7c:9d:74:b8:8c:76:9d:35:76:
         8e:e4:62:7c:e2:42:01:17:64:bd:4c:91:d0:0f:8e:62:15:c4:
         af:b2:54:17:13:9d:9c:1e:b0:4e:f6:b3:a3:77:12:94:2f:83:
         46:d1:c7:fb:15:7e:37:3e:df:1d:35:9a:89:8e:c2:1e:a6:10:
         c0:70:9b:bc:e4:58:d3:3b:d7:9e:d9:4c:0f:7e:15:3f:4a:b5:
         e1:8e:6b:78:ed:a8:18:69:23:dc:00:3f:0f:03:b0:d3:4c:d7:
         d7:99:fb:41:ca:f2:63:15:52:8b:4d:1d:94:3d:c8:27:12:b2:
         c7:ae:f1:51:82:1f:de:90:82:ef:cf:a9:38:69:6f:bd:f0:02:
         56:57:f8:21:ee:98:1e:e9:88:db:63:1a:f6:55:52:41:86:49:
         89:85:1b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:54:40 2026 by rpki-client