Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/323830313a38653a3a2f33322d313236203d3e203131393933.roa
File:                     323830313a38653a3a2f33322d313236203d3e203131393933.roa (raw, json)
Hash identifier:          Ey7Imlr5pLL+DH2mMRpmrRyRdOVVI3qVj9OnEUUXico=
Subject key identifier:   EA:42:04:7C:75:8B:2C:AF:A4:D9:5B:3B:AC:9E:3C:1F:33:3D:E4:FE
Certificate issuer:       /CN=6321913B8F265DB266263684C1BC420640061E1A
Certificate serial:       079FCAB9F36423F3FE046E3E91A5DEF66666F419
Authority key identifier: 63:21:91:3B:8F:26:5D:B2:66:26:36:84:C1:BC:42:06:40:06:1E:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/323830313a38653a3a2f33322d313236203d3e203131393933.roa
Signing time:             Thu 05 Feb 2026 07:12:12 +0000
ROA not before:           Thu 05 Feb 2026 07:07:12 +0000
ROA not after:            Thu 04 Feb 2027 07:12:12 +0000
asID:                     11993
IP address blocks:        2801:8e::/32 maxlen: 126
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl
                          rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:34:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9f:ca:b9:f3:64:23:f3:fe:04:6e:3e:91:a5:de:f6:66:66:f4:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6321913B8F265DB266263684C1BC420640061E1A
        Validity
            Not Before: Feb  5 07:07:12 2026 GMT
            Not After : Feb  4 07:12:12 2027 GMT
        Subject: CN=EA42047C758B2CAFA4D95B3BAC9E3C1F333DE4FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bc:7c:cc:bb:0d:2f:8b:65:2f:34:86:18:17:
                    9b:8e:1f:5f:ef:8b:43:91:f0:88:8c:96:f8:96:ed:
                    54:e1:da:2a:4a:b2:79:e9:0e:8a:6b:2f:80:3e:27:
                    b3:1e:30:5a:83:b5:d1:31:75:05:b8:66:7f:3f:eb:
                    7b:ae:13:d4:0f:0e:99:dc:ad:f4:57:10:ac:75:77:
                    24:d0:34:70:19:a0:b6:70:45:91:e8:e7:03:f9:6d:
                    5f:56:5d:55:20:37:00:60:50:61:c2:d4:d7:ee:2d:
                    97:66:e2:fe:d3:52:f5:14:93:ed:df:70:05:a1:5e:
                    97:60:19:ff:24:12:e9:da:62:58:73:c5:3d:49:d6:
                    52:e2:9e:00:a8:b2:76:ca:f2:39:43:76:43:dc:2b:
                    b0:3b:a0:20:f1:5c:59:e2:1b:77:db:bd:05:ad:fd:
                    2c:c6:43:58:fa:c8:21:80:c9:d3:de:f5:2c:02:9a:
                    1a:c3:c7:12:05:8a:e0:f5:25:72:66:73:4d:00:a2:
                    ef:fb:31:dc:3e:18:79:f7:36:93:97:78:b7:d2:d2:
                    0f:1c:52:55:c2:72:cb:b7:d0:28:70:98:6b:71:49:
                    60:f1:1e:1d:86:50:61:bd:af:f2:44:ed:47:da:b6:
                    57:4a:53:ab:1c:a3:16:91:62:2a:c4:b5:d5:33:57:
                    73:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:42:04:7C:75:8B:2C:AF:A4:D9:5B:3B:AC:9E:3C:1F:33:3D:E4:FE
            X509v3 Authority Key Identifier:
                keyid:63:21:91:3B:8F:26:5D:B2:66:26:36:84:C1:BC:42:06:40:06:1E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/323830313a38653a3a2f33322d313236203d3e203131393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:8e::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:18:46:b4:01:9f:a0:a8:63:e1:fa:b2:f7:40:13:32:f4:c0:
         c3:85:b5:6e:38:32:71:a7:b7:17:16:e9:4b:c4:f4:64:8c:e1:
         41:35:ff:8c:a7:64:a2:f6:9f:51:4a:d9:ba:e7:99:b0:72:93:
         4c:92:db:b3:3e:7c:f0:ba:b4:d0:c5:64:78:23:c3:04:87:32:
         82:0d:c4:66:b3:f6:4e:89:33:39:f9:51:b3:a2:f7:a7:b1:72:
         63:53:0c:79:ff:58:dd:bd:a1:27:0d:79:e0:ee:e3:77:93:ce:
         46:1d:9d:34:2a:b1:22:0c:35:51:ed:b6:76:eb:e2:e8:df:42:
         ac:39:8c:a6:07:9c:3a:9c:03:ad:1f:48:b4:ea:aa:18:7d:38:
         2f:9e:83:15:b6:74:5c:99:6e:39:59:2e:7e:7e:1f:d7:5a:5d:
         6e:08:23:4b:4f:17:c0:56:ca:f9:54:23:38:a1:66:ce:d6:cf:
         fe:19:0b:7e:00:61:0a:15:92:2e:62:7a:e8:4c:86:36:f4:5f:
         73:05:cd:42:66:f4:ca:12:85:bf:28:a0:fc:88:54:c7:1d:6c:
         d8:bd:0a:84:4f:38:bc:b3:fb:19:1c:ff:f5:78:fb:82:df:bc:
         0f:82:e6:95:ae:7b:23:60:ad:3c:5c:4b:e0:75:4a:d3:a7:f9:
         e3:c6:4b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:37:38 2026 by rpki-client