Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/323830313a62363a3a2f33322d3438203d3e20323633303833.roa
File:                     323830313a62363a3a2f33322d3438203d3e20323633303833.roa (raw, json)
Hash identifier:          zoGjTx/a6SNXesTdt5jAD07tQ61sCW6OjnHT5LmMW1U=
Subject key identifier:   DA:76:44:E6:FB:66:8F:8B:B0:3B:30:4D:2E:8F:E6:34:D4:3E:C4:D0
Certificate issuer:       /CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5
Certificate serial:       2ABA113C181BD631C4827B39A1889C0BA6533153
Authority key identifier: F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/323830313a62363a3a2f33322d3438203d3e20323633303833.roa
Signing time:             Thu 05 Feb 2026 01:11:49 +0000
ROA not before:           Thu 05 Feb 2026 01:06:49 +0000
ROA not after:            Thu 04 Feb 2027 01:11:49 +0000
asID:                     263083
IP address blocks:        2801:b6::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl
                          rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ba:11:3c:18:1b:d6:31:c4:82:7b:39:a1:88:9c:0b:a6:53:31:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5
        Validity
            Not Before: Feb  5 01:06:49 2026 GMT
            Not After : Feb  4 01:11:49 2027 GMT
        Subject: CN=DA7644E6FB668F8BB03B304D2E8FE634D43EC4D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:48:61:38:b7:cf:6d:74:cf:23:8b:96:66:30:
                    df:49:92:80:a2:f5:e9:04:40:8e:6f:c0:14:7c:1c:
                    16:8a:26:a3:45:83:7f:33:02:f4:25:26:c3:86:ed:
                    49:b0:58:e4:eb:63:db:7e:96:ed:e8:72:7a:04:94:
                    13:9d:35:9e:d5:6b:22:5e:d2:75:94:fb:e8:63:63:
                    c2:88:93:16:66:10:93:b8:72:53:0f:5e:37:7f:2f:
                    e1:54:18:b4:97:71:27:8c:ed:1a:fe:01:55:eb:37:
                    62:9e:f3:ba:4e:c0:8c:a9:55:2c:06:c0:58:7d:2d:
                    59:8d:a4:36:80:5f:6c:e7:a1:6a:5c:c6:69:f5:62:
                    64:4e:75:47:69:fb:5f:3b:eb:8a:d0:1a:11:6c:97:
                    c9:8c:1d:f5:f0:dd:4e:23:8b:10:9a:fd:02:de:43:
                    b2:cf:fa:74:03:15:f3:d7:4d:93:cd:b4:09:11:16:
                    25:63:31:d9:1b:cc:4c:eb:b1:b5:7d:63:a7:d8:a6:
                    43:39:5f:86:2a:4c:92:0b:f8:1c:4d:26:03:e3:5f:
                    0b:4a:c9:3c:72:2b:4b:40:6f:14:84:8c:34:1f:aa:
                    a7:9f:cc:82:d5:fc:82:14:cb:92:2e:a3:79:7b:0a:
                    27:36:90:d4:4b:43:36:2c:9b:21:38:59:eb:03:b6:
                    d8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:76:44:E6:FB:66:8F:8B:B0:3B:30:4D:2E:8F:E6:34:D4:3E:C4:D0
            X509v3 Authority Key Identifier:
                keyid:F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/323830313a62363a3a2f33322d3438203d3e20323633303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:b6::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:c8:84:16:72:7f:59:f0:b0:7d:61:1f:b8:fa:b7:94:17:a4:
         1e:c1:41:2c:82:b7:44:b7:6b:af:84:51:37:c4:bc:fd:25:b8:
         e7:1d:eb:61:df:fd:99:51:bc:c4:35:70:de:61:c5:28:95:d4:
         40:d0:d3:26:4c:b3:57:46:04:c1:4e:56:54:7e:1a:9e:37:58:
         51:2d:45:31:84:0f:0b:8b:e8:63:23:04:fc:f2:09:a7:ed:6a:
         77:a3:83:29:39:29:ae:56:eb:63:7b:af:91:62:59:a3:1c:2e:
         d9:29:39:91:43:ef:c0:c4:56:9c:ee:66:ca:29:da:f9:b8:3e:
         4a:e4:20:80:fa:31:1a:6e:8b:0e:f8:8c:41:c3:6e:6a:e9:4f:
         8b:43:44:9a:6c:19:d6:bb:3d:8d:a3:84:11:ab:af:bc:08:08:
         e9:8a:bd:25:ad:6f:93:4d:9a:e5:74:72:bb:a5:20:32:07:87:
         b2:c7:2b:22:2c:d7:dd:0b:30:47:8b:8b:ae:aa:7c:ea:3d:00:
         4d:1a:29:19:fb:3b:4f:dd:dd:a5:6f:e0:5d:5d:f9:ae:e9:88:
         06:15:10:3a:0f:56:22:22:ce:62:bd:ba:86:5c:05:83:16:36:
         67:b2:6e:03:08:68:10:29:bc:63:56:36:1f:28:52:a3:15:00:
         db:7b:8b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:29:26 2026 by rpki-client