Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/323830343a353436383a3a2f33322d3335203d3e20323638363438.roa
File:                     323830343a353436383a3a2f33322d3335203d3e20323638363438.roa (raw, json)
Hash identifier:          H9KNxRSpawSThsNwGW8gvnKiyL5Y5taahCHvijRF64o=
Subject key identifier:   9D:98:46:D4:FD:F9:0F:83:F4:8B:7D:BA:AC:3D:CA:C4:CF:8A:C1:39
Certificate issuer:       /CN=DCE24D4E9D4DE179A93239E5972A0A48CBE24117
Certificate serial:       35403D65AFF840A88BC3E5BB77B8ADAF6B11E72B
Authority key identifier: DC:E2:4D:4E:9D:4D:E1:79:A9:32:39:E5:97:2A:0A:48:CB:E2:41:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/323830343a353436383a3a2f33322d3335203d3e20323638363438.roa
Signing time:             Thu 05 Feb 2026 08:56:25 +0000
ROA not before:           Thu 05 Feb 2026 08:51:25 +0000
ROA not after:            Thu 04 Feb 2027 08:56:25 +0000
asID:                     268648
IP address blocks:        2804:5468::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.crl
                          rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:40:3d:65:af:f8:40:a8:8b:c3:e5:bb:77:b8:ad:af:6b:11:e7:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE24D4E9D4DE179A93239E5972A0A48CBE24117
        Validity
            Not Before: Feb  5 08:51:25 2026 GMT
            Not After : Feb  4 08:56:25 2027 GMT
        Subject: CN=9D9846D4FDF90F83F48B7DBAAC3DCAC4CF8AC139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:40:64:4a:13:a5:a4:9f:cd:8d:ae:49:c2:63:
                    7a:a5:21:86:c6:b9:4d:92:8a:06:ee:30:1c:d2:8e:
                    79:c9:0a:32:19:90:28:84:3e:6a:db:07:00:70:16:
                    6e:fa:17:ff:87:5a:32:09:32:52:a4:f8:9e:f7:94:
                    45:16:12:23:43:7c:09:8c:54:bf:56:cd:04:20:18:
                    5c:85:4a:d4:b6:f7:a9:84:6b:d9:76:f8:7f:7b:df:
                    82:69:fb:e3:2a:b2:02:ea:70:46:b6:5b:c9:9f:be:
                    3a:b3:92:1d:de:2b:62:bd:e3:4b:0c:70:ed:06:a8:
                    aa:fa:81:9b:97:e7:67:dd:d8:cc:cf:97:2b:3c:16:
                    70:17:ef:d1:64:13:e6:0f:54:0e:e8:93:51:15:30:
                    72:3f:b7:a0:13:eb:49:c7:6f:d3:cd:43:72:48:6c:
                    63:bd:77:85:05:11:6b:04:27:37:4a:ce:f5:d8:86:
                    90:76:fd:4a:c0:cb:8a:a6:69:db:1a:87:0e:b5:bd:
                    3a:5e:d5:39:3e:cf:07:8b:96:27:d6:9b:8d:9b:e0:
                    df:0f:6f:05:b5:3b:42:7a:6d:ee:70:b5:0f:92:b5:
                    05:56:5f:e1:2a:72:10:bf:d5:39:32:1e:a8:d5:2d:
                    6e:79:12:7c:7e:2d:cf:39:38:a8:6b:7b:1b:1b:7c:
                    61:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:98:46:D4:FD:F9:0F:83:F4:8B:7D:BA:AC:3D:CA:C4:CF:8A:C1:39
            X509v3 Authority Key Identifier:
                keyid:DC:E2:4D:4E:9D:4D:E1:79:A9:32:39:E5:97:2A:0A:48:CB:E2:41:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/323830343a353436383a3a2f33322d3335203d3e20323638363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5468::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:ce:2c:9a:9a:54:bf:66:5e:10:24:7a:1c:e6:ac:08:48:07:
         43:3a:33:a9:cc:cd:b0:0b:0c:9a:d7:d6:bf:4c:60:c3:46:60:
         64:49:5b:0e:4f:bf:7e:f0:67:74:e8:8b:0f:14:5f:89:fb:00:
         a7:f5:44:62:49:2b:90:cf:b6:ed:81:d9:d2:18:73:0e:7b:f5:
         59:2e:10:89:28:31:74:18:e8:b5:f2:c6:d2:c5:ce:02:80:43:
         e7:f4:1d:a7:7c:e7:8a:c5:53:52:33:ae:83:f9:59:67:dd:70:
         a6:5f:b0:46:61:dc:e5:27:2e:9c:fa:4d:67:40:69:3b:13:28:
         1b:15:19:1d:eb:91:c3:de:bd:11:c8:a0:c5:46:92:cd:80:cb:
         66:54:e2:cb:e1:c3:df:e7:fc:03:ae:6e:ea:12:64:4c:32:6b:
         f2:72:54:7f:ab:23:9a:b7:92:35:cc:a6:37:c8:83:5c:c8:f3:
         b3:aa:c5:db:52:8f:2d:f2:9b:cd:ea:d5:1f:bc:e6:5b:c2:f0:
         8c:96:9a:70:93:ba:b2:a1:82:69:b6:1d:dd:e3:bc:2b:d5:a5:
         7d:9c:1d:6d:c3:a0:de:5f:15:8e:b2:21:60:cd:aa:fb:d4:b9:
         8f:2c:c2:2d:f1:9e:da:2d:c5:e1:23:ac:39:5d:00:2a:77:f0:
         2b:53:fa:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:02:20 2026 by rpki-client