Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/323830343a313932383a3a2f33322d313238203d3e203631373735.roa
File:                     323830343a313932383a3a2f33322d313238203d3e203631373735.roa (raw, json)
Hash identifier:          balLqWtekE7xoXyozNcnhLY0gSCHw8MWCc2OS3afiiI=
Subject key identifier:   3D:E5:42:52:24:D4:94:51:07:E0:B0:FD:D3:4D:4D:0D:B9:2E:D4:F9
Certificate issuer:       /CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C
Certificate serial:       300250CDD0C65543FE15877192F27189BD432DF6
Authority key identifier: 2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/323830343a313932383a3a2f33322d313238203d3e203631373735.roa
Signing time:             Thu 05 Feb 2026 22:00:28 +0000
ROA not before:           Thu 05 Feb 2026 21:55:28 +0000
ROA not after:            Thu 04 Feb 2027 22:00:28 +0000
asID:                     61775
IP address blocks:        2804:1928::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl
                          rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:41:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:02:50:cd:d0:c6:55:43:fe:15:87:71:92:f2:71:89:bd:43:2d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C
        Validity
            Not Before: Feb  5 21:55:28 2026 GMT
            Not After : Feb  4 22:00:28 2027 GMT
        Subject: CN=3DE5425224D4945107E0B0FDD34D4D0DB92ED4F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:86:3d:e0:94:2f:3b:af:c6:24:78:70:38:69:
                    f5:a8:68:6c:e7:42:86:4c:0f:60:10:33:33:6f:dd:
                    1f:cc:f1:3a:cf:1f:43:ff:7c:48:3f:b7:e5:20:46:
                    8e:ca:84:cd:c0:cd:10:f2:51:c2:60:6f:08:04:3e:
                    1a:3c:4b:a2:23:4b:17:33:83:b6:f1:c2:fb:37:d3:
                    06:17:a7:4a:82:be:2c:ca:7f:eb:c6:33:73:40:c2:
                    f2:c5:1f:1a:bb:c3:d2:55:30:d4:9b:6a:9f:ab:50:
                    2c:ce:42:71:1a:7d:78:f8:0b:7c:bc:b1:bc:a7:1f:
                    87:54:b6:a0:a0:51:ab:ca:9e:de:5a:ce:bf:92:a1:
                    d0:78:1d:d9:23:cb:39:7e:99:2d:06:4d:14:29:d7:
                    0c:ce:28:38:d2:ca:6b:09:f2:36:9a:46:ac:a5:cc:
                    e6:05:b2:d7:49:1b:0c:0a:0c:1f:31:02:c5:62:c4:
                    9d:97:c2:cd:c8:5b:a9:c5:ff:ba:38:46:f7:66:80:
                    98:1e:d2:88:11:12:f8:fd:7d:9e:5e:40:d7:6e:3c:
                    55:3c:08:a3:3a:d8:20:36:e6:47:07:f2:27:51:7c:
                    bc:57:16:ca:b3:19:4d:b3:b3:b0:47:ff:3c:bd:7e:
                    67:68:3a:5b:6b:af:8d:e9:cd:52:5b:21:98:9a:bd:
                    de:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E5:42:52:24:D4:94:51:07:E0:B0:FD:D3:4D:4D:0D:B9:2E:D4:F9
            X509v3 Authority Key Identifier:
                keyid:2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/323830343a313932383a3a2f33322d313238203d3e203631373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1928::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:99:dc:70:e8:ef:a8:21:dc:3e:60:85:71:cc:ea:2c:9b:88:
         14:24:d8:69:94:c8:8c:aa:c5:5e:89:22:e2:a9:99:31:f4:b8:
         e3:a1:99:54:fc:c9:11:94:b6:10:2c:51:62:b5:97:7d:a7:3c:
         11:f5:32:9d:d9:14:75:35:59:01:64:29:2b:da:31:32:73:82:
         58:c0:51:9d:78:34:17:61:e9:98:56:ce:e6:85:4e:3a:1a:d7:
         92:3f:60:16:86:a6:27:84:2e:8a:41:e9:ac:98:81:99:1b:38:
         2d:06:72:b2:ac:d7:47:c6:ec:6c:47:52:55:71:b2:89:a6:e1:
         bc:d6:c7:3b:8b:8c:5d:41:a3:e5:4c:35:0e:42:b5:ab:6b:c3:
         f8:80:60:e7:78:3b:5f:c1:0b:3a:b3:20:f2:a7:dc:ab:c6:e7:
         3b:b6:89:f6:2f:6c:72:45:13:cd:a5:fc:18:1b:d3:97:cc:a5:
         bb:08:a8:67:c9:cf:aa:4d:3d:44:02:c3:54:fa:e5:53:ba:70:
         f6:ea:b6:58:6e:5e:31:e8:1a:14:60:e4:0c:57:48:67:52:59:
         6e:06:ce:5b:03:2c:6f:12:cd:9c:3c:11:34:9d:6e:9a:c6:3c:
         5e:a8:71:14:7d:4a:68:22:b9:0b:6b:3a:30:05:96:a5:74:27:
         e1:9d:08:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:02:18 2026 by rpki-client