Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/323830343a3137343a3a2f33322d3438203d3e203533313532.roa
File:                     323830343a3137343a3a2f33322d3438203d3e203533313532.roa (raw, json)
Hash identifier:          w1o4//irvY0N5SRkKC5iR8eECmfVg2Vi4cllOyBl9fU=
Subject key identifier:   8F:BC:0D:38:36:67:28:10:7C:8D:43:44:DF:B3:72:DB:F0:A0:F1:59
Certificate issuer:       /CN=192F14755AC879D7851EBA5CD1002E9D4B65583F
Certificate serial:       71BAC52C71B830589E810A557069200D1C912784
Authority key identifier: 19:2F:14:75:5A:C8:79:D7:85:1E:BA:5C:D1:00:2E:9D:4B:65:58:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/323830343a3137343a3a2f33322d3438203d3e203533313532.roa
Signing time:             Thu 05 Feb 2026 05:01:08 +0000
ROA not before:           Thu 05 Feb 2026 04:56:08 +0000
ROA not after:            Thu 04 Feb 2027 05:01:08 +0000
asID:                     53152
IP address blocks:        2804:174::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.crl
                          rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ba:c5:2c:71:b8:30:58:9e:81:0a:55:70:69:20:0d:1c:91:27:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=192F14755AC879D7851EBA5CD1002E9D4B65583F
        Validity
            Not Before: Feb  5 04:56:08 2026 GMT
            Not After : Feb  4 05:01:08 2027 GMT
        Subject: CN=8FBC0D38366728107C8D4344DFB372DBF0A0F159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d9:c5:4d:86:93:83:b0:ff:99:2e:94:36:ec:
                    07:2a:db:aa:0b:0a:a3:cf:ef:33:fb:d0:19:49:2f:
                    70:e6:a5:a5:21:07:73:f4:7e:6d:1e:45:41:ab:c6:
                    ba:03:71:74:53:d7:13:ff:39:c7:1e:1e:8e:01:8c:
                    19:41:29:63:f9:d2:a9:68:91:83:48:f6:84:6f:98:
                    d1:a3:c6:56:1a:a1:1f:dd:85:10:28:6e:9d:3d:37:
                    7d:fe:18:fb:0b:87:2d:db:da:6a:45:68:42:59:82:
                    d8:2f:f1:fe:95:7b:d7:44:11:6b:7a:62:be:c4:fe:
                    43:cf:7b:a0:f4:79:74:8f:f9:8d:8d:ca:e8:e5:c2:
                    5d:8f:86:d4:95:93:6a:98:60:42:0e:87:5f:a8:eb:
                    d5:e3:d5:25:42:3b:3f:10:6e:e1:14:e6:5d:b4:50:
                    0c:84:65:f6:62:15:32:8b:8a:af:55:b1:3e:fc:e8:
                    85:54:82:17:ea:39:ed:a6:0b:15:0c:25:30:d9:00:
                    f7:c9:c5:ba:26:7a:35:a4:57:1d:f9:1d:d7:09:34:
                    e7:ab:f8:33:53:ef:b2:21:95:54:11:f7:78:a2:3a:
                    7a:9d:bd:58:b0:85:d8:a3:87:f6:36:33:f9:f6:17:
                    2e:de:e1:6e:35:13:70:00:6a:11:4d:47:af:a8:a2:
                    87:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BC:0D:38:36:67:28:10:7C:8D:43:44:DF:B3:72:DB:F0:A0:F1:59
            X509v3 Authority Key Identifier:
                keyid:19:2F:14:75:5A:C8:79:D7:85:1E:BA:5C:D1:00:2E:9D:4B:65:58:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/323830343a3137343a3a2f33322d3438203d3e203533313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:174::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:74:4c:0c:39:8a:9f:f8:b2:a0:58:e6:ed:c3:c1:c6:1d:a4:
         f2:8c:7b:a0:16:b6:e7:0f:61:2e:fe:4b:bb:f5:f0:71:59:ac:
         21:46:a7:0a:b5:39:f2:f5:6f:1f:10:4e:19:4a:c1:c0:67:a5:
         1d:7c:29:7b:dc:29:20:25:07:74:c9:44:ca:f2:3a:84:5d:8a:
         e3:a2:d0:b8:7e:52:bb:61:70:65:45:4c:a0:c3:8e:e1:8a:89:
         39:b2:5b:d0:39:23:e7:04:25:1d:c5:33:52:17:23:eb:02:5c:
         08:27:2f:e8:fd:bf:0e:6e:4e:af:7c:5e:d0:28:47:2e:72:69:
         0b:f3:1d:e7:4e:d1:a9:8e:56:80:25:d5:d1:81:f0:16:5d:b2:
         79:06:5c:ce:4b:2c:16:be:4b:e8:57:74:00:a0:28:a1:18:f9:
         3c:8e:db:a8:ac:c9:6d:09:7c:12:1e:54:84:31:ab:c0:49:1b:
         c0:ee:0e:7a:db:0c:7f:fb:fb:88:cf:d5:19:7f:ee:e2:c7:98:
         ef:26:39:2c:d7:a7:62:6d:e3:59:1e:ab:3f:07:68:a7:d3:4a:
         b6:b0:7a:ec:94:26:2a:3c:83:5f:01:04:b9:95:e2:eb:6d:27:
         a0:16:2e:07:ce:9a:18:01:d3:7e:86:07:8a:76:fc:9c:7a:77:
         5f:75:5f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:24:37 2026 by rpki-client