Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/323830343a353838633a3a2f33322d3438203d3e20323638313335.roa
File:                     323830343a353838633a3a2f33322d3438203d3e20323638313335.roa (raw, json)
Hash identifier:          HH80gMvMCHmEDWf+tt5FXPQLxoGNqhj/p0AifwqPBJM=
Subject key identifier:   B0:42:71:5F:4F:24:24:73:EC:9E:83:72:09:9B:5D:11:9E:52:A1:22
Certificate issuer:       /CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
Certificate serial:       38995F85A99621FE34FDA047620F1F0CCA6FCB80
Authority key identifier: F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/323830343a353838633a3a2f33322d3438203d3e20323638313335.roa
Signing time:             Wed 04 Feb 2026 21:50:09 +0000
ROA not before:           Wed 04 Feb 2026 21:45:09 +0000
ROA not after:            Wed 03 Feb 2027 21:50:09 +0000
asID:                     268135
IP address blocks:        2804:588c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl
                          rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:99:5f:85:a9:96:21:fe:34:fd:a0:47:62:0f:1f:0c:ca:6f:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
        Validity
            Not Before: Feb  4 21:45:09 2026 GMT
            Not After : Feb  3 21:50:09 2027 GMT
        Subject: CN=B042715F4F242473EC9E8372099B5D119E52A122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5b:91:ba:95:5e:5f:6d:8e:f4:04:30:d1:fa:
                    53:7b:ad:e0:a7:ca:6a:c9:b9:df:1b:62:b0:8e:c2:
                    bd:ef:5c:1b:97:62:7b:db:3d:ba:dd:99:96:84:d2:
                    9b:a4:01:8a:89:0a:97:45:e6:dc:ee:ad:ce:0f:be:
                    e6:aa:96:c7:4c:da:35:27:6a:0b:a4:fc:41:b7:08:
                    17:fa:4b:3f:2f:1c:e3:df:db:24:3c:92:d9:2b:39:
                    89:1d:e2:e5:01:45:34:fa:25:f3:5b:28:1d:6b:3d:
                    c6:ab:28:38:60:52:0d:23:57:de:ef:e7:27:01:ae:
                    fb:46:14:fc:ac:e9:4d:09:2a:98:85:b2:75:e7:f3:
                    c6:b7:78:50:49:b1:25:58:e5:5d:b3:2d:96:4e:e5:
                    e2:f9:93:9a:09:19:4f:20:6b:72:61:ae:53:3e:7c:
                    ec:e9:19:13:6c:3b:d0:fe:46:80:5b:c5:4d:ba:6b:
                    1e:db:a2:06:cd:90:76:bb:71:7d:c9:1e:0c:71:d6:
                    43:75:c4:2c:2c:64:f6:08:d1:70:1e:0f:89:47:8f:
                    96:ed:a9:47:21:e3:69:1a:e0:cb:2b:92:26:1d:3d:
                    d0:de:47:6c:e9:cc:3e:0c:bb:d9:f6:ef:bd:ed:9f:
                    6e:9b:56:81:3a:8b:6d:fe:d0:b8:1d:04:04:c5:68:
                    4b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:42:71:5F:4F:24:24:73:EC:9E:83:72:09:9B:5D:11:9E:52:A1:22
            X509v3 Authority Key Identifier:
                keyid:F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/323830343a353838633a3a2f33322d3438203d3e20323638313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:588c::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:11:f0:a2:22:38:69:f6:90:85:fc:86:bb:88:f9:6a:52:0d:
         ce:94:0c:00:41:6c:e3:56:0e:8d:17:03:99:71:d3:04:8e:7f:
         bc:ad:40:14:a9:b1:46:d3:e2:52:e5:74:88:0e:0e:30:af:3c:
         32:fc:7d:5f:6e:d9:b3:e1:62:67:2b:f2:1f:32:e6:5e:0e:56:
         20:3f:c9:52:72:0e:57:56:8d:2a:7a:52:80:dd:73:76:67:4d:
         06:ae:a3:45:59:cb:e7:e4:5e:6a:8d:3f:ce:33:1a:c1:2b:2a:
         84:63:43:fa:b4:9d:51:fa:c9:c6:dc:f3:e8:35:03:55:77:19:
         81:a7:39:6e:cf:29:93:46:53:ad:0a:51:2a:e8:29:3d:29:ac:
         c0:0f:8d:9a:5b:1f:c3:f7:9b:02:a8:f1:5d:37:3a:f5:03:d4:
         71:96:8c:36:d2:87:14:d9:87:8e:e5:a5:88:d4:a7:63:9e:34:
         cf:9d:2d:e5:ca:0b:2c:f0:5d:c9:bd:f5:60:4b:30:28:02:98:
         ed:38:15:91:4e:54:82:0a:41:b5:1f:a6:b9:b2:54:aa:57:98:
         53:2c:ef:aa:be:4f:74:b5:86:81:4f:ea:10:0d:05:ea:2c:67:
         f7:6d:ff:de:30:99:4e:da:00:75:ac:fe:b5:db:4a:4f:e4:63:
         35:98:55:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:49 2026 by rpki-client