Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/323830343a3838633a3a2f33322d3333203d3e203532383732.roa
File:                     323830343a3838633a3a2f33322d3333203d3e203532383732.roa (raw, json)
Hash identifier:          lIX8pn2Jp9LP9uL6f+ya1P9lhd0g3bfFc5SHsg5UUF4=
Subject key identifier:   84:88:C6:A7:D3:71:3B:9F:95:43:3C:18:82:0B:89:57:B3:53:59:55
Certificate issuer:       /CN=9AD028E1D172F6589CBCF86A98E54CC4C6BF4C00
Certificate serial:       7049B1CD07491A39BEF6ED5D1A70E2AD5A04066D
Authority key identifier: 9A:D0:28:E1:D1:72:F6:58:9C:BC:F8:6A:98:E5:4C:C4:C6:BF:4C:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AD028E1D172F6589CBCF86A98E54CC4C6BF4C00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/323830343a3838633a3a2f33322d3333203d3e203532383732.roa
Signing time:             Wed 11 Feb 2026 20:10:25 +0000
ROA not before:           Wed 11 Feb 2026 20:05:25 +0000
ROA not after:            Wed 10 Feb 2027 20:10:25 +0000
asID:                     52872
IP address blocks:        2804:88c::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/9AD028E1D172F6589CBCF86A98E54CC4C6BF4C00.crl
                          rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/9AD028E1D172F6589CBCF86A98E54CC4C6BF4C00.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AD028E1D172F6589CBCF86A98E54CC4C6BF4C00.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:11:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:49:b1:cd:07:49:1a:39:be:f6:ed:5d:1a:70:e2:ad:5a:04:06:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AD028E1D172F6589CBCF86A98E54CC4C6BF4C00
        Validity
            Not Before: Feb 11 20:05:25 2026 GMT
            Not After : Feb 10 20:10:25 2027 GMT
        Subject: CN=8488C6A7D3713B9F95433C18820B8957B3535955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:63:ee:6c:66:c1:cc:73:ab:10:7c:81:13:d0:
                    d3:b6:52:75:3a:8d:71:61:f7:57:25:db:67:9a:a6:
                    7e:94:50:41:b2:75:e1:73:ff:91:8e:a8:de:b2:e1:
                    98:bf:b7:35:3f:21:71:ad:c1:04:63:92:9f:f9:62:
                    2d:4d:62:2d:32:3a:36:5e:87:cc:bc:23:47:53:94:
                    ee:7c:0e:61:99:88:5b:aa:c3:42:57:49:b6:e0:36:
                    dc:1b:58:bf:4e:15:51:65:f7:26:ee:e4:fa:69:de:
                    cf:73:60:e0:78:90:25:81:af:34:29:19:9d:f7:22:
                    c6:f1:1a:80:5b:03:6f:54:39:fd:b6:2a:62:a8:a0:
                    2f:5f:66:0c:e9:d0:f8:06:7c:48:1d:0e:d5:f5:44:
                    48:a2:ce:89:9a:56:6f:e4:8b:bf:81:d4:4b:d8:b1:
                    2f:93:97:c2:49:69:b8:11:b8:43:71:ff:a8:19:05:
                    4f:3f:8f:01:c3:60:c3:1f:e1:e5:fe:42:1c:55:40:
                    e8:87:7f:2a:a5:e9:65:51:c4:0f:d2:60:b0:da:d6:
                    27:24:7b:d8:99:ff:fa:aa:90:5b:bf:6a:d7:7a:18:
                    7e:9b:36:ed:94:c3:f4:17:1a:05:b5:0b:71:7f:6d:
                    5e:45:b3:c6:b5:c2:d0:04:75:45:1c:e3:ba:1f:4a:
                    38:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:88:C6:A7:D3:71:3B:9F:95:43:3C:18:82:0B:89:57:B3:53:59:55
            X509v3 Authority Key Identifier:
                keyid:9A:D0:28:E1:D1:72:F6:58:9C:BC:F8:6A:98:E5:4C:C4:C6:BF:4C:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/9AD028E1D172F6589CBCF86A98E54CC4C6BF4C00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AD028E1D172F6589CBCF86A98E54CC4C6BF4C00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/323830343a3838633a3a2f33322d3333203d3e203532383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88c::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:aa:4c:47:ba:e1:1f:fe:53:b9:ef:73:12:d7:2e:b5:73:f7:
         f1:99:72:1a:c1:81:5d:f5:5e:c0:2b:13:4e:92:7e:f4:7b:2c:
         16:d4:78:ae:52:41:c0:d2:03:3e:e1:2b:02:b4:40:bb:f1:ab:
         4a:41:ec:3e:e3:9f:72:66:b1:ea:f0:1d:1d:b8:b8:4f:3c:85:
         d8:71:b7:6e:d7:29:8a:49:25:af:e1:2c:01:f7:ca:91:32:0b:
         82:b8:b7:30:e4:c7:2e:6a:06:80:81:b6:c2:2c:7f:0a:8f:62:
         67:44:97:6a:cc:09:29:00:2a:4a:3a:6e:86:c2:43:fa:7b:36:
         0d:f4:b2:55:aa:b4:8c:ea:d9:a0:ee:62:c6:97:8a:70:2c:29:
         10:03:3e:9e:a9:ab:90:a0:45:ec:83:62:98:34:05:18:c6:f5:
         cf:e6:c3:26:5b:fd:66:cd:16:3c:7d:0e:b9:43:8b:12:91:fc:
         de:c1:53:5c:a7:26:92:f5:e6:3a:af:68:de:61:84:e6:5a:6f:
         bf:1b:63:4d:e2:14:71:d6:05:00:c6:07:68:4e:78:50:2a:d4:
         76:c2:71:f8:75:c7:ac:a3:cd:32:4a:c7:75:f6:55:93:97:75:
         6a:46:de:91:73:4d:92:5b:63:96:a5:24:44:80:de:8d:1a:39:
         ab:72:3b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:57:37 2026 by rpki-client