Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/1/323830343a333064343a3a2f33322d3438203d3e20323634393735.roa
File:                     323830343a333064343a3a2f33322d3438203d3e20323634393735.roa (raw, json)
Hash identifier:          QWwR2ZOspdyUlgZwXhcmjlvIJY1KzNlmMW5V6y6upjY=
Subject key identifier:   53:E2:28:E3:3E:F6:B8:51:E9:B8:A6:60:7B:47:95:DC:8E:80:6C:D6
Certificate issuer:       /CN=EE8281B7BE13CC06AE2ABA30537E8664C712FA16
Certificate serial:       06BA6DF9D5F8BE95D8EC5C789DB254114869ABA7
Authority key identifier: EE:82:81:B7:BE:13:CC:06:AE:2A:BA:30:53:7E:86:64:C7:12:FA:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8281B7BE13CC06AE2ABA30537E8664C712FA16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/1/323830343a333064343a3a2f33322d3438203d3e20323634393735.roa
Signing time:             Thu 05 Feb 2026 07:26:08 +0000
ROA not before:           Thu 05 Feb 2026 07:21:08 +0000
ROA not after:            Thu 04 Feb 2027 07:26:08 +0000
asID:                     264975
IP address blocks:        2804:30d4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/1/EE8281B7BE13CC06AE2ABA30537E8664C712FA16.crl
                          rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/1/EE8281B7BE13CC06AE2ABA30537E8664C712FA16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8281B7BE13CC06AE2ABA30537E8664C712FA16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:52:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ba:6d:f9:d5:f8:be:95:d8:ec:5c:78:9d:b2:54:11:48:69:ab:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE8281B7BE13CC06AE2ABA30537E8664C712FA16
        Validity
            Not Before: Feb  5 07:21:08 2026 GMT
            Not After : Feb  4 07:26:08 2027 GMT
        Subject: CN=53E228E33EF6B851E9B8A6607B4795DC8E806CD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:42:a9:80:c2:dd:30:e9:90:96:af:fc:a4:a6:
                    90:14:f3:80:23:cb:88:5d:42:f7:b0:e4:5e:80:12:
                    cf:ca:d8:7f:26:21:ba:d9:cb:86:d1:82:31:d9:58:
                    b3:f7:19:ff:12:89:10:42:75:51:7c:51:bf:df:92:
                    9c:61:87:16:17:60:e9:56:77:09:dc:11:d1:41:0f:
                    a5:48:b7:db:21:62:92:06:cf:aa:7d:08:f5:4f:19:
                    7f:2a:c1:4a:db:22:b0:ac:e8:b0:84:87:89:64:88:
                    8a:3c:a1:d9:45:b5:1e:86:5a:19:38:cd:28:55:3c:
                    c1:1e:33:58:0f:a6:fc:46:8c:5b:30:4f:7d:46:18:
                    d2:fe:24:e1:d9:34:c7:7f:75:bf:03:66:ca:65:17:
                    8c:eb:58:40:20:2e:04:3f:de:15:e8:9f:b9:22:fb:
                    d1:2b:4d:73:88:3a:f5:4b:4b:08:6c:26:2f:52:c7:
                    05:84:78:74:9f:46:2f:51:2b:c2:9a:a1:b2:73:55:
                    75:cb:94:45:ed:35:b7:88:64:6a:f6:d4:88:63:7b:
                    1a:b6:f8:69:1f:64:d5:d7:26:07:9e:3a:e7:00:0c:
                    2d:80:dc:78:23:f5:45:c9:a6:81:f5:c1:99:a8:1c:
                    7d:9c:a3:78:77:ac:b6:c5:75:e8:cb:a3:3e:da:09:
                    87:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E2:28:E3:3E:F6:B8:51:E9:B8:A6:60:7B:47:95:DC:8E:80:6C:D6
            X509v3 Authority Key Identifier:
                keyid:EE:82:81:B7:BE:13:CC:06:AE:2A:BA:30:53:7E:86:64:C7:12:FA:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/1/EE8281B7BE13CC06AE2ABA30537E8664C712FA16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8281B7BE13CC06AE2ABA30537E8664C712FA16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/1/323830343a333064343a3a2f33322d3438203d3e20323634393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:61:6f:c4:ad:72:31:fd:16:91:94:36:11:3a:6d:2b:54:d9:
         d8:9a:2b:05:6b:a7:bc:b3:3a:00:e8:b4:c8:51:f9:8b:7c:48:
         28:94:c0:2b:96:e3:b8:17:be:1c:8f:3d:ff:cf:f1:52:38:c5:
         bd:b1:91:aa:84:21:ce:0a:87:a7:e7:37:5e:17:a2:8a:b6:5e:
         37:36:52:d2:98:26:1e:71:75:6a:87:c7:0b:cd:14:ca:40:df:
         fd:ee:55:6d:ec:28:61:1c:32:5b:7b:4d:8b:b2:0f:b5:ef:29:
         02:e4:b5:fb:fa:29:7c:ef:83:f7:0f:c6:09:91:6b:34:f2:af:
         80:ee:5b:ad:d3:b3:9b:1a:03:42:09:f4:b4:92:81:c2:77:32:
         4e:7b:30:73:94:54:52:84:f2:f4:9b:43:31:9b:dc:55:d9:37:
         f2:34:a6:9e:5a:8c:75:39:c1:0d:4d:1b:bc:c5:bf:46:1a:5e:
         62:4f:4c:03:0b:fa:33:3d:0b:ae:b9:d1:63:f5:95:df:a2:12:
         fd:c9:b1:9a:a0:66:30:97:85:a2:82:f3:a4:e3:d1:04:f8:9c:
         ef:8a:1d:9a:6a:3d:90:75:fb:ba:28:4c:5f:00:90:c9:d6:37:
         78:71:d8:49:5b:4d:f2:2b:af:86:63:0a:9f:5c:fd:71:e3:07:
         61:2a:10:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:29:06 2026 by rpki-client