Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/323830343a326666303a3a2f33322d3438203d3e20323634393231.roa
File:                     323830343a326666303a3a2f33322d3438203d3e20323634393231.roa (raw, json)
Hash identifier:          kumICfQm3lKzccvXKKN6/U04OECFspM9YZuLvViEwn4=
Subject key identifier:   E6:F9:49:AC:76:54:50:1A:AA:3F:6B:84:84:99:E8:1C:2C:BF:C1:F8
Certificate issuer:       /CN=CA09CE87D7962722451F9BB1B0BABEB641024526
Certificate serial:       345EF113143791486F7B3DF487FAE3429D2F2571
Authority key identifier: CA:09:CE:87:D7:96:27:22:45:1F:9B:B1:B0:BA:BE:B6:41:02:45:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/323830343a326666303a3a2f33322d3438203d3e20323634393231.roa
Signing time:             Thu 05 Feb 2026 18:57:34 +0000
ROA not before:           Thu 05 Feb 2026 18:52:34 +0000
ROA not after:            Thu 04 Feb 2027 18:57:34 +0000
asID:                     264921
IP address blocks:        2804:2ff0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.crl
                          rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:40:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5e:f1:13:14:37:91:48:6f:7b:3d:f4:87:fa:e3:42:9d:2f:25:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA09CE87D7962722451F9BB1B0BABEB641024526
        Validity
            Not Before: Feb  5 18:52:34 2026 GMT
            Not After : Feb  4 18:57:34 2027 GMT
        Subject: CN=E6F949AC7654501AAA3F6B848499E81C2CBFC1F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:05:8c:10:25:e5:f4:44:29:99:a0:ac:66:9a:
                    c1:10:56:58:da:29:ee:01:b7:c8:d3:80:5d:2f:a5:
                    41:dd:e6:ca:8c:71:c4:1b:c2:ec:39:00:12:6e:88:
                    9d:d7:f3:19:a9:03:8f:4e:c9:cb:fc:30:41:a0:8e:
                    31:a4:1f:47:a7:63:68:c2:8c:d7:90:08:e3:8e:02:
                    36:f3:4d:0f:91:df:00:61:95:cb:c4:7b:91:fc:73:
                    25:71:83:6e:80:71:6f:44:7e:5b:db:cc:dc:81:40:
                    94:2d:50:27:ad:6d:cc:de:4b:91:4b:70:02:ba:eb:
                    c9:4a:fa:3f:29:5d:2a:78:15:56:50:8f:60:a6:19:
                    f6:85:77:c4:c8:32:4d:1e:24:85:88:d6:0f:34:c6:
                    8e:1f:c7:c3:5d:28:ef:63:f9:2c:34:39:c5:29:a5:
                    f6:fd:0e:cc:05:7c:57:8d:21:8d:31:93:ce:01:d2:
                    2d:ea:ce:8e:55:9a:db:24:7f:73:62:47:91:a2:57:
                    98:4b:ab:37:d7:cc:16:90:70:25:09:e1:c3:31:f0:
                    e0:3b:3f:48:de:6b:73:d4:0f:6a:2d:bb:cd:d4:a8:
                    ba:4e:85:0a:3a:42:7c:86:1d:f7:5b:4a:52:0f:7e:
                    6e:c5:81:a1:15:fb:5d:f2:1e:52:17:bc:78:c7:8f:
                    e5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F9:49:AC:76:54:50:1A:AA:3F:6B:84:84:99:E8:1C:2C:BF:C1:F8
            X509v3 Authority Key Identifier:
                keyid:CA:09:CE:87:D7:96:27:22:45:1F:9B:B1:B0:BA:BE:B6:41:02:45:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/323830343a326666303a3a2f33322d3438203d3e20323634393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ff0::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:f2:43:de:22:73:3f:78:8f:94:49:e5:79:b3:28:34:36:65:
         84:3b:06:c4:35:ad:7f:d8:68:53:9f:a6:cd:97:90:ef:29:19:
         67:0b:28:08:be:38:07:51:6e:63:91:b5:a1:50:9a:0f:0e:a7:
         9a:41:d2:8c:70:3a:4e:96:c2:a1:97:1c:a7:61:57:28:3f:2a:
         f8:41:b6:1c:7d:81:2f:9b:9e:12:64:a5:06:35:b8:62:93:c7:
         0b:5e:0f:94:49:d3:8d:68:09:c1:5c:4d:9f:58:fb:21:8c:cf:
         41:a5:9b:e8:36:d7:7f:05:fa:c7:ad:ef:76:1f:b6:94:c8:6a:
         05:6a:47:f0:e5:55:9c:a1:55:15:fc:da:ff:37:85:22:33:33:
         b5:c2:65:b6:e5:30:f5:a5:9e:62:72:17:f6:c3:1a:fa:eb:5c:
         90:9b:6c:03:52:6d:92:1a:a0:14:ac:df:04:c9:75:f1:ee:78:
         ae:10:ec:5f:0f:22:92:c5:90:9b:5d:7b:57:3d:a6:46:c6:43:
         8a:12:77:ce:a3:25:47:0e:a1:44:92:cb:b7:a8:cf:2e:e4:a8:
         03:62:07:bb:cc:c6:dc:5f:fd:86:29:6f:d9:ed:74:54:7b:37:
         24:23:85:4a:9a:a0:d0:8a:59:e9:0b:aa:bb:4e:cf:0a:f7:6f:
         95:06:94:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:21:32 2026 by rpki-client