Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/323830343a383863343a3a2f33322d3332203d3e20323732373932.roa
File:                     323830343a383863343a3a2f33322d3332203d3e20323732373932.roa (raw, json)
Hash identifier:          r7ueBavn8yN7twz5oL3sK0f4HYe74pLzuBYMQUpJvfM=
Subject key identifier:   BB:BD:7C:84:5E:21:9F:D7:9A:4C:AB:7A:EC:0D:C3:F1:0C:3A:A3:29
Certificate issuer:       /CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9
Certificate serial:       178AFD996EBBB63EC8EE961327E3B859215251CE
Authority key identifier: 28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/323830343a383863343a3a2f33322d3332203d3e20323732373932.roa
Signing time:             Thu 05 Feb 2026 23:24:05 +0000
ROA not before:           Thu 05 Feb 2026 23:19:05 +0000
ROA not after:            Thu 04 Feb 2027 23:24:05 +0000
asID:                     272792
IP address blocks:        2804:88c4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl
                          rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:24:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:8a:fd:99:6e:bb:b6:3e:c8:ee:96:13:27:e3:b8:59:21:52:51:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9
        Validity
            Not Before: Feb  5 23:19:05 2026 GMT
            Not After : Feb  4 23:24:05 2027 GMT
        Subject: CN=BBBD7C845E219FD79A4CAB7AEC0DC3F10C3AA329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f0:74:e7:ac:73:b9:36:18:64:2d:61:b5:70:
                    a2:20:16:08:52:0f:81:0e:74:11:e6:b7:eb:f3:1a:
                    b4:a1:b5:fc:2c:ac:8f:5d:bb:78:0a:f8:4b:2d:a1:
                    75:61:47:15:da:1b:f0:ef:61:dd:09:3b:56:f1:79:
                    48:24:6a:5d:25:db:87:1d:c5:c4:05:88:f4:11:3c:
                    4c:58:dc:5c:2c:64:57:cd:82:dd:da:d3:6f:85:07:
                    87:ad:2c:34:d1:05:51:99:e3:53:ea:06:aa:aa:13:
                    39:5b:f1:db:41:b7:55:cc:c4:d2:66:40:20:e7:90:
                    c5:90:19:4f:7e:b5:43:99:92:c1:91:cc:34:a8:0a:
                    95:71:7b:03:7c:25:97:ef:83:fd:42:65:c5:e5:8c:
                    97:22:7a:2c:06:fe:f3:6e:98:f9:bd:70:a4:10:c5:
                    26:7f:3f:17:5a:e0:e2:df:5c:f2:55:48:1a:6e:45:
                    33:fd:3d:65:71:50:99:e7:05:7e:93:20:e1:ce:9c:
                    d5:1b:c8:3f:40:d9:ee:d8:1b:10:1f:f0:01:4a:c0:
                    f2:be:68:5d:13:e6:cc:9a:0b:df:cb:5b:0f:d0:2b:
                    4f:09:c5:dc:32:eb:ed:87:51:cf:39:3b:44:a8:4e:
                    be:64:7d:b1:45:76:e1:24:ed:85:bf:aa:c0:36:86:
                    b2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BD:7C:84:5E:21:9F:D7:9A:4C:AB:7A:EC:0D:C3:F1:0C:3A:A3:29
            X509v3 Authority Key Identifier:
                keyid:28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/323830343a383863343a3a2f33322d3332203d3e20323732373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:9f:43:c8:0f:4d:f1:ac:32:fd:a0:1c:da:41:16:15:85:27:
         a9:4b:92:fe:43:b9:9b:26:c7:2f:55:35:eb:8f:d6:77:d7:7b:
         2c:74:bb:a7:b7:0d:f2:b6:a2:ec:43:b9:eb:4c:0d:14:93:04:
         a4:72:3c:fb:00:e5:13:3f:ed:c0:31:cf:ed:57:4c:b2:ea:24:
         b5:d8:54:2d:f6:77:88:c3:3b:7a:b1:af:f5:f1:54:c0:33:85:
         6f:ad:a7:1a:02:80:b9:b5:02:52:92:d4:ce:3e:16:8c:72:ff:
         7b:88:8b:c0:5c:02:a0:a1:e9:e7:e8:ee:86:16:af:1a:a2:8c:
         47:60:aa:0c:b7:bf:da:ee:c1:4f:81:49:da:66:e7:d8:25:66:
         a3:35:02:b1:94:e6:d3:a5:9a:74:66:ae:9d:91:c8:12:4d:e9:
         7d:f1:9c:48:b1:75:e7:e6:45:11:a3:67:d6:fb:73:19:f3:c4:
         4a:fa:d6:42:1a:8c:bf:6e:1f:6a:93:e3:b8:05:a2:e0:46:a8:
         64:23:35:64:80:c6:34:da:3a:c4:83:53:e8:c3:02:55:05:39:
         60:13:49:b4:a3:8c:96:d2:25:e8:5d:31:30:bd:42:e9:0c:9b:
         9b:db:3f:6b:e4:67:cc:28:6d:75:9f:8b:7b:ff:cb:0e:eb:de:
         4c:12:6a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:49:07 2026 by rpki-client