Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/323830343a383863343a3a2f34382d3438203d3e20323732373932.roa
File:                     323830343a383863343a3a2f34382d3438203d3e20323732373932.roa (raw, json)
Hash identifier:          z2Ye1MBT5pjkw+DRBw6rjJw2ZoVM8hv9+2noKBejJbM=
Subject key identifier:   C9:58:88:65:FE:D1:9A:8F:C7:79:56:80:A5:30:C6:86:14:01:9F:34
Certificate issuer:       /CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9
Certificate serial:       0C410E089A6AE7538202E3EA30F30547CBC0A6F8
Authority key identifier: 28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/323830343a383863343a3a2f34382d3438203d3e20323732373932.roa
Signing time:             Thu 05 Feb 2026 23:24:05 +0000
ROA not before:           Thu 05 Feb 2026 23:19:05 +0000
ROA not after:            Thu 04 Feb 2027 23:24:05 +0000
asID:                     272792
IP address blocks:        2804:88c4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl
                          rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:24:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:41:0e:08:9a:6a:e7:53:82:02:e3:ea:30:f3:05:47:cb:c0:a6:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9
        Validity
            Not Before: Feb  5 23:19:05 2026 GMT
            Not After : Feb  4 23:24:05 2027 GMT
        Subject: CN=C9588865FED19A8FC7795680A530C68614019F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:af:be:76:b6:c7:c7:ae:80:d7:fa:de:1a:d3:
                    db:f6:4d:f9:ae:2a:7d:e3:d0:ee:41:34:34:41:6d:
                    3b:70:f4:a9:bf:52:41:e7:df:14:69:47:bd:48:22:
                    5f:63:18:53:bf:24:cf:ac:a8:8d:67:56:b5:06:36:
                    66:c3:d6:86:b1:8d:6f:51:91:01:88:20:1d:73:06:
                    14:6e:90:84:3b:d2:46:86:10:83:9c:d3:61:8d:8e:
                    70:7d:70:ca:0f:d2:9c:82:72:91:e2:8b:bc:58:05:
                    9b:31:3d:a2:55:7b:2f:bb:48:3d:c5:0b:0d:e5:e6:
                    f1:8e:ab:9b:c3:7d:15:13:a2:bd:68:0b:ff:ef:0a:
                    03:33:17:19:ca:0c:a9:be:74:3e:ac:8e:c2:c7:5a:
                    bc:d2:25:5d:f2:52:03:fe:4a:1c:cc:42:d9:e5:06:
                    1c:6e:19:2c:9d:6c:19:e7:cb:7b:57:c6:e1:86:d2:
                    70:66:2a:6e:56:96:34:b7:4f:72:91:33:11:35:a1:
                    dd:92:97:86:19:2d:a3:0f:e5:9e:d1:2c:d3:5b:2c:
                    75:7e:9f:c5:fe:ac:63:71:da:bb:c2:78:d9:45:00:
                    00:67:d6:e2:11:f0:8b:04:fb:92:64:51:be:80:82:
                    6c:bc:c3:32:55:a5:58:79:3e:23:1b:ef:30:33:68:
                    25:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:58:88:65:FE:D1:9A:8F:C7:79:56:80:A5:30:C6:86:14:01:9F:34
            X509v3 Authority Key Identifier:
                keyid:28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/323830343a383863343a3a2f34382d3438203d3e20323732373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88c4::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:59:78:dc:85:0d:69:d2:ce:80:dd:7d:73:70:c0:6e:01:0c:
         1d:e2:0d:c5:60:c7:2a:c1:c9:66:01:ec:19:b9:21:d5:37:a9:
         f4:b6:43:74:2c:34:c9:4c:e2:47:21:ab:90:4d:68:83:b6:bf:
         05:dc:a0:16:ff:dc:5f:48:39:4e:79:b9:29:eb:98:c2:01:55:
         8b:ee:30:7d:c3:aa:0d:bb:36:37:f0:40:ef:65:f2:19:e2:78:
         ed:b0:0b:49:cb:ce:00:81:f2:20:10:d4:c3:bf:79:c1:5e:12:
         6c:67:e0:f8:28:35:b9:81:eb:48:38:5c:66:c8:7c:da:ff:21:
         c9:94:9a:c4:29:f0:ed:7e:f0:c0:df:a9:5d:bb:9e:6d:0d:8c:
         5d:d5:36:47:fd:a3:7c:c4:e3:84:a2:bc:bc:03:b1:18:de:43:
         67:7c:73:1d:4d:e2:d9:6e:a5:4a:e6:eb:29:8e:bd:43:e7:22:
         23:c4:21:4e:ba:de:51:60:7b:03:60:e0:1c:9f:33:12:11:98:
         04:f3:85:d4:68:26:4a:ff:10:c0:94:58:1c:83:c5:c1:7d:7d:
         96:13:0e:d2:61:5f:42:36:2b:54:3a:c6:29:b3:b8:e5:98:e1:
         e9:a9:7a:d7:b3:f8:1c:82:c2:21:9a:58:6b:6a:3b:97:1d:40:
         ac:87:66:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:18:34 2026 by rpki-client