Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/323830343a366163633a3a2f33322d313238203d3e20323730333539.roa
File:                     323830343a366163633a3a2f33322d313238203d3e20323730333539.roa (raw, json)
Hash identifier:          i7GQ72208CGuR10zu8EtpVkTFFXQfmr1OmoRJZ2gOU0=
Subject key identifier:   D6:73:64:D0:56:79:4A:B1:B6:68:82:3A:72:6C:6D:0F:0A:A6:99:EC
Certificate issuer:       /CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
Certificate serial:       238F520C4783EE2715C999246DB563E6AB06857E
Authority key identifier: 16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/323830343a366163633a3a2f33322d313238203d3e20323730333539.roa
Signing time:             Thu 05 Feb 2026 11:19:04 +0000
ROA not before:           Thu 05 Feb 2026 11:14:04 +0000
ROA not after:            Thu 04 Feb 2027 11:19:04 +0000
asID:                     270359
IP address blocks:        2804:6acc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl
                          rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:34:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8f:52:0c:47:83:ee:27:15:c9:99:24:6d:b5:63:e6:ab:06:85:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
        Validity
            Not Before: Feb  5 11:14:04 2026 GMT
            Not After : Feb  4 11:19:04 2027 GMT
        Subject: CN=D67364D056794AB1B668823A726C6D0F0AA699EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3d:fc:d8:61:fd:e1:8c:ad:b1:eb:77:2f:1c:
                    47:c4:b8:b5:cc:3e:9a:7f:c6:bf:00:89:02:8f:64:
                    a0:fe:ca:de:c0:ae:63:16:0a:fc:77:e6:53:73:fc:
                    a8:6c:ff:71:aa:05:48:0c:7d:51:19:41:d0:4e:26:
                    82:75:b5:64:81:6e:f8:79:4b:8a:7d:75:2f:3a:80:
                    b9:6d:4c:da:67:11:d7:51:26:63:90:c6:71:51:b2:
                    1b:d9:75:16:95:aa:84:76:62:b6:cc:7e:4e:21:f5:
                    92:d8:e3:2c:73:75:eb:17:e3:c3:8d:c2:b4:90:95:
                    fd:a5:66:38:5f:60:88:00:7b:1a:6f:ff:39:71:2c:
                    79:af:7a:ca:38:30:ba:cd:56:60:57:f0:cd:9c:b7:
                    14:c6:dd:ee:cd:3c:44:07:0d:c3:2d:69:ff:1a:cc:
                    91:05:8b:d3:61:a9:c2:49:28:88:ca:1f:87:d4:b2:
                    d1:6b:8d:8b:1c:aa:8c:5b:d9:17:ad:8f:34:1d:0c:
                    db:5b:eb:3e:e7:d5:b1:20:bc:2f:77:97:d1:10:9c:
                    ab:92:17:e3:d0:b6:ab:23:3d:c9:2e:e9:91:a6:0b:
                    34:8d:58:4e:86:e3:ff:7f:9f:6b:e9:9e:e3:b8:49:
                    1c:d1:99:dc:46:84:f5:13:f4:e7:68:49:fa:94:aa:
                    7a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:73:64:D0:56:79:4A:B1:B6:68:82:3A:72:6C:6D:0F:0A:A6:99:EC
            X509v3 Authority Key Identifier:
                keyid:16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/323830343a366163633a3a2f33322d313238203d3e20323730333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6acc::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:70:17:d0:29:b5:4e:c8:be:43:87:a8:fe:c5:70:31:a5:0e:
         d4:d0:43:b7:34:8e:bf:23:04:67:26:d1:ef:4e:16:1b:f4:96:
         53:ed:a2:0f:01:02:8d:08:5d:55:f6:11:5c:56:f7:d2:dd:8f:
         03:cb:46:c9:77:28:92:fe:f6:2a:3f:8e:da:3f:d2:80:9c:94:
         9b:80:d4:98:b8:43:4e:ed:a1:cd:87:10:d0:60:5e:71:53:69:
         cf:e7:7c:ea:20:2d:76:e2:6e:18:6a:e2:ca:31:5d:16:50:d5:
         33:e1:b1:36:33:ec:45:93:96:ce:3c:23:4b:2f:22:17:d8:8e:
         04:a8:a7:ef:eb:46:0f:02:f8:b3:fc:b1:c4:78:b3:88:18:af:
         ef:43:a6:5c:13:59:79:3e:29:c6:41:d0:82:b5:5e:71:bb:eb:
         1b:61:f4:16:2c:ed:85:2e:74:49:31:6e:6f:db:26:e7:44:3c:
         64:f2:9b:51:d2:f8:7e:f7:eb:c6:d1:c7:a8:bd:56:8d:b9:04:
         6a:77:0d:0e:47:b5:96:10:20:c8:8e:1c:2a:15:d6:80:f8:ce:
         28:59:7c:12:88:71:8a:d9:21:4c:cf:e6:ad:cc:31:c0:e8:e9:
         e6:3a:d8:43:19:63:b3:60:fa:82:c3:0a:33:28:e9:d3:59:75:
         6e:0a:f1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:37:35 2026 by rpki-client