Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/323830343a373865343a3a2f33322d313238203d3e20323731323732.roa
File:                     323830343a373865343a3a2f33322d313238203d3e20323731323732.roa (raw, json)
Hash identifier:          d+EYE33eEgptcTt+BhaphrRcSHf87NNVNd9Mr/VruMw=
Subject key identifier:   94:D6:A7:09:0B:72:0B:91:C1:3B:49:2D:97:CF:55:1B:EB:93:88:C2
Certificate issuer:       /CN=D6592886C2264A6296BF445F0FA4EF8CF71BB049
Certificate serial:       2BE99E4A2B77E2B32CE5AF316463A6584C8B0F68
Authority key identifier: D6:59:28:86:C2:26:4A:62:96:BF:44:5F:0F:A4:EF:8C:F7:1B:B0:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/323830343a373865343a3a2f33322d313238203d3e20323731323732.roa
Signing time:             Thu 05 Feb 2026 09:06:32 +0000
ROA not before:           Thu 05 Feb 2026 09:01:32 +0000
ROA not after:            Thu 04 Feb 2027 09:06:32 +0000
asID:                     271272
IP address blocks:        2804:78e4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.crl
                          rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 16:12:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e9:9e:4a:2b:77:e2:b3:2c:e5:af:31:64:63:a6:58:4c:8b:0f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6592886C2264A6296BF445F0FA4EF8CF71BB049
        Validity
            Not Before: Feb  5 09:01:32 2026 GMT
            Not After : Feb  4 09:06:32 2027 GMT
        Subject: CN=94D6A7090B720B91C13B492D97CF551BEB9388C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3a:05:dc:15:92:75:67:9a:1a:c2:ce:cb:83:
                    1c:96:62:98:06:10:12:0c:74:2b:a6:1a:f1:e5:32:
                    40:88:da:13:f4:a9:a6:62:d7:54:97:d0:ac:d0:6b:
                    4a:bd:48:e3:0c:d5:d1:af:4b:ab:0e:b2:48:d8:6a:
                    b3:f2:f1:49:a7:f2:5f:46:23:d5:0c:d4:2c:e5:0e:
                    8b:d8:12:80:a0:4a:e9:96:63:d1:3b:8a:71:e5:92:
                    26:f6:8b:d2:42:cb:f3:08:4c:5d:fc:2b:2b:4a:96:
                    9d:56:31:61:a0:d1:73:8c:55:b6:8b:c1:59:c6:5c:
                    3a:ac:61:00:16:a0:f1:6e:c0:9c:e1:cd:03:59:a0:
                    4a:b7:4c:f8:c1:dc:27:49:e6:57:c8:12:b4:5d:f4:
                    ab:c0:3f:5d:3f:9c:e6:de:e0:ec:43:e8:f6:5b:2a:
                    a7:fc:d5:2c:2a:8b:9f:3b:a6:14:1b:ff:88:db:dc:
                    95:08:67:8d:4e:c3:29:34:f4:5f:53:d8:c0:3b:f7:
                    dc:87:b4:75:58:61:53:29:31:0b:05:ad:6a:5a:46:
                    a1:e7:fe:77:ee:79:e4:f6:19:3a:ab:a6:3b:f4:10:
                    60:22:70:0f:3e:88:97:50:82:86:ba:f8:42:f5:39:
                    9f:7b:1e:09:b8:3f:fb:ca:31:0b:0f:36:6e:3f:40:
                    d7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D6:A7:09:0B:72:0B:91:C1:3B:49:2D:97:CF:55:1B:EB:93:88:C2
            X509v3 Authority Key Identifier:
                keyid:D6:59:28:86:C2:26:4A:62:96:BF:44:5F:0F:A4:EF:8C:F7:1B:B0:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/323830343a373865343a3a2f33322d313238203d3e20323731323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:a6:55:a1:25:f8:4e:5a:cb:e7:23:b2:93:f1:75:98:38:0e:
         df:67:8c:15:ca:28:53:b4:48:90:8b:6e:7c:bd:8b:8a:15:06:
         7a:1f:13:8a:b5:25:d7:23:ff:31:58:01:43:d2:9a:56:27:7f:
         02:c7:13:e7:f1:5a:af:6f:60:5f:d1:3b:46:93:78:9d:2b:6e:
         d2:ba:94:ff:e8:bd:2d:fc:b1:d8:9c:f1:77:a5:8c:c6:fe:23:
         c2:d8:6f:b4:4d:27:78:eb:17:ea:a6:af:c6:47:1b:b9:74:1c:
         a4:8c:2c:a3:4d:31:12:51:93:8d:e1:e9:aa:5a:d2:57:a7:bb:
         d9:e6:0b:cd:00:00:8b:0d:da:61:d3:9d:d5:4a:cd:29:f3:4e:
         11:f8:a5:58:d0:7a:7a:38:9d:b8:79:f1:16:c7:71:64:d2:57:
         53:f4:65:11:d6:ed:39:63:f0:bb:9c:5c:3b:f5:a8:bb:04:d6:
         3a:46:a3:c9:38:3d:cb:8a:06:76:88:ba:19:38:f9:28:65:15:
         af:5d:c5:7b:70:e5:dd:65:42:c4:21:f7:58:fb:78:6e:a7:92:
         64:16:a6:2c:37:a6:5a:f9:00:4f:1e:bd:9a:19:7e:dc:f1:a2:
         4a:5f:5f:5b:62:30:21:1c:e6:a5:b6:b5:00:a6:da:fb:5e:39:
         48:87:0d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:04:19 2026 by rpki-client