Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/1/323830343a383833633a6130303a3a2f34302d3430203d3e20323732373538.roa
File:                     323830343a383833633a6130303a3a2f34302d3430203d3e20323732373538.roa (raw, json)
Hash identifier:          QzfcajfdUHELK45avXb+/K0YKMR5qOcBlJcteTE6DPA=
Subject key identifier:   EA:84:9D:C4:DB:C5:BA:EC:C0:97:C7:B0:57:51:7E:06:32:38:4D:1D
Certificate issuer:       /CN=E68618F45B841B2C0F36D3F8AD7C98AF5A517052
Certificate serial:       52717384FB1013F88AA0E9AF139428006B6D7CE4
Authority key identifier: E6:86:18:F4:5B:84:1B:2C:0F:36:D3:F8:AD:7C:98:AF:5A:51:70:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68618F45B841B2C0F36D3F8AD7C98AF5A517052.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/1/323830343a383833633a6130303a3a2f34302d3430203d3e20323732373538.roa
Signing time:             Thu 05 Feb 2026 06:18:41 +0000
ROA not before:           Thu 05 Feb 2026 06:13:41 +0000
ROA not after:            Thu 04 Feb 2027 06:18:41 +0000
asID:                     272758
IP address blocks:        2804:883c:a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/1/E68618F45B841B2C0F36D3F8AD7C98AF5A517052.crl
                          rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/1/E68618F45B841B2C0F36D3F8AD7C98AF5A517052.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68618F45B841B2C0F36D3F8AD7C98AF5A517052.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:71:73:84:fb:10:13:f8:8a:a0:e9:af:13:94:28:00:6b:6d:7c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E68618F45B841B2C0F36D3F8AD7C98AF5A517052
        Validity
            Not Before: Feb  5 06:13:41 2026 GMT
            Not After : Feb  4 06:18:41 2027 GMT
        Subject: CN=EA849DC4DBC5BAECC097C7B057517E0632384D1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1d:76:82:8a:c4:71:47:7d:42:23:b6:f3:2d:
                    a6:65:96:9d:fc:da:f7:af:47:aa:97:3a:ff:bb:56:
                    70:ad:96:12:6e:5f:4b:4d:3a:a5:86:3b:c7:a7:a5:
                    02:9a:31:ae:ca:4d:60:95:54:ab:fb:60:6b:b7:70:
                    8a:7c:30:2b:99:ee:d2:d7:65:05:47:fa:d2:cd:1e:
                    2f:e2:11:de:76:e7:87:ac:6e:bd:3c:b9:d6:cd:76:
                    1b:24:c5:40:19:6c:40:b5:76:d8:02:06:aa:a8:bb:
                    52:33:81:0d:08:b4:6c:1e:de:fd:93:8b:9b:77:91:
                    61:3d:78:84:11:06:08:df:10:43:56:09:70:86:32:
                    61:21:c1:e2:f8:07:ad:45:fc:59:e6:47:cc:fa:5c:
                    ed:25:98:85:73:a1:1f:dd:f6:1a:0d:8a:05:d8:f9:
                    8a:3f:2b:94:a0:42:7e:26:91:61:a3:f4:39:d0:9f:
                    a0:a0:10:30:ef:6e:d6:5a:20:4f:f3:d3:00:0d:2d:
                    6f:60:7a:1f:77:91:51:27:48:67:7e:0d:fd:28:ad:
                    03:0d:5d:c6:89:53:57:eb:b6:c9:24:1f:e2:a7:3f:
                    84:e4:a5:24:90:fd:01:af:80:af:cc:76:1c:aa:2e:
                    1d:c4:52:f3:c8:13:53:db:db:68:ac:09:57:43:55:
                    03:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:84:9D:C4:DB:C5:BA:EC:C0:97:C7:B0:57:51:7E:06:32:38:4D:1D
            X509v3 Authority Key Identifier:
                keyid:E6:86:18:F4:5B:84:1B:2C:0F:36:D3:F8:AD:7C:98:AF:5A:51:70:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/1/E68618F45B841B2C0F36D3F8AD7C98AF5A517052.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68618F45B841B2C0F36D3F8AD7C98AF5A517052.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/1/323830343a383833633a6130303a3a2f34302d3430203d3e20323732373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:883c:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         9a:3b:5c:23:cd:aa:3e:d0:96:80:10:51:c6:8e:d6:b9:41:03:
         78:02:08:95:24:bf:29:dc:25:09:1d:3e:0d:86:9e:d9:49:66:
         23:2c:d7:50:ee:82:a4:ac:61:4f:ec:eb:f0:57:97:45:c3:2e:
         9c:20:59:05:72:d4:76:31:34:c2:9d:6c:dd:2a:1a:25:61:06:
         6d:38:07:80:22:03:f6:99:92:a9:b7:c4:cc:8d:95:2c:8d:ba:
         79:1d:c4:fc:77:9e:77:e3:7c:e4:a8:02:a4:dc:8c:b2:5c:c9:
         d0:f0:4e:7e:3e:13:99:9c:58:92:f6:d1:ae:b5:67:b2:31:e4:
         4c:fb:ad:f5:17:82:19:c4:63:d5:84:a6:b6:2a:bf:3a:0c:c1:
         6d:41:42:53:5d:91:03:3e:1f:6d:33:83:7e:80:d2:0c:9e:e4:
         8e:f0:1c:97:d4:f0:5d:9c:39:52:09:c0:b7:de:70:d7:9e:82:
         61:c2:ed:26:51:e5:2a:42:99:37:e6:e4:0c:3a:1c:70:18:5a:
         46:a8:31:9c:d2:2f:db:3a:69:85:61:c2:2d:43:dc:fa:62:58:
         4f:11:ec:a3:94:d9:16:24:4f:14:3e:54:8f:e3:b7:05:e0:10:
         58:66:3e:6b:27:27:f9:7a:bd:d5:11:57:6e:14:31:2f:02:a2:
         b2:38:e9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:44:01 2026 by rpki-client