Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/323830343a6464303a3a2f33322d313238203d3e203238363339.roa
File:                     323830343a6464303a3a2f33322d313238203d3e203238363339.roa (raw, json)
Hash identifier:          xrF+HAwt3f6iiXrJOxbbEFXuqTnzwLGlA1xIuChT8Nc=
Subject key identifier:   05:0B:CF:D5:0D:D7:86:5E:E7:B8:B1:8B:CF:DB:9E:07:D9:64:C1:F6
Certificate issuer:       /CN=8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4
Certificate serial:       25BD36E61B157B65993571AA14E5836859FA7123
Authority key identifier: 8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/323830343a6464303a3a2f33322d313238203d3e203238363339.roa
Signing time:             Wed 04 Feb 2026 23:43:47 +0000
ROA not before:           Wed 04 Feb 2026 23:38:47 +0000
ROA not after:            Wed 03 Feb 2027 23:43:47 +0000
asID:                     28639
IP address blocks:        2804:dd0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.crl
                          rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 16:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:bd:36:e6:1b:15:7b:65:99:35:71:aa:14:e5:83:68:59:fa:71:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4
        Validity
            Not Before: Feb  4 23:38:47 2026 GMT
            Not After : Feb  3 23:43:47 2027 GMT
        Subject: CN=050BCFD50DD7865EE7B8B18BCFDB9E07D964C1F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:1d:2e:dc:24:b3:61:f3:e2:b4:fe:44:06:f6:
                    76:c3:c0:be:ae:17:0e:25:57:21:39:d8:bf:74:20:
                    ab:d8:9c:61:fc:5e:b7:2b:2f:35:1b:10:ff:65:6f:
                    36:21:0f:cd:0c:a4:a4:0f:58:cf:f0:f8:32:6f:2a:
                    98:a1:3b:c2:f8:ef:0e:bf:25:4e:e2:18:2c:e8:c8:
                    b5:35:a4:e0:9d:36:4b:e2:97:79:68:5a:7f:0b:04:
                    02:ba:2b:65:df:e9:a2:12:a3:bb:bf:89:b0:60:bf:
                    e6:c4:69:7a:56:e3:3b:fd:0b:e5:28:6c:42:32:30:
                    ab:69:b8:dd:f9:44:68:dc:a2:c3:7e:15:52:b5:30:
                    66:e1:cc:b9:60:5f:74:64:6d:59:47:dd:0f:68:26:
                    e8:07:5e:ef:28:22:32:16:3f:0f:6c:13:b5:ab:ef:
                    af:b4:78:de:c0:77:b6:24:c4:06:f3:39:9a:93:c1:
                    b8:c0:30:85:6e:40:01:9c:9f:a0:9a:38:20:23:71:
                    98:e5:c9:ae:8f:d7:87:29:28:8f:86:4f:72:50:49:
                    92:5b:fb:6c:b3:7f:e7:cb:24:2d:50:34:d4:37:a1:
                    e7:cd:db:2f:bc:c5:27:b3:10:d7:d8:95:23:b0:26:
                    bd:de:e7:f4:59:31:bf:cb:d7:d1:b2:5b:3d:f8:2c:
                    c8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0B:CF:D5:0D:D7:86:5E:E7:B8:B1:8B:CF:DB:9E:07:D9:64:C1:F6
            X509v3 Authority Key Identifier:
                keyid:8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/323830343a6464303a3a2f33322d313238203d3e203238363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:07:a7:98:8b:85:48:72:ec:dd:a0:00:28:a1:99:07:34:e4:
         f4:4c:28:6f:a2:b0:c0:d0:d0:bb:71:1f:26:4b:ba:9b:40:91:
         2e:e0:11:c8:38:e5:a0:6c:af:54:b6:a8:45:e3:ff:0f:c4:5e:
         3c:43:41:1c:6f:ea:f7:06:13:ed:29:60:0a:f9:fe:93:89:c0:
         78:fb:b7:1c:1c:5b:30:f0:61:53:20:ae:73:76:d1:59:fb:35:
         87:07:ec:6d:8d:78:14:9f:84:1d:ae:a4:26:08:79:36:ff:99:
         13:21:6d:7c:8c:25:19:46:01:25:20:a0:0a:32:b6:ad:b2:4f:
         bd:3e:e8:89:a4:8c:a8:70:e4:58:c8:3f:48:65:ab:ab:ad:9f:
         af:a2:a1:da:3f:d6:11:5a:96:27:67:49:c1:ac:51:7e:c9:41:
         5c:15:5e:b4:d2:3c:fb:5c:4b:fa:86:40:5e:88:fd:6d:f8:1b:
         b8:cf:96:3a:f1:8e:15:e7:40:8c:e7:5a:f7:6e:3c:c2:1c:5b:
         df:7e:7a:a9:54:80:c3:2b:fe:56:60:bf:fa:13:5f:d6:6f:a7:
         c3:48:7f:66:27:c4:f1:8a:b8:60:72:34:b0:5b:9b:06:a1:5c:
         fc:6e:db:d1:a1:6e:29:a5:5e:64:a7:af:e3:78:a5:b2:58:75:
         5d:31:a9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:20:40 2026 by rpki-client