Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a3a2f33332d3333203d3e20323632363432.roa
File:                     323830343a326561383a3a2f33332d3333203d3e20323632363432.roa (raw, json)
Hash identifier:          clsZCJNTBE/pZqzQQzepndBRi2zthE3nZ8Tr96yoEw4=
Subject key identifier:   43:ED:59:D4:80:51:B7:AA:94:EC:A1:C6:10:13:A3:04:47:1E:6C:DA
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       7C4D53118187654DE87B80C6A502D085299C27A6
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a3a2f33332d3333203d3e20323632363432.roa
Signing time:             Thu 05 Feb 2026 04:43:40 +0000
ROA not before:           Thu 05 Feb 2026 04:38:40 +0000
ROA not after:            Thu 04 Feb 2027 04:43:40 +0000
asID:                     262642
IP address blocks:        2804:2ea8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:4d:53:11:81:87:65:4d:e8:7b:80:c6:a5:02:d0:85:29:9c:27:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Feb  5 04:38:40 2026 GMT
            Not After : Feb  4 04:43:40 2027 GMT
        Subject: CN=43ED59D48051B7AA94ECA1C61013A304471E6CDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:34:b7:18:fa:e5:02:81:47:cf:34:91:e9:ce:
                    4a:3f:76:b6:fa:59:d2:d4:f8:a1:70:4b:8e:a7:24:
                    13:7f:0e:da:70:c8:9c:2d:05:f8:ad:3b:68:cd:02:
                    08:e1:d1:81:37:57:af:39:9e:c5:9e:e6:7a:0d:84:
                    1a:7d:7f:b8:45:b7:bd:24:58:b9:fe:20:f7:c1:1e:
                    45:d8:a4:d4:76:bc:97:34:60:32:1f:53:e8:0b:2c:
                    ba:99:97:64:f3:05:3a:1e:c6:ae:a5:d9:10:91:ce:
                    0a:4c:32:68:fb:6d:42:4b:e9:de:cc:aa:72:59:82:
                    ae:85:75:6d:0f:3d:fa:c1:b5:8a:c8:9c:25:ac:ac:
                    84:dd:46:50:46:6d:07:ae:89:93:84:3a:17:b1:2e:
                    f0:85:f5:5a:cf:77:b2:e0:6e:e8:d9:86:32:4c:39:
                    5e:c4:dc:f1:8f:25:11:bb:da:30:0f:36:be:57:3d:
                    5f:4c:fe:53:b5:c9:9d:d7:a8:00:b3:4c:f7:eb:74:
                    b9:e3:70:3e:30:99:a3:4e:61:a9:16:e5:b7:71:06:
                    d1:35:16:83:8d:71:3f:54:cc:1a:f4:84:a9:24:d7:
                    25:a5:ae:26:05:9b:15:15:a5:31:45:8d:61:ca:27:
                    61:8c:ea:73:85:45:fd:8d:65:e8:46:f5:d9:c1:11:
                    9d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:ED:59:D4:80:51:B7:AA:94:EC:A1:C6:10:13:A3:04:47:1E:6C:DA
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a3a2f33332d3333203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ea8::/33

    Signature Algorithm: sha256WithRSAEncryption
         83:90:f1:2d:e9:d4:8c:46:9e:1e:75:00:5a:27:e0:8d:91:7e:
         cf:cf:33:c5:0f:02:b7:9c:3b:5a:d4:cb:d1:a6:97:90:a9:81:
         13:90:eb:4f:7b:21:73:1d:9e:9f:3b:a9:9c:93:d3:cd:68:6f:
         1e:0c:07:e5:84:b9:75:dc:ea:4e:c6:b6:88:52:10:1c:4a:2f:
         bb:8d:d2:eb:80:1f:1c:26:f1:ec:be:b7:01:b8:cf:53:2c:0c:
         01:3d:de:05:4e:5e:39:98:00:cc:27:98:3b:c1:f2:3c:52:04:
         6c:1b:5d:33:24:e3:8c:73:95:cb:0a:60:5f:d3:ff:cf:4e:c7:
         00:eb:5a:f2:50:16:96:90:fd:a4:c3:01:93:17:6c:fb:f5:c1:
         31:c9:91:a0:76:01:c8:c8:03:1e:d4:08:79:6e:5b:0c:de:a0:
         03:33:e5:2c:88:dd:14:69:1c:0f:49:94:a3:77:42:17:f1:b2:
         a8:bf:39:9a:36:48:68:cc:5c:79:4f:a8:f4:db:f2:6d:db:58:
         4f:fa:ba:b3:6b:59:88:66:bf:98:e7:b2:15:a7:16:07:dc:d1:
         1a:59:9f:83:03:13:cd:99:d1:10:14:b0:39:5e:6b:00:90:ec:
         c6:fa:b6:8c:49:84:3b:a6:0c:7a:bb:60:b9:3c:5c:d2:8e:e7:
         86:10:53:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:24:32 2026 by rpki-client