Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/323830343a356465303a3a2f33322d313238203d3e20323638393938.roa
File:                     323830343a356465303a3a2f33322d313238203d3e20323638393938.roa (raw, json)
Hash identifier:          58zaA0K5Govfq6M37QjQE8oLv3I4lql94dhzS4TQjVY=
Subject key identifier:   8E:17:C6:87:3D:77:E1:B4:0A:18:D1:95:CD:78:D2:C0:11:51:35:F9
Certificate issuer:       /CN=E9D872ED250D3E92E59CA13EB7DE8A5B095DB686
Certificate serial:       75347F2A8666FA4C03D88F7EB2054762D80174AC
Authority key identifier: E9:D8:72:ED:25:0D:3E:92:E5:9C:A1:3E:B7:DE:8A:5B:09:5D:B6:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9D872ED250D3E92E59CA13EB7DE8A5B095DB686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/323830343a356465303a3a2f33322d313238203d3e20323638393938.roa
Signing time:             Wed 31 Dec 2025 12:28:47 +0000
ROA not before:           Wed 31 Dec 2025 12:23:47 +0000
ROA not after:            Wed 30 Dec 2026 12:28:47 +0000
asID:                     268998
IP address blocks:        2804:5de0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/E9D872ED250D3E92E59CA13EB7DE8A5B095DB686.crl
                          rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/E9D872ED250D3E92E59CA13EB7DE8A5B095DB686.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9D872ED250D3E92E59CA13EB7DE8A5B095DB686.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:34:7f:2a:86:66:fa:4c:03:d8:8f:7e:b2:05:47:62:d8:01:74:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9D872ED250D3E92E59CA13EB7DE8A5B095DB686
        Validity
            Not Before: Dec 31 12:23:47 2025 GMT
            Not After : Dec 30 12:28:47 2026 GMT
        Subject: CN=8E17C6873D77E1B40A18D195CD78D2C0115135F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0d:00:78:fc:11:9d:8e:96:96:d7:a5:43:4c:
                    81:b0:91:f4:ff:52:0e:69:f4:72:0c:7a:97:92:45:
                    69:e7:c3:eb:2f:d3:d8:26:5e:7a:7b:40:32:e5:51:
                    2d:5b:ca:21:18:45:91:e7:6c:0e:59:18:2f:6f:c7:
                    66:7a:af:f3:92:a0:a6:50:b6:47:85:df:38:fd:81:
                    2c:0e:ce:6e:bc:73:89:17:3b:dc:ec:99:7e:d3:ea:
                    5f:1d:b2:bb:26:44:7e:2d:58:fe:35:bd:dc:7a:aa:
                    21:80:55:3d:3d:b5:69:51:9b:5b:28:41:eb:00:aa:
                    22:c7:1e:ab:24:b2:1b:60:e8:54:9a:5b:75:31:5e:
                    da:a0:90:dd:75:60:8f:8f:a0:09:a6:66:08:ba:ac:
                    7a:8a:62:08:63:08:a8:7e:5f:5b:25:6e:a6:27:bc:
                    9a:16:c5:05:23:a5:cc:c6:4f:8a:24:00:33:16:41:
                    e9:12:2f:b9:c3:8d:a4:ce:d0:a7:23:03:0d:13:f8:
                    a4:df:ae:ef:0c:0b:8f:02:d2:4d:61:ec:22:22:a6:
                    cc:60:40:d6:df:bb:57:41:8e:97:99:aa:0e:4e:33:
                    5b:e7:58:4d:43:b8:5d:4d:b8:54:2b:84:26:1e:ef:
                    ae:11:5c:45:55:a4:fd:98:8f:52:20:38:53:a7:22:
                    79:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:17:C6:87:3D:77:E1:B4:0A:18:D1:95:CD:78:D2:C0:11:51:35:F9
            X509v3 Authority Key Identifier:
                keyid:E9:D8:72:ED:25:0D:3E:92:E5:9C:A1:3E:B7:DE:8A:5B:09:5D:B6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/E9D872ED250D3E92E59CA13EB7DE8A5B095DB686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9D872ED250D3E92E59CA13EB7DE8A5B095DB686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/323830343a356465303a3a2f33322d313238203d3e20323638393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5de0::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:20:28:48:2b:cd:79:7e:20:3b:90:94:c2:76:90:7f:4f:02:
         2a:f2:9a:c6:12:8a:c0:b3:de:62:d9:78:d2:3a:04:0f:9a:73:
         50:3c:06:44:b0:35:a7:44:ca:67:8b:fe:1b:56:02:72:90:a8:
         1c:da:b6:1c:d2:38:98:3e:15:f3:bc:1d:cf:f3:bd:a3:8a:f4:
         29:64:a8:70:2a:1b:be:bd:80:2a:9c:43:39:9c:ce:d3:11:49:
         13:a0:a1:e7:0c:97:e4:86:7e:c7:0e:5e:0b:00:eb:e8:d5:63:
         67:42:f8:28:c4:05:9f:bf:63:b9:bc:1f:78:69:27:fc:87:0d:
         80:ed:71:20:b0:1a:55:a4:7f:76:0b:bf:aa:ea:60:b4:b6:6b:
         cc:b4:6c:09:3b:9b:4b:90:f3:99:31:ac:fd:bb:d3:bd:c3:1b:
         43:65:f3:57:4e:08:17:0d:06:00:35:86:1e:3c:27:c5:a5:4b:
         bb:17:37:4b:f2:9e:9e:bb:62:e3:ac:60:61:bc:93:de:0a:23:
         d8:c2:2b:3d:68:53:b6:b4:fc:49:a2:ec:72:f8:b0:c6:17:88:
         21:2c:de:4a:0d:21:16:c8:c1:fb:b9:9b:61:9c:a4:b4:b8:9f:
         1d:98:fc:1e:f9:ab:cd:33:33:c3:a7:e8:57:8d:73:5d:6a:3e:
         33:6f:4d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:08:53 2026 by rpki-client