Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/323830343a383030303a3a2f33322d3334203d3e20323731373233.roa
File:                     323830343a383030303a3a2f33322d3334203d3e20323731373233.roa (raw, json)
Hash identifier:          QrMR7I1geI4vmCoOWn0TVVuBCZNZm32eVmZKXUDY/uk=
Subject key identifier:   25:DF:A8:A9:D9:AA:FF:E1:EE:8A:BF:94:32:2A:4E:33:62:23:3E:D8
Certificate issuer:       /CN=C5FAC883F52999ACF758B4E2B97F23641E0B1141
Certificate serial:       3CE15AB730E78360D83CE8D00666FF67EEA082B9
Authority key identifier: C5:FA:C8:83:F5:29:99:AC:F7:58:B4:E2:B9:7F:23:64:1E:0B:11:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5FAC883F52999ACF758B4E2B97F23641E0B1141.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/323830343a383030303a3a2f33322d3334203d3e20323731373233.roa
Signing time:             Wed 11 Feb 2026 12:02:35 +0000
ROA not before:           Wed 11 Feb 2026 11:57:35 +0000
ROA not after:            Wed 10 Feb 2027 12:02:35 +0000
asID:                     271723
IP address blocks:        2804:8000::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.crl
                          rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5FAC883F52999ACF758B4E2B97F23641E0B1141.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e1:5a:b7:30:e7:83:60:d8:3c:e8:d0:06:66:ff:67:ee:a0:82:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5FAC883F52999ACF758B4E2B97F23641E0B1141
        Validity
            Not Before: Feb 11 11:57:35 2026 GMT
            Not After : Feb 10 12:02:35 2027 GMT
        Subject: CN=25DFA8A9D9AAFFE1EE8ABF94322A4E3362233ED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6b:e4:ef:42:22:4f:52:67:4e:e7:13:4d:78:
                    75:7c:4e:17:f4:e9:ba:21:ea:46:70:0f:cc:91:47:
                    85:76:a7:28:cc:ee:f7:a6:9a:4d:75:99:b5:29:14:
                    15:8e:43:fc:c9:8e:c8:bb:fa:f9:1f:48:5f:51:06:
                    1f:37:d7:4d:3b:5a:41:d6:60:15:fd:65:44:d9:ce:
                    72:11:ac:6b:fb:f3:85:46:6c:6d:34:0a:5b:77:3c:
                    c4:dc:9c:04:10:4c:b3:67:a2:5a:9a:79:4f:c0:41:
                    8a:0f:db:a6:9d:19:fd:3c:a6:5a:eb:f9:7b:a6:23:
                    d0:9e:8b:6a:12:ff:81:fe:81:0e:18:8c:21:16:c5:
                    2d:d6:67:63:1b:56:c3:83:b4:c4:5d:4c:c1:27:18:
                    73:25:0a:11:2c:e1:00:b1:77:41:ae:5b:48:4a:62:
                    87:dc:58:2b:26:44:20:23:66:78:17:cf:bb:b8:e5:
                    68:ec:8a:d7:3e:a7:39:0f:9c:10:bf:aa:25:bb:a5:
                    ab:d1:a0:25:a8:97:c1:de:50:72:f1:87:69:e1:46:
                    e5:07:6d:a8:cb:c7:6f:cf:0c:d0:2d:4e:7f:f0:f0:
                    2c:e2:ba:32:a0:4a:d5:02:93:cf:3c:1b:15:de:80:
                    ef:22:49:7c:ae:7a:32:42:d1:7b:fa:dd:29:5b:1a:
                    e1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DF:A8:A9:D9:AA:FF:E1:EE:8A:BF:94:32:2A:4E:33:62:23:3E:D8
            X509v3 Authority Key Identifier:
                keyid:C5:FA:C8:83:F5:29:99:AC:F7:58:B4:E2:B9:7F:23:64:1E:0B:11:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5FAC883F52999ACF758B4E2B97F23641E0B1141.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/323830343a383030303a3a2f33322d3334203d3e20323731373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8000::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:d0:a8:a9:38:73:b7:50:82:26:5b:e4:05:74:8f:88:38:62:
         c3:32:04:88:b9:ee:83:58:b7:00:5a:9f:9a:6e:b4:8f:aa:58:
         31:0c:7b:ab:60:e5:f8:b5:c6:e9:a7:e4:9e:a9:7e:03:58:ef:
         e0:ae:89:e9:00:97:9a:da:07:87:65:6f:e6:95:ef:f0:c3:b6:
         d2:43:d7:70:8b:17:6c:ae:87:b8:1a:7b:8a:65:5e:36:0f:02:
         49:85:6d:b4:5a:87:c3:7d:80:79:f0:9d:c4:7e:e4:e1:d7:75:
         0d:5f:43:a8:5c:36:d1:65:cd:3b:ba:6b:06:89:e5:9a:71:d6:
         b7:f7:83:a5:71:5b:f5:df:ab:bf:e1:df:c1:6f:e8:62:c3:ca:
         f8:e9:ce:85:31:e2:9f:f4:01:2b:9b:32:3b:a9:93:14:77:9b:
         51:50:68:e5:59:27:63:0b:94:7f:62:20:a5:f3:84:a9:7f:15:
         79:71:aa:e3:c2:7c:4e:d5:72:63:ef:3b:4e:78:20:f2:5c:7b:
         b4:8f:32:6e:bc:36:1f:8f:02:91:6d:62:0e:60:2f:cb:05:02:
         c4:66:7e:c5:de:50:5a:57:19:7a:70:d3:b1:32:2b:ae:0f:a3:
         3f:35:b5:c4:39:2a:8c:38:42:ee:40:0c:d8:8e:82:50:c0:a7:
         a9:ce:33:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:40:17 2026 by rpki-client