Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a3130303a3a2f34342d3434203d3e20323632373133.roa
File:                     323830343a3634303a3130303a3a2f34342d3434203d3e20323632373133.roa (raw, json)
Hash identifier:          L5pYQJ9BYJBRoqluKFQve1Oho7q87PBSQkzHxrl1D80=
Subject key identifier:   81:EE:38:B0:36:2B:AB:09:8B:9B:64:8A:4E:0F:9A:82:1E:75:58:13
Certificate issuer:       /CN=E93268A3714096FCDDC12A8EEEA393524021C87B
Certificate serial:       045F9BF5FD0F4E8DD30CD3B69B9E3C9C21288633
Authority key identifier: E9:32:68:A3:71:40:96:FC:DD:C1:2A:8E:EE:A3:93:52:40:21:C8:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a3130303a3a2f34342d3434203d3e20323632373133.roa
Signing time:             Thu 22 Jan 2026 19:02:48 +0000
ROA not before:           Thu 22 Jan 2026 18:57:48 +0000
ROA not after:            Thu 21 Jan 2027 19:02:48 +0000
asID:                     262713
IP address blocks:        2804:640:100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.crl
                          rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 17:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5f:9b:f5:fd:0f:4e:8d:d3:0c:d3:b6:9b:9e:3c:9c:21:28:86:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E93268A3714096FCDDC12A8EEEA393524021C87B
        Validity
            Not Before: Jan 22 18:57:48 2026 GMT
            Not After : Jan 21 19:02:48 2027 GMT
        Subject: CN=81EE38B0362BAB098B9B648A4E0F9A821E755813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d0:a7:68:ac:9e:6e:82:77:e1:e3:51:9f:7e:
                    6c:22:e2:9e:07:94:48:5b:b3:cb:ca:82:0f:0e:95:
                    b2:84:96:f9:26:93:e9:eb:d3:eb:c8:76:b7:9a:46:
                    a2:b5:18:f0:cc:1b:bf:4b:ab:a4:22:9a:36:5e:f1:
                    10:29:e8:47:d9:de:9c:ea:c2:d7:80:7c:3d:c3:b1:
                    c3:15:bb:ce:f3:a5:c0:42:44:ad:6c:15:cc:07:ea:
                    28:19:ca:12:20:35:b3:d9:2a:2b:60:57:40:87:38:
                    22:fc:d2:ed:4d:5b:64:d6:03:66:91:dc:a2:c6:b2:
                    14:39:30:fb:61:76:99:35:be:95:ce:d4:8f:df:ab:
                    7f:f9:85:e5:6c:fe:de:52:e0:7b:f9:2e:8a:26:57:
                    40:0c:e9:42:80:9b:b1:51:95:0f:53:d7:34:1c:12:
                    1c:d3:97:8d:81:14:07:2a:5d:a2:53:a0:7f:a0:3f:
                    3c:22:9f:ae:9d:fc:be:e1:bc:fe:e9:3e:55:36:6b:
                    78:4b:e3:2d:fe:63:7a:1b:22:c1:ec:19:39:41:5d:
                    8e:62:fa:ed:8b:92:db:0c:20:3f:9b:dc:14:de:42:
                    85:f2:75:b9:9c:a0:ac:be:76:a3:10:47:cc:90:28:
                    9e:87:e7:33:ab:85:b5:70:d5:98:85:a0:78:a9:4a:
                    5f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EE:38:B0:36:2B:AB:09:8B:9B:64:8A:4E:0F:9A:82:1E:75:58:13
            X509v3 Authority Key Identifier:
                keyid:E9:32:68:A3:71:40:96:FC:DD:C1:2A:8E:EE:A3:93:52:40:21:C8:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a3130303a3a2f34342d3434203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:640:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         7a:a9:53:ec:13:0c:80:ec:68:ff:3d:2b:9b:44:bc:5b:7d:32:
         b7:66:2d:98:0d:c1:94:9d:af:89:a4:0f:68:dc:fc:dd:42:89:
         df:c2:71:1a:09:85:fc:a2:96:9c:0e:28:d3:e6:23:34:6e:da:
         d1:1f:6a:e4:96:16:e0:a5:e7:79:80:5e:88:a5:c3:84:bc:2b:
         25:3b:7e:76:c5:38:37:fc:0d:5c:d2:a1:6b:e1:b1:e2:74:cb:
         ba:ad:50:ba:e8:a8:ee:9b:68:66:f8:6a:0d:24:6b:f8:87:59:
         eb:62:8f:6c:99:d1:c0:25:d5:1c:28:be:4a:57:b8:2b:e8:84:
         15:34:e9:35:41:cd:ff:f0:cf:26:85:43:99:71:eb:9b:00:30:
         4c:41:69:5a:52:a4:3e:15:31:9b:1a:67:b3:a2:32:5e:53:ba:
         56:e0:26:ca:81:00:09:05:3d:c2:b7:6f:46:f1:5b:3b:12:7b:
         3e:d0:c4:4a:20:0e:1b:21:9f:30:a2:76:3d:44:53:8c:c6:5d:
         26:1c:d7:ad:01:80:b5:ec:2c:1e:9b:c1:71:5c:84:1f:57:ed:
         25:d9:02:47:dd:59:5e:30:88:2c:aa:db:ed:1e:9c:64:4c:f2:
         5f:4e:cd:89:c2:bb:ee:4a:2f:fc:9e:9c:48:ab:fa:5d:3d:d4:
         a8:ca:19:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:16:22 2026 by rpki-client