Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/323830343a363532343a3a2f33322d3332203d3e20323639343731.roa
File:                     323830343a363532343a3a2f33322d3332203d3e20323639343731.roa (raw, json)
Hash identifier:          eNGRoIC1MIZHrkwbT+gRbTqM7MTnVMuBG9EvAdA4qSs=
Subject key identifier:   2D:E4:88:64:80:64:7C:3E:C8:53:4A:DE:08:10:F2:9F:F0:47:9C:BE
Certificate issuer:       /CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA
Certificate serial:       473C51A700C49BA5D70A7346984CFC61B5DFC137
Authority key identifier: DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/323830343a363532343a3a2f33322d3332203d3e20323639343731.roa
Signing time:             Wed 04 Feb 2026 20:00:06 +0000
ROA not before:           Wed 04 Feb 2026 19:55:06 +0000
ROA not after:            Wed 03 Feb 2027 20:00:06 +0000
asID:                     269471
IP address blocks:        2804:6524::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl
                          rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 15:17:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:3c:51:a7:00:c4:9b:a5:d7:0a:73:46:98:4c:fc:61:b5:df:c1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA
        Validity
            Not Before: Feb  4 19:55:06 2026 GMT
            Not After : Feb  3 20:00:06 2027 GMT
        Subject: CN=2DE4886480647C3EC8534ADE0810F29FF0479CBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:79:26:69:70:2d:f1:c5:db:42:3d:d5:99:28:
                    0e:82:cc:6d:b4:32:26:04:d9:66:33:4c:cd:1e:d2:
                    b2:52:6c:81:ba:93:6b:66:52:42:5c:d9:2f:04:0c:
                    25:7f:45:2d:37:7b:f8:5e:20:8d:11:8d:52:c9:66:
                    56:fb:6b:8b:1e:c6:64:79:17:6a:67:09:19:29:c5:
                    00:14:61:eb:03:33:96:86:ab:4d:3a:26:38:01:3b:
                    c7:d9:d3:88:25:4f:55:d7:40:5b:aa:1b:d8:4c:b3:
                    84:d9:41:16:45:5a:a1:2c:63:90:c1:72:6a:58:14:
                    7f:8b:24:1e:10:15:80:a3:7f:67:b1:12:db:80:24:
                    ac:93:c3:46:0a:9c:c6:00:8f:34:03:43:67:1b:10:
                    c9:35:e9:79:38:90:9e:4c:f9:c8:ad:7f:f3:f4:68:
                    cd:3b:44:50:af:0f:4e:7a:87:4b:63:3d:e3:0a:bc:
                    7b:dd:a2:68:3d:9e:d8:d2:78:f3:cd:1f:ce:6c:65:
                    c0:aa:3f:40:62:18:3a:de:a9:01:2b:75:03:e7:1a:
                    0e:15:de:3b:d1:7e:9e:9a:00:23:e8:f1:a8:1c:e4:
                    6b:ad:b1:8d:c7:23:cd:c3:0f:99:1d:02:1d:25:2d:
                    c7:20:ec:98:3d:82:23:f2:51:55:d0:5c:a4:a9:0f:
                    a7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E4:88:64:80:64:7C:3E:C8:53:4A:DE:08:10:F2:9F:F0:47:9C:BE
            X509v3 Authority Key Identifier:
                keyid:DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/323830343a363532343a3a2f33322d3332203d3e20323639343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6524::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:93:79:d9:80:0b:00:bb:66:6c:b6:8e:f3:9d:c2:54:9a:40:
         3e:4f:32:22:24:19:50:f3:a4:24:6f:5d:79:35:0e:75:99:bd:
         1d:0a:57:62:de:70:88:71:4e:e2:58:26:05:00:fb:15:7f:f0:
         7f:d2:16:0f:69:b7:08:c1:db:12:70:0d:99:a7:b9:8d:3a:c9:
         ae:c1:fb:75:87:6f:f6:12:f7:d4:e8:3c:c5:d6:ce:d0:ca:e9:
         f5:fc:76:6f:12:1d:24:38:a8:42:1a:46:d2:6a:f1:95:a3:03:
         01:e4:c8:c2:11:b3:ec:a4:3a:25:90:12:37:6a:54:f9:a5:fe:
         e5:f0:2c:f3:91:fb:7a:6c:a0:b5:98:cb:a4:61:04:b7:34:d4:
         fc:1b:63:76:a1:44:c1:8f:a6:60:d4:c8:5f:26:10:bc:e5:0f:
         a8:6c:06:2b:c9:19:a9:f5:5c:99:df:fb:07:77:0f:f8:ba:66:
         56:25:b4:4c:9b:70:58:4d:63:2d:fc:54:96:75:93:27:f6:5a:
         73:ab:41:b9:15:ff:8b:cf:52:2f:52:f0:a7:79:fb:db:9e:b1:
         8e:16:92:4c:15:f9:ac:a4:7b:07:13:c6:06:15:4f:33:0f:66:
         5b:a4:43:06:39:4e:db:d3:a3:76:d8:77:68:44:c5:84:86:5e:
         fd:b2:b8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:03 2026 by rpki-client