Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/323830343a333264633a3a2f3332203d3e20323632333232.roa
File:                     323830343a333264633a3a2f3332203d3e20323632333232.roa (raw, json)
Hash identifier:          +eqH/MMkuX9wuZRU4OQJYjErjVu3TeYwjUbvr8jZvMM=
Subject key identifier:   4D:C9:FB:00:DB:AC:D9:D3:70:D7:52:D8:00:86:67:6A:12:1B:1B:DE
Certificate issuer:       /CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25
Certificate serial:       447CFBBC1CC4F7B70D460B801012E524C5427285
Authority key identifier: 2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/323830343a333264633a3a2f3332203d3e20323632333232.roa
Signing time:             Thu 05 Feb 2026 21:26:25 +0000
ROA not before:           Thu 05 Feb 2026 21:21:25 +0000
ROA not after:            Thu 04 Feb 2027 21:26:25 +0000
asID:                     262322
IP address blocks:        2804:32dc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl
                          rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:7c:fb:bc:1c:c4:f7:b7:0d:46:0b:80:10:12:e5:24:c5:42:72:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25
        Validity
            Not Before: Feb  5 21:21:25 2026 GMT
            Not After : Feb  4 21:26:25 2027 GMT
        Subject: CN=4DC9FB00DBACD9D370D752D80086676A121B1BDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:4a:ac:05:f1:03:6a:02:50:24:8b:54:49:3a:
                    0f:66:a5:cd:c6:fd:f4:71:53:12:0c:fd:6e:be:9b:
                    18:9c:b9:b2:ca:8f:84:52:1a:0b:0f:75:76:0a:6c:
                    a0:55:f3:92:b3:22:29:6d:da:8a:24:0c:dc:68:01:
                    57:86:f5:a2:62:30:13:4c:6e:08:8c:6e:69:d4:91:
                    b4:da:22:93:f6:48:9c:90:55:81:b3:9c:e9:a4:a0:
                    fd:32:57:06:31:52:aa:5d:d1:69:a8:df:9f:a8:cc:
                    2d:58:f3:68:ca:1c:80:09:d6:1e:0b:96:fc:82:f0:
                    6c:d8:b0:5c:b2:27:8d:5b:d4:1f:65:29:23:5c:f9:
                    ee:1e:c7:a5:e8:71:7b:59:c7:b7:81:bd:e4:12:0e:
                    d5:26:db:61:e1:f3:87:d4:57:53:dc:28:e0:1e:f1:
                    ee:7a:1f:d3:2c:48:d1:e1:a5:dd:10:4d:05:d5:2d:
                    1f:ae:7b:f4:e3:3b:a9:2f:8c:51:9c:b0:80:40:4e:
                    97:d0:c1:e8:bf:40:e0:72:55:66:69:8c:c8:69:95:
                    9e:d1:39:e5:10:4d:d7:12:98:d2:9d:c2:37:4d:3e:
                    f1:0f:08:4a:de:fc:37:41:bd:eb:d1:b1:f9:c0:27:
                    37:1a:82:84:64:f5:29:82:cf:f3:b4:6f:a4:17:1d:
                    05:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C9:FB:00:DB:AC:D9:D3:70:D7:52:D8:00:86:67:6A:12:1B:1B:DE
            X509v3 Authority Key Identifier:
                keyid:2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/323830343a333264633a3a2f3332203d3e20323632333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:28:cb:58:03:6f:2d:38:47:26:f1:d0:7b:66:97:b9:12:c3:
         aa:e4:08:ef:fb:e0:1a:5d:61:b9:fb:33:f2:f9:0b:e0:87:91:
         8f:f1:35:96:b7:5d:f4:aa:0d:58:32:06:34:c0:9e:6b:58:28:
         3e:ad:f4:7e:85:b9:c3:61:bc:e3:df:d3:52:a0:f9:02:1f:ab:
         e9:e9:fa:25:be:d1:6c:00:75:ae:17:5c:38:f9:2a:65:1a:3d:
         f9:0d:c2:b6:19:d3:24:f9:e1:99:a6:d0:8a:66:51:47:87:79:
         bb:5f:a0:4b:e6:36:12:fe:a9:c1:cf:43:45:11:fb:a5:55:83:
         e9:10:61:94:df:a3:22:e6:0b:74:03:4e:f0:a0:d2:ad:b1:ff:
         fa:40:62:cb:bb:5f:e8:64:de:aa:84:65:1e:3a:b8:bc:22:d3:
         6c:ae:f8:4d:98:be:94:69:06:c6:51:b7:06:29:79:26:32:fe:
         af:a9:f5:a4:a1:15:9d:f1:93:09:35:fa:22:ac:f0:67:97:75:
         7c:65:40:21:b7:7b:5e:27:8f:16:7c:72:5f:e0:92:d8:4b:4e:
         0e:85:6b:d1:8f:2e:e0:e8:da:de:76:ae:fb:58:13:ba:0d:b5:
         ab:93:a6:05:f9:22:01:3b:d4:69:88:85:bc:a7:fd:e3:b3:01:
         09:7f:f4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:25:44 2026 by rpki-client