Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/323830343a353764343a3a2f33322d3438203d3e20323638303839.roa
File:                     323830343a353764343a3a2f33322d3438203d3e20323638303839.roa (raw, json)
Hash identifier:          eVlDEUyrdGlOj2E6vls0u4+3rhsdl+n2P+dnS1ShVTQ=
Subject key identifier:   97:E2:4F:E6:43:A5:81:40:C4:6B:98:C0:D1:55:1D:A6:0E:8D:CF:52
Certificate issuer:       /CN=7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D
Certificate serial:       10F3936CBDD887B3CE68E20C638ED31816A8EFA5
Authority key identifier: 7D:2F:EE:C4:D4:AC:78:B8:E6:A6:B0:C0:C6:A3:A0:2C:48:A9:F2:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/323830343a353764343a3a2f33322d3438203d3e20323638303839.roa
Signing time:             Thu 05 Feb 2026 10:06:30 +0000
ROA not before:           Thu 05 Feb 2026 10:01:30 +0000
ROA not after:            Thu 04 Feb 2027 10:06:30 +0000
asID:                     268089
IP address blocks:        2804:57d4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.crl
                          rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 14:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f3:93:6c:bd:d8:87:b3:ce:68:e2:0c:63:8e:d3:18:16:a8:ef:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D
        Validity
            Not Before: Feb  5 10:01:30 2026 GMT
            Not After : Feb  4 10:06:30 2027 GMT
        Subject: CN=97E24FE643A58140C46B98C0D1551DA60E8DCF52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c8:b1:9c:71:d0:8d:10:e7:99:67:c9:3b:12:
                    89:8f:93:b7:23:5b:85:ab:7e:15:31:d0:f0:10:c6:
                    a2:ed:aa:6c:11:92:25:9c:a9:32:4e:93:7e:d0:03:
                    5b:c8:34:0f:f7:4c:21:6f:67:f0:84:5d:58:ee:38:
                    97:55:b3:fd:42:90:2c:a0:08:0c:78:0b:12:1a:d5:
                    3d:87:41:fe:9b:17:7b:f3:a5:44:b8:a0:a7:a6:1a:
                    16:3f:9c:89:3e:a3:ea:74:45:4d:60:e6:c9:c8:7b:
                    20:63:14:1a:67:ed:a9:5c:57:35:2a:bd:32:74:b6:
                    28:42:bc:68:97:94:38:fc:8a:fe:c1:ca:16:8c:32:
                    44:26:ee:ed:05:33:1c:1f:19:d4:ed:54:73:df:47:
                    5f:79:73:d3:9f:b7:5b:79:42:8f:4c:05:53:96:c7:
                    a7:44:3d:0d:21:d4:4e:20:6f:ef:2f:6d:fb:ae:b6:
                    fc:0e:a2:f5:4d:3b:97:d4:f1:f3:e2:3f:9b:1d:08:
                    e1:da:50:66:60:d2:e5:60:ee:ea:b8:97:10:c4:1e:
                    6b:1a:79:0f:68:fd:28:11:ca:aa:38:41:78:89:2a:
                    9d:b7:a9:be:57:91:b4:1c:58:8e:93:b9:60:4f:c3:
                    5d:96:bf:28:ff:c3:1b:ec:11:5d:e3:1a:c7:fd:e4:
                    78:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E2:4F:E6:43:A5:81:40:C4:6B:98:C0:D1:55:1D:A6:0E:8D:CF:52
            X509v3 Authority Key Identifier:
                keyid:7D:2F:EE:C4:D4:AC:78:B8:E6:A6:B0:C0:C6:A3:A0:2C:48:A9:F2:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/323830343a353764343a3a2f33322d3438203d3e20323638303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         ca:97:c8:7c:fc:df:8b:7f:ee:60:93:8b:b4:1c:b9:1b:04:41:
         4c:80:07:da:c3:b3:2e:b8:f7:50:e7:ce:8e:a2:b5:4f:5f:2e:
         ae:b7:34:52:e7:3e:ec:45:46:8a:9e:f2:dd:71:3a:ba:33:9d:
         75:11:24:99:72:a0:12:78:2c:74:3f:20:6c:79:db:52:be:73:
         a1:a4:08:a1:2e:42:e4:6c:f5:4d:69:ef:6f:33:34:4b:24:d0:
         c8:66:ed:d6:f1:d2:1a:b9:53:29:30:47:c2:3c:dc:22:63:72:
         2b:50:ca:33:fc:d3:37:03:ff:ea:52:a2:d2:33:d5:4f:1c:19:
         ec:6f:12:87:04:db:ff:70:51:87:0c:d2:f4:de:1f:4b:e7:c9:
         f2:23:42:27:c7:bb:4d:b4:1d:4b:f6:4a:6f:e8:80:09:fe:b1:
         86:bc:ef:8b:e1:72:a9:16:8c:09:63:4d:9c:43:55:8c:ba:b3:
         aa:a1:6b:e7:16:07:4d:aa:5b:63:a5:49:4a:74:3e:d9:95:11:
         57:c9:60:db:11:6f:ee:6b:89:25:15:86:26:04:c3:76:ed:48:
         7b:8e:35:29:d9:94:cd:15:48:02:f3:45:98:2c:7d:af:71:d5:
         35:af:f4:f0:99:5e:2a:a9:64:77:0b:af:5c:96:ca:9e:e4:82:
         80:99:5a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:58 2026 by rpki-client