Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/323830343a336565383a3a2f33322d3332203d3e20323636363238.roa
File:                     323830343a336565383a3a2f33322d3332203d3e20323636363238.roa (raw, json)
Hash identifier:          fMreLnNpOVluB4jp1Nsl7RZhPPj29pd6O/Va2qb7mOA=
Subject key identifier:   24:C4:5A:AD:0D:F2:2C:F0:56:81:73:C7:B6:D9:26:C7:D1:4E:49:CF
Certificate issuer:       /CN=9CFB76D20D558F08024B5656A94D7209D3BD1F09
Certificate serial:       50FD83527ADC86F0D1A737EA445F91F8C899C523
Authority key identifier: 9C:FB:76:D2:0D:55:8F:08:02:4B:56:56:A9:4D:72:09:D3:BD:1F:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/323830343a336565383a3a2f33322d3332203d3e20323636363238.roa
Signing time:             Wed 04 Feb 2026 20:00:05 +0000
ROA not before:           Wed 04 Feb 2026 19:55:05 +0000
ROA not after:            Wed 03 Feb 2027 20:00:05 +0000
asID:                     266628
IP address blocks:        2804:3ee8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.crl
                          rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fd:83:52:7a:dc:86:f0:d1:a7:37:ea:44:5f:91:f8:c8:99:c5:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CFB76D20D558F08024B5656A94D7209D3BD1F09
        Validity
            Not Before: Feb  4 19:55:05 2026 GMT
            Not After : Feb  3 20:00:05 2027 GMT
        Subject: CN=24C45AAD0DF22CF0568173C7B6D926C7D14E49CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:6b:8d:d6:a1:05:96:f8:c8:d5:d7:91:60:
                    77:1d:8c:f5:b9:9f:aa:08:9e:ef:a6:8c:99:93:b0:
                    82:6d:9c:02:90:59:43:b2:22:3a:f0:71:15:9f:33:
                    33:b8:2d:5b:5b:62:75:2e:c0:a9:73:e4:28:fc:86:
                    ff:a4:e7:84:6d:7e:d7:d3:bf:78:6f:0d:50:d0:7e:
                    e4:09:a4:2f:a4:83:0d:62:f2:5b:78:9f:64:9b:f5:
                    58:0d:b4:04:5a:a2:f6:97:06:cd:9d:2d:de:25:ac:
                    39:8d:fd:e9:08:80:47:9e:95:cf:ab:d5:b5:c5:69:
                    56:92:c1:bd:75:78:5e:d0:f3:e3:65:37:56:3b:a9:
                    97:5b:b3:50:df:35:0f:b7:e6:70:25:28:7b:f0:55:
                    9e:fa:31:cc:1c:a0:bf:e3:da:ef:8a:83:17:21:cb:
                    0b:b3:6a:1f:b6:5d:2d:1d:4e:0b:3b:69:6a:5e:2b:
                    e7:09:30:0f:b8:47:69:c2:2c:59:a1:ed:f7:9c:91:
                    99:f7:5f:c9:5a:bf:c7:8f:ff:2a:11:6e:ff:7c:9b:
                    e2:26:ec:c4:da:56:b6:df:bc:0e:5c:79:14:7d:1b:
                    13:91:6d:ff:c0:4d:d2:6d:55:cb:81:d0:c3:b6:5c:
                    40:51:63:65:b2:5f:ea:49:94:19:4a:e7:ee:20:da:
                    65:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C4:5A:AD:0D:F2:2C:F0:56:81:73:C7:B6:D9:26:C7:D1:4E:49:CF
            X509v3 Authority Key Identifier:
                keyid:9C:FB:76:D2:0D:55:8F:08:02:4B:56:56:A9:4D:72:09:D3:BD:1F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/323830343a336565383a3a2f33322d3332203d3e20323636363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ee8::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:e4:87:da:b9:e6:66:dc:52:08:1e:32:6e:9b:5c:b7:aa:fd:
         f8:da:7c:ea:d7:ef:2c:14:38:d4:aa:cd:b0:f0:9c:d0:5d:52:
         2d:3b:3d:a9:4b:db:72:c7:f6:15:63:ca:1c:22:53:f0:e7:37:
         5a:26:7e:e9:7e:b5:52:57:d4:54:02:28:98:7d:70:0f:3a:58:
         2c:91:5a:1b:83:56:dc:80:e4:61:a5:ea:18:66:40:13:48:aa:
         8a:d3:d9:f5:27:a9:b8:b0:8a:b7:e3:93:24:ca:75:99:10:9e:
         8c:59:d2:3b:fa:ba:60:65:4c:73:8b:45:40:f6:2f:c8:9b:85:
         a3:2b:87:77:5e:74:99:65:ba:22:f8:be:4b:f8:48:76:e8:87:
         03:7c:f1:31:d7:f5:db:46:46:1b:b5:e9:72:9b:01:9a:31:d5:
         e4:3d:ab:ab:b1:39:20:5d:f4:1d:89:dc:1c:b1:3a:11:d5:b0:
         97:b1:fb:c8:8d:55:1a:a6:cc:56:90:a9:e5:48:fe:35:e3:f3:
         b2:74:eb:4d:07:5f:fd:da:f6:3f:be:62:2f:fa:b7:f8:ff:85:
         ad:f7:74:64:d1:c4:9d:68:a3:54:3b:15:b4:60:c6:67:23:70:
         54:fb:36:4f:87:ff:1b:f5:35:f5:77:f7:2c:d6:a7:53:d4:4d:
         d6:50:3d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:51:45 2026 by rpki-client