Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/323030313a313261303a3a2f33322d3438203d3e203238323932.roa
File:                     323030313a313261303a3a2f33322d3438203d3e203238323932.roa (raw, json)
Hash identifier:          JUvB+7g3DOsr7sTqwK3rMRuRbgZdkAfms1AKHO3KtPU=
Subject key identifier:   F5:B3:31:5A:E4:3F:3E:24:8D:16:C3:A7:28:BD:2B:54:49:15:13:4D
Certificate issuer:       /CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
Certificate serial:       30ECB16490EFF330088BA2B7CE188063949166F0
Authority key identifier: B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/323030313a313261303a3a2f33322d3438203d3e203238323932.roa
Signing time:             Fri 06 Feb 2026 20:00:00 +0000
ROA not before:           Fri 06 Feb 2026 19:55:00 +0000
ROA not after:            Sat 06 Feb 2027 20:00:00 +0000
asID:                     28292
IP address blocks:        2001:12a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl
                          rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ec:b1:64:90:ef:f3:30:08:8b:a2:b7:ce:18:80:63:94:91:66:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
        Validity
            Not Before: Feb  6 19:55:00 2026 GMT
            Not After : Feb  6 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:27:bd:9f:fa:f5:aa:5c:bc:0e:91:2d:e6:e6:
                    2b:99:05:5f:66:21:03:b5:41:7c:1a:07:4e:48:83:
                    be:cc:08:53:57:72:dd:c5:14:d1:20:f4:df:b1:f0:
                    7c:07:d2:4e:59:96:64:77:c0:31:f5:7a:6b:97:3b:
                    a3:5e:92:1a:2e:dc:3b:b4:00:18:ac:9c:44:53:b4:
                    75:76:6b:fc:1a:09:d9:08:d4:da:3b:99:90:b6:99:
                    8c:a3:16:bf:df:e9:5f:a9:41:0a:15:9b:47:2d:c3:
                    92:e5:75:c5:d6:e5:43:11:0c:bc:ac:a8:11:e3:71:
                    05:70:f9:78:d7:09:24:cb:ba:98:4e:83:34:3e:77:
                    ee:34:a2:41:c4:63:f8:59:be:62:e5:98:81:c7:cb:
                    3a:b5:27:29:89:10:4c:83:ba:56:23:ca:80:50:87:
                    b4:cd:44:43:c2:e3:19:e9:f7:0f:67:17:ef:d4:07:
                    1e:62:c8:13:3c:2f:68:0b:88:7a:5c:c7:30:ab:a2:
                    4f:93:af:35:75:f4:05:92:1e:ea:88:73:57:22:10:
                    b4:41:3c:e0:a7:ed:a1:e2:eb:f0:1e:e1:f8:d5:89:
                    aa:53:f0:56:66:e9:34:02:25:ae:19:c5:cd:d1:c3:
                    2a:9e:b1:eb:49:e8:92:bb:b6:db:45:86:6f:c2:3a:
                    60:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B3:31:5A:E4:3F:3E:24:8D:16:C3:A7:28:BD:2B:54:49:15:13:4D
            X509v3 Authority Key Identifier:
                keyid:B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/323030313a313261303a3a2f33322d3438203d3e203238323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:65:83:e1:68:da:7d:a2:ba:29:5e:57:6c:71:c7:6b:33:29:
         8e:dc:c5:5d:d8:13:29:32:22:b8:d6:c3:bb:d6:c0:e9:5c:7c:
         53:d1:a3:1f:29:32:92:d1:5c:60:45:02:36:69:77:21:c9:b6:
         dd:49:f4:e1:db:2a:b1:c1:c7:9b:39:d1:45:04:89:ba:8a:54:
         36:28:e3:28:79:c1:74:75:1f:5b:3f:b5:94:60:8c:80:37:fe:
         de:21:e7:5e:54:7a:5d:8f:72:54:cc:0e:a6:34:fa:de:60:61:
         69:51:99:af:36:ff:1f:14:e7:2e:be:88:7b:f2:56:62:50:2f:
         9d:7c:6e:8f:ab:6f:7b:f0:fc:49:4e:5c:d7:cd:cb:b2:3d:b1:
         e0:32:f3:9d:97:da:e2:c2:6a:07:ef:c7:97:f5:a7:d9:14:03:
         a7:dd:65:ce:ac:ae:9a:78:58:ad:bc:a0:a0:52:00:ea:29:6d:
         0f:5b:3a:99:23:2a:a0:34:35:98:a8:c4:47:7e:0d:79:19:31:
         92:15:76:63:47:35:f8:f8:bf:1e:2d:7f:2d:59:9e:9f:04:d0:
         e8:db:71:09:3d:83:1b:4b:2c:80:a8:3a:95:76:5a:2f:27:ce:
         bc:d9:42:46:69:12:9b:16:1d:4e:9f:e8:bb:2c:bf:f4:ea:9d:
         00:36:84:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:22:34 2026 by rpki-client