Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/323830343a353639383a3930303a3a2f34302d3430203d3e20323638303131.roa
File:                     323830343a353639383a3930303a3a2f34302d3430203d3e20323638303131.roa (raw, json)
Hash identifier:          aos9oIA8mqZ9uadmLQkvcVJvaY9F6fZKZnCZ5MTIdoo=
Subject key identifier:   82:F2:0D:DF:9D:F8:CB:55:B9:B8:F0:87:63:C6:61:5C:0F:90:E4:75
Certificate issuer:       /CN=7B02316541C9F170484214259E6C028DF7BB0F4A
Certificate serial:       7D5A683184E5C4F1C8EC0E34C4F0E16BD9143F45
Authority key identifier: 7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/323830343a353639383a3930303a3a2f34302d3430203d3e20323638303131.roa
Signing time:             Wed 04 Feb 2026 20:00:06 +0000
ROA not before:           Wed 04 Feb 2026 19:55:06 +0000
ROA not after:            Wed 03 Feb 2027 20:00:06 +0000
asID:                     268011
IP address blocks:        2804:5698:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.crl
                          rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5a:68:31:84:e5:c4:f1:c8:ec:0e:34:c4:f0:e1:6b:d9:14:3f:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B02316541C9F170484214259E6C028DF7BB0F4A
        Validity
            Not Before: Feb  4 19:55:06 2026 GMT
            Not After : Feb  3 20:00:06 2027 GMT
        Subject: CN=82F20DDF9DF8CB55B9B8F08763C6615C0F90E475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:04:0f:53:15:5b:75:7e:5c:8d:37:f0:cc:9d:
                    66:c5:27:06:0a:bf:6d:dd:31:fe:11:30:d1:69:81:
                    24:fb:f8:df:14:bb:b3:2f:e8:05:a1:0a:c8:c0:8c:
                    5b:98:6e:df:cd:f1:00:da:9c:8b:0e:cd:e0:82:c3:
                    c4:71:92:62:ed:07:91:91:53:c0:34:14:b9:c2:c4:
                    28:42:96:23:14:4a:3e:6b:23:15:16:7c:5b:3f:3e:
                    41:ee:18:13:00:6c:ec:fd:11:e1:3e:ca:a8:0b:0f:
                    59:7d:35:64:1f:3b:c4:11:58:de:eb:a2:27:a5:8c:
                    47:39:c2:7c:21:dc:de:1b:9d:b6:8a:13:e9:a9:69:
                    f8:9b:e8:0f:fc:c8:c8:92:7d:f1:cb:ce:c3:67:55:
                    8a:60:51:19:89:63:5f:c9:85:7c:bb:5e:cd:c6:b3:
                    cd:85:32:bb:ad:1b:27:f9:01:fb:12:a8:55:8b:1d:
                    64:1d:b4:05:b8:26:c2:1f:18:c5:4a:36:e9:80:2a:
                    5b:5e:44:34:6f:88:28:9e:80:a0:81:a2:e3:d7:bb:
                    22:ba:39:e3:a7:18:d0:c3:3f:29:ff:0d:09:c1:7b:
                    01:67:56:59:9c:22:4a:6a:41:da:d6:b5:19:5a:81:
                    be:56:a2:f6:11:3c:78:8e:d7:10:96:43:96:21:50:
                    7a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F2:0D:DF:9D:F8:CB:55:B9:B8:F0:87:63:C6:61:5C:0F:90:E4:75
            X509v3 Authority Key Identifier:
                keyid:7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/323830343a353639383a3930303a3a2f34302d3430203d3e20323638303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5698:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         51:13:b7:bf:82:8f:73:65:eb:8f:3a:98:22:7b:88:04:8e:4b:
         6a:ef:ea:f4:86:c3:63:f0:3f:d2:4d:da:38:bd:49:cd:66:c2:
         63:85:03:a5:07:12:97:b4:ea:1d:5e:74:62:cf:25:1a:d2:7f:
         5b:ad:88:c9:55:8e:9f:7d:43:8c:85:a1:1c:78:11:62:a0:ff:
         c5:12:d2:49:86:60:c9:fb:76:fd:54:04:51:85:ea:3e:27:c1:
         70:95:1d:76:bf:03:91:6c:ad:c5:b0:e1:1c:42:5a:7a:6c:45:
         d2:ff:4f:f8:6b:c9:f4:b2:13:54:45:23:6e:73:60:c7:7c:d5:
         99:c4:9b:21:d3:71:9b:98:93:ca:e5:b3:ef:30:fd:26:75:c6:
         a0:7a:07:00:79:f0:6d:3c:eb:a6:33:ab:12:91:56:e6:5b:56:
         55:8c:4d:7f:21:ff:e3:bd:fd:1f:c1:02:80:35:50:8f:20:51:
         b9:b7:6f:f1:88:82:7e:81:7a:05:42:6c:d3:d5:15:59:d3:2b:
         cf:c5:68:6c:4b:63:60:e9:f4:03:34:e4:ef:a7:3e:d6:09:9d:
         4a:83:e2:53:0b:0e:43:22:3c:96:64:0d:94:23:67:b3:10:78:
         ea:0a:d0:b1:43:27:f2:fa:aa:f5:8e:9f:79:31:8a:1b:4e:79:
         cb:f0:0a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 13:15:25 2026 by rpki-client