Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a353031303a3a2f34382d3438203d3e20323637303234.roa
File:                     323830343a343666633a353031303a3a2f34382d3438203d3e20323637303234.roa (raw, json)
Hash identifier:          5fEnaLn0J/9AygMzLR3F47d/4tCkVhhaQbkWl6TkNZE=
Subject key identifier:   15:35:76:6C:BA:9F:1D:EB:C4:53:0A:A7:A1:F6:25:48:82:7A:E7:D8
Certificate issuer:       /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial:       0BBB9D8F0649A938948D3977920AD18D045DC225
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a353031303a3a2f34382d3438203d3e20323637303234.roa
Signing time:             Thu 05 Feb 2026 07:27:33 +0000
ROA not before:           Thu 05 Feb 2026 07:22:33 +0000
ROA not after:            Thu 04 Feb 2027 07:27:33 +0000
asID:                     267024
IP address blocks:        2804:46fc:5010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl
                          rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:43:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:bb:9d:8f:06:49:a9:38:94:8d:39:77:92:0a:d1:8d:04:5d:c2:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
        Validity
            Not Before: Feb  5 07:22:33 2026 GMT
            Not After : Feb  4 07:27:33 2027 GMT
        Subject: CN=1535766CBA9F1DEBC4530AA7A1F62548827AE7D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:36:b9:d3:9a:c9:2e:c8:2a:54:32:f3:c3:18:
                    e0:b8:9d:44:1f:b0:ac:3d:69:5d:0a:09:0e:18:ae:
                    4b:16:de:6e:17:eb:73:3f:ab:bf:0e:4b:30:1d:0d:
                    f4:74:07:e0:8e:3f:06:86:8b:e7:76:de:b1:6c:85:
                    ee:5f:f5:7b:63:9b:72:88:13:40:ae:5c:cb:74:6f:
                    7a:93:9e:a0:10:09:9d:02:f0:13:73:a9:69:ff:5b:
                    94:e1:43:55:4f:83:26:f6:9c:da:34:91:e4:4e:e3:
                    14:ba:7a:26:82:14:d7:66:3d:26:a9:bf:6c:76:6a:
                    14:bf:1f:84:8f:47:4c:e6:ec:db:c9:fb:18:81:e2:
                    91:a9:d3:8b:c1:8b:75:5e:38:d1:c0:71:62:57:60:
                    91:d3:5e:69:2b:cd:d7:4e:f5:cc:55:75:1c:2b:e6:
                    05:6a:dc:0c:c4:7a:b7:21:9e:2c:67:72:7d:e1:24:
                    e7:3b:52:7b:95:8c:1e:26:9f:e2:db:44:0b:4f:98:
                    bc:7d:3f:18:f1:50:07:64:8d:94:03:f8:28:fd:76:
                    17:be:f5:7e:85:c8:c4:39:e5:5f:32:62:19:9e:87:
                    35:26:6e:ef:c8:c0:2c:7e:8d:99:82:b4:4b:df:2e:
                    d7:a7:c5:96:cc:5d:1a:b5:76:83:4b:b7:24:f6:51:
                    59:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:35:76:6C:BA:9F:1D:EB:C4:53:0A:A7:A1:F6:25:48:82:7A:E7:D8
            X509v3 Authority Key Identifier:
                keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a353031303a3a2f34382d3438203d3e20323637303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46fc:5010::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:d5:f1:14:ad:e4:c0:34:26:3a:5b:66:dd:6b:29:e4:7c:2b:
         f0:a4:f9:d0:88:39:e3:ca:70:5e:a2:58:b0:79:40:0c:9c:d0:
         39:ec:a9:0b:fc:2d:06:b4:46:aa:88:ad:c4:ff:e9:a9:5e:c4:
         3e:66:9a:1f:30:63:4d:1e:f9:59:a8:7d:30:58:2f:b0:f3:88:
         74:7f:55:c8:d0:3b:94:56:0c:47:55:74:aa:11:27:9b:ec:4e:
         b5:c5:fa:f1:81:cb:8b:64:0f:76:75:e9:e0:fd:25:e8:d9:4d:
         f9:51:c2:2f:3a:75:15:ea:80:a0:62:c7:50:ee:0a:4b:05:14:
         f7:e8:ba:fb:bc:c0:98:28:53:ea:d7:62:5c:94:73:5c:d8:82:
         a4:06:53:7d:d9:d6:dc:c0:1b:c0:46:e2:36:77:67:55:37:8a:
         6d:71:3b:a2:7e:d5:e9:2e:b1:b6:81:f5:50:c9:30:81:21:7e:
         e7:a3:9c:5f:fe:bf:55:06:0d:d5:10:d0:63:7f:9d:47:b7:47:
         b1:d2:10:f5:26:c8:a0:5f:31:b7:00:01:3f:93:d4:c6:ea:1b:
         18:24:92:ca:77:22:ff:6f:d1:fe:d2:2c:ee:ed:2c:b7:33:03:
         63:57:ed:cb:62:9f:b2:4c:15:d7:48:92:6f:83:e9:f6:e4:32:
         b9:c9:17:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:30:51 2026 by rpki-client