Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a343030303a3a2f33342d3334203d3e20323639363437.roa
File:                     323830343a363762633a343030303a3a2f33342d3334203d3e20323639363437.roa (raw, json)
Hash identifier:          10grmYgRlb0SS90IyJSUVWSNmVEKOcdAfRyd6LTqChc=
Subject key identifier:   9A:08:CF:B5:EF:72:8B:A8:EF:A8:7B:18:FB:46:99:D6:4C:4C:63:A3
Certificate issuer:       /CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Certificate serial:       55BF7F6E78705CB2DB022338F194882DE47C3DEE
Authority key identifier: D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a343030303a3a2f33342d3334203d3e20323639363437.roa
Signing time:             Thu 05 Feb 2026 09:00:30 +0000
ROA not before:           Thu 05 Feb 2026 08:55:30 +0000
ROA not after:            Thu 04 Feb 2027 09:00:30 +0000
asID:                     269647
IP address blocks:        2804:67bc:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
                          rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bf:7f:6e:78:70:5c:b2:db:02:23:38:f1:94:88:2d:e4:7c:3d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
        Validity
            Not Before: Feb  5 08:55:30 2026 GMT
            Not After : Feb  4 09:00:30 2027 GMT
        Subject: CN=9A08CFB5EF728BA8EFA87B18FB4699D64C4C63A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a7:0c:be:bc:ef:e1:c9:2a:ef:cf:d3:a3:aa:
                    a0:01:23:11:9f:c1:c9:23:e3:c0:c7:e3:18:f3:51:
                    c1:67:5c:aa:98:42:e8:6a:5e:3f:b3:5d:e4:d6:95:
                    33:88:48:d8:3f:df:51:41:05:dd:8e:7b:c7:da:50:
                    04:f2:d9:ee:b9:50:b4:9f:cd:52:70:25:64:30:99:
                    37:fb:50:07:52:14:55:2d:8d:bd:29:d3:44:a6:d5:
                    92:43:9e:19:d4:49:2d:32:df:eb:8b:22:29:1e:ce:
                    66:78:18:99:da:20:5c:15:34:c7:26:70:7f:d5:7c:
                    6a:8e:a5:2b:81:2b:05:71:61:f1:67:30:17:4b:64:
                    eb:de:d1:ae:2b:6c:04:48:22:7a:a1:74:1d:d3:3b:
                    10:60:51:56:bb:f8:e7:73:f8:6f:53:8f:10:26:db:
                    e2:4b:82:0e:71:c4:d2:9e:76:a5:52:b6:bf:c2:eb:
                    41:4f:7b:56:d4:bb:27:12:80:47:e9:01:28:16:33:
                    ae:8b:cb:39:28:40:15:2a:1d:e9:d9:d2:24:f1:68:
                    77:d5:64:95:8d:13:ae:76:25:3b:2a:f3:bc:5a:1a:
                    44:7e:82:f6:63:63:b3:23:e3:e7:fa:ea:5e:e7:8d:
                    85:09:f2:7e:01:29:9d:77:bc:fb:6f:52:f8:c0:a4:
                    5c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:08:CF:B5:EF:72:8B:A8:EF:A8:7B:18:FB:46:99:D6:4C:4C:63:A3
            X509v3 Authority Key Identifier:
                keyid:D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a343030303a3a2f33342d3334203d3e20323639363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67bc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         79:0b:ff:89:79:20:59:b0:64:01:89:aa:ab:0c:7f:2f:35:67:
         24:e0:c1:f4:db:2f:cc:1e:c0:0a:f4:6c:f0:99:d3:97:21:93:
         97:51:93:dd:96:53:4d:fb:44:07:89:c2:3c:8b:c3:12:65:e4:
         c9:54:74:5e:24:83:3a:52:61:d6:84:1d:ed:1e:fd:b5:7b:c9:
         13:a5:3a:47:62:4b:cb:c0:ec:73:8c:5c:b0:a4:9a:dc:ae:c3:
         bf:a0:20:ed:c5:a1:22:7e:37:5a:bf:a6:99:87:82:0b:61:74:
         2f:ce:c9:ae:13:f5:a7:de:2b:1c:73:09:0a:27:66:64:b9:0f:
         1a:cb:09:c8:71:08:2c:28:eb:29:99:c4:db:5f:24:19:0b:b4:
         f3:4f:3b:f9:d1:55:a2:3c:7d:97:ce:75:b6:35:e2:10:28:56:
         85:9e:66:54:b3:ea:74:13:11:98:8a:01:fa:0c:76:f0:0f:6f:
         22:ee:40:35:41:09:ee:a3:7e:76:9b:23:f9:99:1e:29:59:2f:
         14:4b:8e:92:98:07:a2:18:b8:b9:b3:a2:b5:70:78:e0:79:61:
         77:66:f1:29:12:99:e9:02:1d:32:08:9d:d0:f7:82:25:3d:ae:
         47:54:d6:bd:c5:e5:bd:25:a7:d1:a4:78:55:6d:04:10:b5:60:
         5d:bf:26:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:38:03 2026 by rpki-client