Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a3a2f33322d3438203d3e20323630363437.roa
File:                     323830343a363762633a3a2f33322d3438203d3e20323630363437.roa (raw, json)
Hash identifier:          HbK+I93CH0OZ8rMeXWbavpKRDyz849KcbyrzE/f1W8c=
Subject key identifier:   B3:5C:36:66:C1:ED:1E:43:CF:E6:34:34:EA:80:18:E8:A1:75:77:C8
Certificate issuer:       /CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Certificate serial:       2108B50C9735898AF10986ADEA9B3B152DF06A10
Authority key identifier: D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a3a2f33322d3438203d3e20323630363437.roa
Signing time:             Thu 05 Feb 2026 09:00:30 +0000
ROA not before:           Thu 05 Feb 2026 08:55:30 +0000
ROA not after:            Thu 04 Feb 2027 09:00:30 +0000
asID:                     260647
IP address blocks:        2804:67bc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
                          rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:08:b5:0c:97:35:89:8a:f1:09:86:ad:ea:9b:3b:15:2d:f0:6a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
        Validity
            Not Before: Feb  5 08:55:30 2026 GMT
            Not After : Feb  4 09:00:30 2027 GMT
        Subject: CN=B35C3666C1ED1E43CFE63434EA8018E8A17577C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:41:5c:2a:d8:6b:2c:ae:9c:f4:1f:54:1f:07:
                    57:7d:2e:cc:e9:e8:4e:66:41:cc:20:97:58:36:3d:
                    53:03:c6:58:6d:4e:ac:5d:62:ac:78:6b:cf:2d:6c:
                    04:35:63:13:7d:0b:82:4c:2b:49:97:d6:19:b2:95:
                    55:cf:3c:23:2a:41:20:dd:a8:29:f7:8d:ef:f8:d6:
                    b6:96:65:3c:4d:9f:ce:dd:15:67:59:db:03:ef:39:
                    a6:ff:68:bb:a2:0f:d3:52:2d:45:6c:d9:35:8b:cb:
                    57:f1:26:15:33:46:dc:2f:d4:c7:91:72:37:d9:2f:
                    30:ce:20:cb:be:2e:04:99:2c:2b:59:2e:0a:44:e3:
                    62:f9:b5:35:04:8c:ed:2f:ae:79:fb:7a:f1:f6:9c:
                    b8:0c:b1:36:ce:02:71:91:ff:ca:77:85:c7:94:46:
                    b6:f8:e1:35:62:2a:b4:70:88:43:14:29:cf:7a:f4:
                    74:5b:ad:6a:ff:c2:39:9b:05:67:92:4a:05:11:92:
                    fd:3e:29:43:cd:f6:cc:48:73:ce:0b:97:39:32:6f:
                    6c:ea:02:df:a7:9b:e2:d5:b5:f3:99:90:58:7e:be:
                    91:d4:de:52:ca:b7:d6:38:3d:4b:aa:7a:93:f7:b1:
                    d9:52:b2:d0:ef:b9:f0:29:21:c0:4c:a1:d4:3d:d0:
                    ba:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5C:36:66:C1:ED:1E:43:CF:E6:34:34:EA:80:18:E8:A1:75:77:C8
            X509v3 Authority Key Identifier:
                keyid:D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a3a2f33322d3438203d3e20323630363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:eb:3e:14:87:5f:6b:29:62:2d:81:12:38:7a:9d:5e:18:6d:
         30:a5:c5:43:3f:79:94:70:ea:f3:f3:0c:b3:ec:1e:88:00:25:
         51:77:52:f0:e1:a8:49:ee:aa:de:c0:3f:43:bb:b4:e9:7d:47:
         b2:2a:ee:57:e5:9f:a5:88:b6:c7:84:58:84:b5:06:db:75:2b:
         5d:6f:3c:34:15:11:ac:f0:a1:9a:5f:ec:27:fd:00:27:89:da:
         b8:e7:84:4d:ac:dc:32:21:33:7a:d9:e7:a5:41:06:6d:7d:54:
         b6:45:69:b2:b0:66:c3:5e:65:9e:1a:a9:d9:e1:fb:41:3a:ee:
         44:41:a5:58:a5:55:51:3a:8c:a9:7a:0e:65:44:96:75:7b:c4:
         cf:8a:96:69:79:60:38:7f:c4:b8:e8:1a:82:1f:a6:63:eb:d3:
         fc:9e:0b:6f:0f:fc:13:92:25:65:a3:72:ee:74:93:af:c8:87:
         ea:49:30:c8:97:f4:bc:ca:f1:19:78:92:6b:db:3e:8a:86:98:
         d6:17:8d:a7:ed:fc:bd:49:8a:da:24:91:bd:5b:7c:f2:9a:31:
         b5:68:81:2d:a6:e5:4c:db:d1:ad:69:85:f0:3f:c9:64:74:c0:
         7c:f9:d4:bc:83:7c:dd:04:fc:4f:dd:05:52:88:19:8c:11:95:
         bb:fd:d1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:06:15 2026 by rpki-client