Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a3a2f33332d3333203d3e20323639363437.roa
File:                     323830343a363762633a3a2f33332d3333203d3e20323639363437.roa (raw, json)
Hash identifier:          smxTkQ5o90PQIFi81VarJKZNQHmklJJsnDJFMVfj0wE=
Subject key identifier:   CA:AD:8E:C4:57:8A:AF:47:C3:ED:98:5E:09:53:C0:62:77:19:DD:97
Certificate issuer:       /CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Certificate serial:       523955D8330ABBD102F1CAC9426DBB26126C3063
Authority key identifier: D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a3a2f33332d3333203d3e20323639363437.roa
Signing time:             Thu 05 Feb 2026 09:00:30 +0000
ROA not before:           Thu 05 Feb 2026 08:55:30 +0000
ROA not after:            Thu 04 Feb 2027 09:00:30 +0000
asID:                     269647
IP address blocks:        2804:67bc::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
                          rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:39:55:d8:33:0a:bb:d1:02:f1:ca:c9:42:6d:bb:26:12:6c:30:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
        Validity
            Not Before: Feb  5 08:55:30 2026 GMT
            Not After : Feb  4 09:00:30 2027 GMT
        Subject: CN=CAAD8EC4578AAF47C3ED985E0953C0627719DD97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8e:07:14:ec:ca:aa:bd:ae:ad:fe:57:e4:11:
                    f8:ce:4b:35:4a:ab:e9:f6:59:19:04:77:35:ee:17:
                    a5:4d:cb:58:62:8c:66:33:cf:3e:21:04:f9:d5:78:
                    9f:61:85:51:af:00:b9:5c:96:0b:5a:0d:ca:dc:b6:
                    4a:e2:71:ad:4d:6a:5f:2c:a3:4b:0b:e8:5d:de:3e:
                    ba:43:a6:60:3f:cf:d5:f4:27:d1:8a:f4:68:dd:cb:
                    ae:c6:fe:2e:27:64:a4:d9:60:7b:76:de:34:98:10:
                    a7:f9:34:7b:f6:45:40:15:20:4d:8b:bd:74:45:89:
                    a5:2e:15:7d:e2:9a:dd:84:01:6c:56:62:30:ee:fe:
                    f9:a2:11:4f:9a:9b:f3:ba:73:b1:76:50:f3:36:ee:
                    df:22:d8:53:31:81:6d:b9:e8:f8:07:10:1d:29:6f:
                    1c:08:3b:ef:02:2c:10:14:2b:1c:ce:3e:15:5a:3b:
                    f5:52:9b:a4:70:65:ab:bc:54:92:49:51:cd:8e:8a:
                    2c:1b:f7:cf:39:25:7c:87:4d:23:1e:59:49:e8:63:
                    08:fd:fc:38:54:a0:ab:81:82:1b:1d:c0:f8:6c:e4:
                    2d:83:2d:bc:3a:e0:bc:aa:1c:3c:1c:99:9c:e1:35:
                    a6:ef:59:c2:e9:7d:d5:4e:ec:f8:92:dd:5a:fc:68:
                    79:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AD:8E:C4:57:8A:AF:47:C3:ED:98:5E:09:53:C0:62:77:19:DD:97
            X509v3 Authority Key Identifier:
                keyid:D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a3a2f33332d3333203d3e20323639363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67bc::/33

    Signature Algorithm: sha256WithRSAEncryption
         42:c6:37:34:f9:ba:67:ac:67:ca:c6:1a:60:eb:e2:85:ec:5c:
         82:f5:5e:a5:9b:df:eb:59:f0:78:8d:1d:a0:7b:4f:e1:24:eb:
         0b:0c:6e:f2:dd:35:2d:06:15:13:f8:4d:c8:ba:18:a6:ce:e8:
         53:fe:45:29:33:09:12:43:61:f0:c8:c1:4e:d5:67:d8:f3:90:
         a0:2e:32:6d:92:d9:ad:c1:9f:6b:d7:e2:f5:57:0c:32:be:e6:
         51:19:49:8c:1e:36:77:22:c6:6b:bb:36:87:71:b8:45:b1:d4:
         4a:9f:e1:00:c5:17:d3:0e:7e:aa:42:88:79:91:74:ae:ba:70:
         c0:b9:7b:2a:4c:74:2b:1a:00:48:3b:0f:cf:17:55:b8:2a:bf:
         eb:72:cb:6d:9f:c7:d0:ca:fb:7c:46:23:4a:96:b1:3e:59:f7:
         19:0f:56:e3:ed:cb:e1:e7:67:d8:17:ce:24:d8:cf:b0:b9:ea:
         a4:09:8d:c5:83:4d:54:af:d6:69:6d:0d:56:62:52:fc:66:1b:
         94:12:00:a1:e3:78:7f:46:fb:76:a6:b8:0b:3e:60:b1:3f:08:
         55:1a:f3:1d:75:b8:01:88:63:b5:f7:66:4b:b8:7a:f5:3d:3c:
         46:7e:dd:7c:38:d6:fe:b9:16:e3:9e:47:bd:fe:1f:82:63:3e:
         48:8a:0e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:38:06 2026 by rpki-client