Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/323830343a326635303a3a2f33322d3334203d3e20323634383833.roa
File:                     323830343a326635303a3a2f33322d3334203d3e20323634383833.roa (raw, json)
Hash identifier:          z4/BdNYNko5mnyyuXaWWxZuFRYLrcXeY5FpOZmSV9G4=
Subject key identifier:   8A:F0:63:5C:A7:97:C0:67:7A:D0:C4:A2:46:F8:6D:A2:53:FB:A8:68
Certificate issuer:       /CN=7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B
Certificate serial:       12E0EE242FA713B58B7CEAAAA9AEA0732898B818
Authority key identifier: 76:52:D9:D4:F9:A6:42:C7:B0:47:74:C9:0C:F6:F3:FB:21:B7:F4:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/323830343a326635303a3a2f33322d3334203d3e20323634383833.roa
Signing time:             Thu 05 Feb 2026 18:56:42 +0000
ROA not before:           Thu 05 Feb 2026 18:51:42 +0000
ROA not after:            Thu 04 Feb 2027 18:56:42 +0000
asID:                     264883
IP address blocks:        2804:2f50::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.crl
                          rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:40:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e0:ee:24:2f:a7:13:b5:8b:7c:ea:aa:a9:ae:a0:73:28:98:b8:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B
        Validity
            Not Before: Feb  5 18:51:42 2026 GMT
            Not After : Feb  4 18:56:42 2027 GMT
        Subject: CN=8AF0635CA797C0677AD0C4A246F86DA253FBA868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5e:8e:49:19:c8:f9:10:db:08:24:2c:ff:b4:
                    04:36:37:f1:8a:e5:a8:cd:d7:c8:7c:30:58:f2:1e:
                    54:28:ac:e9:24:f8:20:f0:71:5e:ef:38:3c:8a:67:
                    c9:ef:9f:a6:63:e7:77:30:3a:72:38:66:ce:f0:53:
                    28:2a:17:df:c7:f6:96:4e:33:c7:23:c8:ae:0a:a9:
                    a0:2f:cc:6b:37:c6:f2:00:a4:ce:c1:77:fb:8c:ee:
                    a5:33:b3:7c:f4:d7:bd:7f:57:30:ee:c2:e1:ba:7a:
                    28:af:95:b2:e6:2d:0d:5a:3a:eb:5d:1e:cc:28:d0:
                    c3:94:86:6d:5e:6d:a0:e3:a2:be:8a:46:d2:0e:6a:
                    dc:6d:4c:3b:8e:2d:39:6d:a4:fb:12:d6:9b:6b:55:
                    55:fa:d6:73:f0:dd:11:17:a3:4d:da:c0:51:a5:7c:
                    ff:b5:b6:bc:bc:05:09:38:c8:3c:c0:66:af:fd:a7:
                    f7:ee:48:e7:2a:1d:72:91:57:c3:fc:fe:38:eb:06:
                    ac:55:78:50:ba:73:f5:fe:f4:88:8d:27:58:02:6c:
                    f1:31:25:ed:c6:85:15:20:af:58:b9:69:b6:14:90:
                    1d:a8:82:19:9a:71:8b:06:e8:04:91:1a:e9:00:a6:
                    b2:08:6f:59:cc:70:a6:10:6e:67:b9:30:72:62:c7:
                    17:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F0:63:5C:A7:97:C0:67:7A:D0:C4:A2:46:F8:6D:A2:53:FB:A8:68
            X509v3 Authority Key Identifier:
                keyid:76:52:D9:D4:F9:A6:42:C7:B0:47:74:C9:0C:F6:F3:FB:21:B7:F4:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/323830343a326635303a3a2f33322d3334203d3e20323634383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f50::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:9e:d7:64:da:97:27:9d:33:4f:a7:72:65:a8:7d:a3:09:e0:
         2f:84:c4:63:28:6a:6a:0c:83:a0:2d:c2:aa:91:4e:b1:19:52:
         fc:c9:2a:78:34:40:bd:a7:da:2d:dd:87:c6:fa:a4:d6:3e:4b:
         67:bb:82:9b:d7:31:83:86:e3:a1:09:48:11:82:63:1e:1c:e9:
         a5:27:f1:8c:b5:20:01:be:7f:b2:fd:fe:29:c3:14:d9:91:74:
         dc:d3:78:a7:fb:cc:38:ff:09:e6:1e:6e:b6:95:c2:13:e5:68:
         c6:1c:3f:94:03:3d:db:01:63:14:7e:89:09:a2:1c:4a:68:26:
         09:05:fc:7e:07:7a:0e:2d:1c:51:c5:88:6a:b3:f3:80:02:40:
         01:68:fa:59:ba:9b:fe:dc:e1:b9:ad:dc:a9:23:be:91:a5:b0:
         42:ac:8f:a8:1a:14:da:37:82:36:f7:23:e5:0c:92:5d:20:14:
         73:25:fe:4d:56:46:57:cc:7b:f8:2a:d8:52:e8:89:ae:aa:71:
         c4:95:79:07:eb:8d:a6:7f:2d:3b:58:6f:56:6b:ec:5a:07:ec:
         a1:0e:5b:e5:35:9d:1a:fe:67:67:cc:72:8d:99:0e:d5:95:cf:
         95:bf:76:62:e7:57:b6:ad:4e:91:df:cc:67:d6:24:44:6a:e0:
         53:2c:7c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:11:47 2026 by rpki-client