Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Z4Sm8eyRehyioFXxcaj3H9FvLzbgepuzxttDTxsN1nc/1/323830343a326639633a3a2f33322d3438203d3e20323634393032.roa
File:                     323830343a326639633a3a2f33322d3438203d3e20323634393032.roa (raw, json)
Hash identifier:          CJNI8uoFx5Aisq6Bp9FdXIy8aQyczqQvZHrVtLlWoKM=
Subject key identifier:   46:10:97:01:84:BC:6B:6E:CB:1D:C1:88:28:81:4E:36:DB:94:F5:25
Certificate issuer:       /CN=14A074279BF0B98275FD6F5FAB71058F35F69FD0
Certificate serial:       3E9EC97D6C09AB2E4C8A81868E651E757FD46ECB
Authority key identifier: 14:A0:74:27:9B:F0:B9:82:75:FD:6F:5F:AB:71:05:8F:35:F6:9F:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14A074279BF0B98275FD6F5FAB71058F35F69FD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Z4Sm8eyRehyioFXxcaj3H9FvLzbgepuzxttDTxsN1nc/1/323830343a326639633a3a2f33322d3438203d3e20323634393032.roa
Signing time:             Thu 05 Feb 2026 11:08:28 +0000
ROA not before:           Thu 05 Feb 2026 11:03:28 +0000
ROA not after:            Thu 04 Feb 2027 11:08:28 +0000
asID:                     264902
IP address blocks:        2804:2f9c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Z4Sm8eyRehyioFXxcaj3H9FvLzbgepuzxttDTxsN1nc/1/14A074279BF0B98275FD6F5FAB71058F35F69FD0.crl
                          rsync://rpki-repo.registro.br/repo/8Z4Sm8eyRehyioFXxcaj3H9FvLzbgepuzxttDTxsN1nc/1/14A074279BF0B98275FD6F5FAB71058F35F69FD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14A074279BF0B98275FD6F5FAB71058F35F69FD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 20:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:9e:c9:7d:6c:09:ab:2e:4c:8a:81:86:8e:65:1e:75:7f:d4:6e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14A074279BF0B98275FD6F5FAB71058F35F69FD0
        Validity
            Not Before: Feb  5 11:03:28 2026 GMT
            Not After : Feb  4 11:08:28 2027 GMT
        Subject: CN=4610970184BC6B6ECB1DC18828814E36DB94F525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:ef:47:0e:2f:a0:3e:84:67:32:d3:44:dc:
                    c0:e4:01:bb:ca:e7:2b:b8:6a:13:f0:59:98:1c:6f:
                    b2:d6:a8:8c:c7:8e:f6:6f:41:6d:7b:da:3f:b6:11:
                    c3:30:65:33:1e:79:7e:3f:fc:d6:a6:f6:46:f0:82:
                    e0:32:ad:e9:f6:67:f1:f7:9b:01:b5:36:8d:b5:93:
                    60:bc:c8:20:d6:8b:47:1a:11:65:c1:99:e4:70:68:
                    c0:34:2b:41:64:8c:b5:54:5c:62:b6:b3:09:2d:0c:
                    79:ac:40:6b:3d:9a:c7:46:00:4a:83:fb:1b:93:52:
                    6d:0c:9c:97:7a:b1:3c:c9:d4:e4:83:df:db:68:59:
                    07:d0:48:5a:d2:01:a3:60:b5:3a:12:4d:aa:d1:fa:
                    79:67:4c:9c:05:25:f8:9d:d1:45:54:50:b6:ce:e4:
                    9c:8d:dd:d8:54:15:d1:94:7d:eb:8b:ad:20:34:07:
                    3d:95:7e:30:63:7f:32:96:24:20:8f:e0:b4:6e:92:
                    0c:9f:48:d7:d9:8b:21:b3:34:bb:82:87:1d:85:bb:
                    82:11:7d:18:33:e6:99:75:d5:97:ff:80:27:be:ac:
                    a3:0a:9b:95:c6:63:cb:6f:db:60:f9:d3:4b:f5:ed:
                    58:ac:e3:77:b4:f3:46:70:db:34:12:94:18:8c:b6:
                    b8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:10:97:01:84:BC:6B:6E:CB:1D:C1:88:28:81:4E:36:DB:94:F5:25
            X509v3 Authority Key Identifier:
                keyid:14:A0:74:27:9B:F0:B9:82:75:FD:6F:5F:AB:71:05:8F:35:F6:9F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Z4Sm8eyRehyioFXxcaj3H9FvLzbgepuzxttDTxsN1nc/1/14A074279BF0B98275FD6F5FAB71058F35F69FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14A074279BF0B98275FD6F5FAB71058F35F69FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Z4Sm8eyRehyioFXxcaj3H9FvLzbgepuzxttDTxsN1nc/1/323830343a326639633a3a2f33322d3438203d3e20323634393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:3c:6d:c5:51:cd:8a:ec:cc:28:1a:b3:3e:41:60:3f:08:e7:
         36:5b:d4:bd:07:4c:bb:93:83:79:d9:7d:0a:0d:ab:4f:8d:2e:
         bc:1e:d4:15:fe:73:03:55:4f:12:05:a8:51:6f:57:ad:1e:b5:
         93:0f:82:13:24:04:3d:e1:10:b2:fe:57:dc:cd:f5:f3:95:c6:
         28:68:db:be:a7:7d:e2:78:5e:e4:c8:d8:7a:f3:ff:ca:e8:61:
         bb:06:3b:6c:41:c7:95:0e:71:3c:69:51:6a:f9:9f:f5:20:b3:
         25:9c:91:47:38:73:2e:6a:16:c7:5d:8d:98:51:37:8f:51:f6:
         d2:0b:0a:c2:e2:66:e6:9d:06:dc:55:74:59:2a:dc:7c:1b:a0:
         3c:94:98:67:3c:a6:ea:c8:c7:47:17:f7:e3:46:fc:f5:a0:7c:
         12:90:23:35:63:30:aa:f6:dd:a4:55:1f:13:24:80:1f:69:f1:
         38:14:26:31:1f:ca:d1:37:1b:ac:48:fe:a5:c1:34:ea:05:fa:
         f9:23:9c:5a:5e:b6:55:50:b6:f8:7d:40:00:1d:80:19:d1:10:
         20:73:8c:ee:af:d9:50:e2:3c:cc:c1:6b:b9:9d:89:f1:f8:a8:
         2f:a8:7d:a5:c7:31:53:66:a9:43:4f:1f:7a:ad:e9:82:bc:ee:
         cb:0d:53:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:21:04 2026 by rpki-client