Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/323830343a383466383a313130303a3a2f34302d3430203d3e20323732353439.roa
File:                     323830343a383466383a313130303a3a2f34302d3430203d3e20323732353439.roa (raw, json)
Hash identifier:          N4VGJmgCa+nRIRw1veRc/4Q5MScpjZJXFiygzSDeI6w=
Subject key identifier:   71:2F:E8:7C:A2:EF:E2:1F:48:6E:74:A5:B7:B7:63:CA:38:90:C6:DC
Certificate issuer:       /CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
Certificate serial:       62ED3FAABCC0B92BB1D2479C371CAED6837BCB98
Authority key identifier: 2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/323830343a383466383a313130303a3a2f34302d3430203d3e20323732353439.roa
Signing time:             Fri 09 Jan 2026 15:47:35 +0000
ROA not before:           Fri 09 Jan 2026 15:42:35 +0000
ROA not after:            Fri 08 Jan 2027 15:47:35 +0000
asID:                     272549
IP address blocks:        2804:84f8:1100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl
                          rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 15:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ed:3f:aa:bc:c0:b9:2b:b1:d2:47:9c:37:1c:ae:d6:83:7b:cb:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
        Validity
            Not Before: Jan  9 15:42:35 2026 GMT
            Not After : Jan  8 15:47:35 2027 GMT
        Subject: CN=712FE87CA2EFE21F486E74A5B7B763CA3890C6DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1f:0d:e3:8d:e5:dd:ec:f2:bc:36:09:dc:2a:
                    96:67:cf:ae:00:45:8d:23:20:7a:5f:91:de:14:84:
                    90:6e:7d:18:a7:fb:cd:b4:fc:0a:eb:ac:ac:09:b3:
                    c6:a0:e0:e4:ec:64:ac:71:8d:c3:b7:77:2a:a2:f6:
                    c0:ca:35:9f:02:28:71:6c:0d:d9:b8:b2:9e:b7:39:
                    5e:b5:5f:1e:87:b2:5a:3a:1e:8c:28:30:23:0b:88:
                    6b:7d:f5:d3:cc:d9:a3:7b:1a:2c:82:15:fe:8a:26:
                    26:88:dd:b6:a1:1f:68:5b:d9:51:f7:2d:9a:1c:10:
                    55:a0:97:ba:fe:70:d7:6b:ac:eb:6b:19:93:d5:90:
                    f3:10:af:2b:d7:c5:9e:e2:be:e2:4e:97:d1:95:ef:
                    05:b5:e1:d4:48:84:bf:56:c0:10:1c:85:99:8d:84:
                    80:87:8f:e5:f2:29:88:b1:7e:20:4c:40:c2:a8:2d:
                    1f:0c:8c:ca:89:5f:9f:21:04:5a:2f:3c:f0:e4:59:
                    32:66:82:23:23:6a:90:88:da:3c:a2:92:2f:97:0c:
                    96:6f:d5:80:7e:33:4d:d0:5c:d4:43:87:3c:20:fe:
                    9b:ad:77:d1:3a:d0:9b:5b:18:2d:ed:86:2e:4d:c3:
                    72:ed:69:2c:40:15:56:dc:78:a1:ea:a2:07:d1:d1:
                    0e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2F:E8:7C:A2:EF:E2:1F:48:6E:74:A5:B7:B7:63:CA:38:90:C6:DC
            X509v3 Authority Key Identifier:
                keyid:2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/323830343a383466383a313130303a3a2f34302d3430203d3e20323732353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84f8:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:0f:4d:34:9e:fd:2d:49:9b:11:a0:ad:77:de:7f:ce:4f:79:
         25:9a:76:f4:c2:58:73:97:37:d2:7d:0a:73:5c:c5:ca:55:a9:
         10:ed:d9:f3:35:3b:b8:d0:63:d7:ae:34:31:e8:ef:a9:c8:89:
         f2:b3:3a:23:c3:a4:43:89:f5:d8:79:0c:bf:53:bd:af:3e:6d:
         75:f8:48:37:29:db:51:dc:f4:91:aa:4b:f3:c0:75:b1:68:ec:
         9f:e9:cd:2f:41:a4:bb:e0:b1:cb:67:19:71:af:53:b6:74:14:
         58:d1:cf:61:0a:34:e5:fc:d9:b1:b2:05:61:01:e0:9b:16:3d:
         71:d3:27:f6:21:6a:fd:a3:6c:7a:f1:80:6d:29:a8:02:f7:a0:
         0b:ce:51:c2:ff:c1:b7:59:04:43:14:17:64:64:4a:9e:0b:b5:
         86:92:48:f0:32:a9:54:e1:a1:78:5c:ad:97:69:54:c3:66:24:
         34:1a:02:8d:07:8b:21:94:58:52:fc:f9:5f:ba:57:6e:35:cb:
         e0:71:5c:01:9e:9f:20:5a:6d:f5:d2:ec:f7:78:95:40:4b:b3:
         0a:93:d7:ec:ff:2f:8f:bb:c0:80:74:51:b5:70:77:ef:72:ff:
         8d:ae:3c:f6:fe:3f:78:56:6a:78:b4:04:05:a1:70:9d:ca:d9:
         16:4d:e8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:44:43 2026 by rpki-client