Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/323830343a383034303a3a2f33322d3332203d3e20323731373339.roa
File:                     323830343a383034303a3a2f33322d3332203d3e20323731373339.roa (raw, json)
Hash identifier:          4QNedsIKI0dD5L83U3pZcHnYToMMzlF+oOckIe5/oWg=
Subject key identifier:   3C:9F:FD:EC:41:74:A0:E4:AA:C6:8B:8E:A4:03:DE:6D:8A:2D:AB:69
Certificate issuer:       /CN=484CAFED17D02C4555E5D45869F30ECAA7E1E5E3
Certificate serial:       7DDBACE408BC891CAF0BF52A31E9FC43EA789651
Authority key identifier: 48:4C:AF:ED:17:D0:2C:45:55:E5:D4:58:69:F3:0E:CA:A7:E1:E5:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/323830343a383034303a3a2f33322d3332203d3e20323731373339.roa
Signing time:             Thu 05 Feb 2026 09:46:17 +0000
ROA not before:           Thu 05 Feb 2026 09:41:17 +0000
ROA not after:            Thu 04 Feb 2027 09:46:17 +0000
asID:                     271739
IP address blocks:        2804:8040::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl
                          rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:56:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:db:ac:e4:08:bc:89:1c:af:0b:f5:2a:31:e9:fc:43:ea:78:96:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484CAFED17D02C4555E5D45869F30ECAA7E1E5E3
        Validity
            Not Before: Feb  5 09:41:17 2026 GMT
            Not After : Feb  4 09:46:17 2027 GMT
        Subject: CN=3C9FFDEC4174A0E4AAC68B8EA403DE6D8A2DAB69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:62:2e:68:3f:7c:40:98:7e:d9:2d:52:84:d6:
                    ea:f3:e0:d6:aa:d8:29:57:bb:d6:bc:de:53:80:a2:
                    24:d1:38:27:9f:85:2c:57:0a:38:4f:ab:99:ae:02:
                    47:5e:81:fc:84:eb:0c:0f:14:5a:38:32:78:ec:e6:
                    99:64:df:f0:f7:f9:cb:90:95:af:9a:2b:cd:01:cb:
                    28:c4:b6:5d:c2:59:44:7a:06:86:e5:d9:9b:03:d4:
                    5c:51:11:2e:c1:42:83:0a:23:e7:45:02:36:aa:87:
                    c2:09:2b:ff:02:f7:6a:6a:b4:b9:22:c8:7a:25:e4:
                    97:a8:8f:2f:22:cd:d0:a2:cb:d5:7a:0a:46:d7:36:
                    b4:c2:3d:3e:f6:ca:e5:f1:ef:6f:67:b9:c0:29:6b:
                    c7:05:3e:36:51:13:d5:8f:ae:05:7d:5b:c1:ac:7a:
                    16:58:86:30:51:3d:89:3c:d5:7d:e9:f2:4f:1b:a8:
                    f4:f1:8b:65:0d:2c:3c:07:97:6e:5a:5b:c7:8d:42:
                    e6:b6:bc:b5:71:d2:0e:fa:82:c5:80:40:c0:8a:d7:
                    47:b0:05:c7:58:1d:12:81:b4:50:fb:ff:d5:e4:15:
                    d7:26:53:3c:b9:23:d7:e8:04:e7:14:b1:9f:b1:f9:
                    08:7f:b5:1c:31:27:d2:57:5d:5a:69:b6:7c:70:98:
                    cf:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9F:FD:EC:41:74:A0:E4:AA:C6:8B:8E:A4:03:DE:6D:8A:2D:AB:69
            X509v3 Authority Key Identifier:
                keyid:48:4C:AF:ED:17:D0:2C:45:55:E5:D4:58:69:F3:0E:CA:A7:E1:E5:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/323830343a383034303a3a2f33322d3332203d3e20323731373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8040::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:e4:a9:55:96:88:94:e4:53:51:4d:bd:36:27:58:16:91:4c:
         ca:1c:07:4c:72:4b:54:48:07:02:c0:63:5c:f0:60:55:82:c7:
         48:c8:4b:1b:ac:8a:81:84:d5:3f:14:52:1f:b9:01:79:22:b4:
         a7:0f:d2:f7:83:d1:43:68:32:ee:91:ea:09:51:b4:86:cd:38:
         41:97:50:52:a0:fd:d1:0e:76:b8:40:ef:16:95:9e:33:f2:9d:
         7a:33:d9:f3:db:07:7c:58:74:02:78:f9:46:c9:2d:80:71:99:
         67:a3:48:0b:95:fc:5e:4b:41:0b:83:cf:1a:79:0e:a9:ea:21:
         fb:e9:4c:ef:c8:fc:f0:8b:ab:c7:d5:a9:65:01:d0:f7:40:ba:
         92:74:47:8f:1b:9f:dd:bb:bf:5a:4a:82:fc:d5:7a:b5:ed:44:
         e7:22:e2:11:6b:64:6b:d5:5f:cf:ed:2c:b2:a5:b4:7d:53:66:
         b8:25:b8:41:87:ff:48:fa:85:47:d6:f4:07:a2:74:60:bd:35:
         d1:f8:b3:44:fd:5f:fb:3c:f6:5f:c2:03:b7:ac:48:f6:1f:6b:
         dd:cd:9f:03:3d:2d:f8:5c:45:b6:a4:ec:0d:0b:7e:ca:f6:66:
         be:81:c4:d3:7a:79:84:2e:6c:44:bd:93:a2:03:e7:eb:a5:e2:
         cc:9a:20:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:44:12 2026 by rpki-client