Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/323830343a313335633a3a2f33322d3335203d3e20323633353330.roa
File:                     323830343a313335633a3a2f33322d3335203d3e20323633353330.roa (raw, json)
Hash identifier:          jKWlo8DiE6ltfr3pWcLq5MH2NAAiyJ79pwvFCXV+E+w=
Subject key identifier:   04:AB:FC:50:46:18:7C:BF:AD:62:BC:15:2C:16:58:90:CA:F6:EC:96
Certificate issuer:       /CN=F7C4DEB12240FF8688C32C67939C04C380824025
Certificate serial:       2649147D2B999A383E829B6A7333CC247CB1B5B4
Authority key identifier: F7:C4:DE:B1:22:40:FF:86:88:C3:2C:67:93:9C:04:C3:80:82:40:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7C4DEB12240FF8688C32C67939C04C380824025.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/323830343a313335633a3a2f33322d3335203d3e20323633353330.roa
Signing time:             Wed 04 Feb 2026 20:00:04 +0000
ROA not before:           Wed 04 Feb 2026 19:55:04 +0000
ROA not after:            Wed 03 Feb 2027 20:00:04 +0000
asID:                     263530
IP address blocks:        2804:135c::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/F7C4DEB12240FF8688C32C67939C04C380824025.crl
                          rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/F7C4DEB12240FF8688C32C67939C04C380824025.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7C4DEB12240FF8688C32C67939C04C380824025.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:49:14:7d:2b:99:9a:38:3e:82:9b:6a:73:33:cc:24:7c:b1:b5:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7C4DEB12240FF8688C32C67939C04C380824025
        Validity
            Not Before: Feb  4 19:55:04 2026 GMT
            Not After : Feb  3 20:00:04 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:68:03:7b:ec:c6:a6:ee:4a:14:23:2c:d8:bb:
                    44:75:c5:1b:31:d4:25:7c:10:28:8a:53:02:bf:1f:
                    1c:20:08:1e:75:a4:20:2f:a5:87:8f:f7:75:17:c5:
                    0b:48:4f:77:72:7b:de:aa:c8:02:84:4a:b1:f3:3a:
                    fd:46:bc:1c:dc:35:9d:b1:8c:68:45:0d:b6:81:d7:
                    52:dd:a4:c8:97:fa:41:2a:fe:3c:80:6c:80:3b:5a:
                    e9:c4:27:00:61:10:82:49:b5:81:da:16:ad:ef:a0:
                    b4:20:7d:02:32:8d:5b:ef:80:f9:50:11:77:46:a8:
                    79:69:70:f0:11:7d:0c:14:e5:27:02:9d:b6:79:78:
                    6f:ba:5f:12:9e:58:dd:31:95:86:d9:57:d8:e4:32:
                    04:48:08:a6:6b:b8:51:ab:a4:83:32:b7:f8:c6:24:
                    ad:c6:04:b7:7b:c6:00:89:53:c3:00:53:f9:7a:86:
                    4e:dc:9f:a6:c9:22:1c:b7:3a:a4:0e:71:d4:1f:bd:
                    f2:47:63:97:ba:63:94:cd:87:ec:70:90:41:eb:a4:
                    90:b1:bf:7f:ed:05:f0:10:7a:e3:7b:dd:ea:77:30:
                    e0:22:84:cb:8f:30:33:d3:25:5f:f9:79:6e:84:5b:
                    c1:c4:18:99:e7:79:55:cf:b0:50:c6:5a:59:00:1b:
                    48:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AB:FC:50:46:18:7C:BF:AD:62:BC:15:2C:16:58:90:CA:F6:EC:96
            X509v3 Authority Key Identifier:
                keyid:F7:C4:DE:B1:22:40:FF:86:88:C3:2C:67:93:9C:04:C3:80:82:40:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/F7C4DEB12240FF8688C32C67939C04C380824025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7C4DEB12240FF8688C32C67939C04C380824025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/323830343a313335633a3a2f33322d3335203d3e20323633353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:135c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:40:73:c1:32:54:92:88:e7:a8:f3:9f:55:c2:df:bf:51:6a:
         af:6e:22:ca:8f:48:09:22:d7:7e:9f:36:a9:39:f9:c3:39:4f:
         65:da:31:db:37:2d:35:ea:a1:05:7e:c0:10:6a:be:34:86:15:
         02:2d:5e:dd:d6:03:24:c3:1e:26:77:81:cf:b0:88:58:f5:5a:
         3a:8c:b4:d0:d7:28:9b:f7:14:93:e9:3e:bf:36:91:f4:8d:c5:
         7d:8d:6a:4a:c5:39:49:94:e8:83:cd:3b:71:a2:b2:44:ce:8e:
         e9:03:41:7d:fb:03:d7:31:15:54:8e:e9:05:1b:46:0e:8a:7b:
         dc:2e:04:8b:00:00:f9:d1:55:d6:26:6b:86:43:8c:b4:e6:94:
         3b:9c:7c:d7:a0:23:d6:ef:91:f0:00:16:e2:0b:3e:64:07:8d:
         a1:76:d5:51:7a:cc:b9:8f:e6:2a:26:2a:ba:8b:d1:e6:8c:2a:
         6f:08:31:f6:37:c0:c2:db:67:9a:bb:37:4c:a0:62:e4:28:b7:
         0b:e1:1e:b8:9a:64:09:4a:29:41:8c:1f:c4:22:4a:f8:5d:94:
         c8:3e:a0:c0:ce:c4:72:b6:44:54:4b:7c:66:8d:eb:01:cf:4f:
         e9:5b:83:4a:77:8e:57:02:72:0b:2c:19:dc:01:e4:56:6b:d6:
         64:14:5b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:52:35 2026 by rpki-client