Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/323830343a313462633a3a2f33322d3438203d3e20323633333437.roa
File:                     323830343a313462633a3a2f33322d3438203d3e20323633333437.roa (raw, json)
Hash identifier:          mg1S/SV+IQt6x5Y4V3OurNLO03LmmzgWpCBUD63oE6o=
Subject key identifier:   F8:71:BE:9C:76:56:92:A0:B8:93:C8:D3:D3:A8:9B:A3:87:CE:C9:30
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       40853DB83E3EB1BDECB4D416B5159950D3D6E11A
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/323830343a313462633a3a2f33322d3438203d3e20323633333437.roa
Signing time:             Thu 05 Feb 2026 18:58:17 +0000
ROA not before:           Thu 05 Feb 2026 18:53:17 +0000
ROA not after:            Thu 04 Feb 2027 18:58:17 +0000
asID:                     263347
IP address blocks:        2804:14bc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:28:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:85:3d:b8:3e:3e:b1:bd:ec:b4:d4:16:b5:15:99:50:d3:d6:e1:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Feb  5 18:53:17 2026 GMT
            Not After : Feb  4 18:58:17 2027 GMT
        Subject: CN=F871BE9C765692A0B893C8D3D3A89BA387CEC930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7a:ae:ca:87:d1:08:6a:8f:e5:cb:f3:9b:6b:
                    e9:1c:da:48:8d:a7:24:94:23:6d:52:03:6f:ad:b5:
                    97:6d:2a:66:08:66:d4:d6:80:76:f4:ba:5a:22:de:
                    70:35:a3:2e:b9:7e:72:5b:4d:0e:3d:6e:25:c6:d1:
                    ec:53:1b:ea:0c:e5:fb:5a:21:c3:eb:c8:d9:ce:01:
                    26:0a:f6:7b:f3:ff:b9:42:7b:81:aa:b6:2f:71:e1:
                    1b:55:3c:75:35:fa:f0:1a:64:f1:76:d7:c4:0d:a5:
                    a6:b7:d4:09:b7:f8:dd:31:d2:55:98:aa:71:e0:4f:
                    43:ef:07:03:9e:ce:18:f1:99:62:8d:99:f0:20:80:
                    36:24:b9:e7:a0:2f:1a:56:c7:34:fd:95:ab:39:c0:
                    05:66:a7:a3:30:bd:be:34:24:ec:0c:0e:71:7e:b0:
                    5f:d5:87:70:25:01:71:6e:1b:06:43:04:6a:82:24:
                    9a:c5:61:c9:e1:5c:71:ab:c5:2a:6e:e4:51:22:6f:
                    27:14:00:59:e5:fb:b6:28:33:13:19:a5:0b:92:e3:
                    ae:1c:e0:8a:94:ce:d5:f0:f3:f2:2b:21:14:a0:ee:
                    b5:f7:bc:25:2a:d5:6b:6c:55:aa:57:54:b3:f1:24:
                    d4:95:88:18:a3:9b:c9:dd:8d:fa:b0:b9:a5:b4:a2:
                    50:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:71:BE:9C:76:56:92:A0:B8:93:C8:D3:D3:A8:9B:A3:87:CE:C9:30
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/323830343a313462633a3a2f33322d3438203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:54:d3:a9:4a:bf:3c:ad:0b:90:69:bd:3d:d7:1e:8a:ac:a3:
         9e:c2:0e:11:ee:0f:46:e5:61:07:46:0a:fb:55:ca:2e:43:6b:
         c2:14:72:38:61:6b:c0:71:06:10:9f:6c:e6:18:69:61:78:c1:
         44:46:54:b9:25:2e:e1:23:ed:d3:1e:e0:20:61:5c:f8:e7:00:
         69:e3:57:88:74:ba:ef:2f:29:84:60:24:01:82:1a:6e:80:02:
         e2:20:ea:72:1b:e7:d8:4e:70:c0:03:a3:2d:5a:46:79:d3:3c:
         2a:04:18:24:ad:b6:ce:3e:c9:a8:13:73:e6:0e:64:f1:8e:e4:
         d3:df:8a:50:29:31:62:f0:f3:73:0f:0c:b7:75:09:77:76:f4:
         9b:f1:89:94:b3:4a:d2:13:5d:30:f6:82:95:af:8d:45:72:59:
         7a:22:10:18:7e:89:14:44:21:f7:57:eb:38:e9:55:73:34:8b:
         21:06:cd:07:0a:4c:35:6b:a5:f3:21:fb:b4:50:83:db:20:b4:
         5c:08:a8:c6:9f:ba:d1:11:d7:cc:d8:13:f4:a2:ab:b2:1c:d4:
         ab:16:6a:bc:20:59:15:c8:a4:ac:92:40:34:95:3e:63:82:a4:
         ad:9b:56:f0:ef:2e:7a:15:21:4f:f3:8b:84:69:45:1c:ee:2e:
         31:31:f2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:11 2026 by rpki-client