Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/323830343a366164633a3a2f33322d313238203d3e20323730333632.roa
File:                     323830343a366164633a3a2f33322d313238203d3e20323730333632.roa (raw, json)
Hash identifier:          aOYPokUjP5rEDooRVE+4Dw6UqqVKSGFkGFwZkRkErnY=
Subject key identifier:   8F:17:CC:B3:33:83:BA:87:FF:4C:15:A8:66:9F:56:31:B5:C0:CF:41
Certificate issuer:       /CN=1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD
Certificate serial:       47E73136C23877BE858723E9DE5F4A132C016908
Authority key identifier: 1B:10:04:FC:54:CD:C4:0D:C5:66:7B:1D:6B:18:3C:CE:A2:DA:4F:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/323830343a366164633a3a2f33322d313238203d3e20323730333632.roa
Signing time:             Wed 04 Feb 2026 20:33:50 +0000
ROA not before:           Wed 04 Feb 2026 20:28:50 +0000
ROA not after:            Wed 03 Feb 2027 20:33:50 +0000
asID:                     270362
IP address blocks:        2804:6adc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.crl
                          rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e7:31:36:c2:38:77:be:85:87:23:e9:de:5f:4a:13:2c:01:69:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD
        Validity
            Not Before: Feb  4 20:28:50 2026 GMT
            Not After : Feb  3 20:33:50 2027 GMT
        Subject: CN=8F17CCB33383BA87FF4C15A8669F5631B5C0CF41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:55:27:2f:1f:a4:7b:3f:62:c9:81:cf:f2:9b:
                    2f:cb:50:82:d8:37:35:d6:2d:b5:42:34:2b:63:12:
                    a7:ca:75:dc:16:41:15:8e:ba:4d:18:7a:5d:2f:99:
                    45:8e:4b:ee:ab:14:3a:ab:1a:ae:a6:d6:4d:52:26:
                    2e:e8:1e:43:57:09:04:ae:37:d9:aa:55:bf:9d:56:
                    58:6e:6b:9c:f7:40:91:98:35:11:46:0d:1f:4e:3d:
                    09:e1:f7:d7:ed:f5:9b:e6:ac:b1:0d:80:37:32:47:
                    31:9f:a5:30:44:5b:8b:b7:4d:5b:4b:2e:23:9c:56:
                    d7:8c:1e:fd:92:53:c9:06:f8:25:18:ac:2a:08:d9:
                    4e:88:dd:4e:3e:4b:dc:2c:7c:15:44:33:7c:18:8c:
                    6f:4d:af:f9:f2:55:e8:d3:61:d0:2c:bd:9a:4a:b6:
                    5a:d0:4e:b5:55:b5:a9:a2:99:6e:df:3b:0a:36:7a:
                    02:a4:80:65:1f:4c:53:ae:1e:31:1d:35:91:77:35:
                    3b:15:d1:6f:d8:5d:03:d7:18:79:bf:84:66:01:9f:
                    0d:17:0a:70:5c:26:05:5c:f3:a5:20:57:f4:be:94:
                    ea:cb:95:a1:c4:a2:0c:dc:ff:45:ed:ad:9d:6e:25:
                    e3:0b:dc:1f:69:21:f8:1a:d4:a4:95:e5:bf:b4:9f:
                    1b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:17:CC:B3:33:83:BA:87:FF:4C:15:A8:66:9F:56:31:B5:C0:CF:41
            X509v3 Authority Key Identifier:
                keyid:1B:10:04:FC:54:CD:C4:0D:C5:66:7B:1D:6B:18:3C:CE:A2:DA:4F:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/323830343a366164633a3a2f33322d313238203d3e20323730333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6adc::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:7f:01:0e:bc:9d:7e:54:bc:98:42:c7:75:9c:32:0b:37:a3:
         a3:7e:5d:bb:ca:05:1b:eb:57:26:f2:09:33:37:b9:bb:13:32:
         82:11:65:1c:bd:56:04:21:de:f1:0d:53:c2:ce:b5:53:5b:c0:
         c4:4d:13:8e:19:80:ff:f1:ba:d7:48:ed:eb:fd:36:05:cd:a1:
         98:de:19:b5:88:8d:5f:9c:04:34:4a:97:14:a9:01:8c:3c:62:
         83:07:26:d5:3a:cc:59:18:35:18:28:1c:32:10:57:4a:51:4c:
         2f:f3:b7:99:94:a2:5d:ad:d8:8b:48:92:03:4d:c7:0d:aa:25:
         9e:2e:b4:f5:b4:4c:f6:53:c4:fc:88:9c:cd:01:9f:cc:7b:4d:
         9f:a4:5c:ee:06:0e:79:41:ed:85:d7:1d:b1:be:cc:96:bc:37:
         23:9d:c1:61:6c:85:a6:b9:f6:86:09:60:45:5d:27:e3:09:53:
         a3:8c:c5:7c:86:84:8b:20:e4:f3:0d:9d:18:3a:b4:a2:6f:e6:
         21:b3:19:b7:34:9f:81:f4:56:0b:c3:6e:6f:11:2a:ef:fc:9d:
         7a:16:61:1e:30:0a:0d:42:ef:c2:b7:ef:c9:eb:e5:1b:48:d3:
         80:98:8d:25:aa:70:f8:00:f8:78:95:32:67:5c:28:40:f1:dd:
         bb:98:28:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:24:54 2026 by rpki-client