Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/323830313a38303a3a2f34382d3438203d3e203238363436.roa
File:                     323830313a38303a3a2f34382d3438203d3e203238363436.roa (raw, json)
Hash identifier:          k8vtCgADQvDKhFe7egr0fKslK7IO1jE8GZveKt9PhQc=
Subject key identifier:   C0:1E:2B:88:A7:44:88:9E:03:56:E2:1C:A5:E1:C2:CF:BF:E8:CB:87
Certificate issuer:       /CN=8D41CABF9128C1CBAC4BB641E77B86D13098BC6D
Certificate serial:       6D42ED040CAA9CB2B97D2B92D796558E5F5D20DA
Authority key identifier: 8D:41:CA:BF:91:28:C1:CB:AC:4B:B6:41:E7:7B:86:D1:30:98:BC:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/323830313a38303a3a2f34382d3438203d3e203238363436.roa
Signing time:             Thu 05 Feb 2026 12:19:23 +0000
ROA not before:           Thu 05 Feb 2026 12:14:23 +0000
ROA not after:            Thu 04 Feb 2027 12:19:23 +0000
asID:                     28646
IP address blocks:        2801:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.crl
                          rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:17:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:42:ed:04:0c:aa:9c:b2:b9:7d:2b:92:d7:96:55:8e:5f:5d:20:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D41CABF9128C1CBAC4BB641E77B86D13098BC6D
        Validity
            Not Before: Feb  5 12:14:23 2026 GMT
            Not After : Feb  4 12:19:23 2027 GMT
        Subject: CN=C01E2B88A744889E0356E21CA5E1C2CFBFE8CB87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5a:bf:7a:2e:6f:85:9e:be:62:00:f3:e5:a3:
                    dc:d0:bf:b6:bb:ba:3c:1b:d8:8f:09:0e:4c:91:89:
                    83:db:cc:85:ce:01:b4:68:46:5a:c6:5e:aa:b6:1b:
                    da:73:e6:a6:82:6c:96:09:f4:ca:d4:46:9a:43:87:
                    c2:69:2f:fd:98:e2:0c:13:88:2c:5d:12:cd:ef:eb:
                    e6:08:63:ce:08:97:31:29:29:a1:1c:e5:a2:27:d8:
                    23:1c:bd:34:57:f8:51:39:e2:bb:bb:c7:55:b1:b4:
                    ec:a2:eb:6e:52:aa:eb:2c:2c:61:72:20:8e:de:64:
                    e5:6b:a8:3e:60:ef:37:28:ad:4e:37:b1:07:66:fa:
                    c9:7c:8a:5b:9b:05:fb:29:1c:e3:b0:6c:d4:0b:20:
                    6d:5a:54:f1:df:d3:b2:d1:d8:9e:0a:9f:c6:30:55:
                    3f:0c:7a:5e:7b:90:21:83:c5:c5:21:13:60:2e:8a:
                    73:6c:69:8a:90:5b:13:01:f4:ef:77:78:c7:80:a1:
                    8e:07:a8:c4:04:66:f7:22:8b:6d:65:ca:b0:12:a7:
                    71:54:fe:a4:ee:39:b1:e2:cd:1f:98:32:fc:4f:98:
                    76:6b:b6:fa:cf:54:99:70:79:5e:f9:52:64:27:94:
                    f1:3c:1f:60:56:a2:b4:1a:b3:7d:34:2c:e3:87:ec:
                    c3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1E:2B:88:A7:44:88:9E:03:56:E2:1C:A5:E1:C2:CF:BF:E8:CB:87
            X509v3 Authority Key Identifier:
                keyid:8D:41:CA:BF:91:28:C1:CB:AC:4B:B6:41:E7:7B:86:D1:30:98:BC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/323830313a38303a3a2f34382d3438203d3e203238363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:0c:1e:20:a6:87:02:2a:3c:a2:76:0f:6c:41:d7:f8:32:38:
         f0:3c:a1:5b:90:9c:d7:1d:8b:31:fa:42:92:fc:ca:43:03:55:
         c8:02:bd:b2:dd:50:4c:73:56:f9:ee:f7:a5:1b:52:89:14:fb:
         43:a0:2c:86:40:ee:bc:96:7d:1b:17:65:a1:34:22:61:5c:43:
         50:71:e2:ae:f0:61:8b:d3:24:fd:9e:a2:41:c9:de:91:dd:fd:
         94:3e:f4:8b:f4:07:98:23:9f:ff:7f:b6:79:58:12:f9:21:80:
         ec:f3:bc:a2:1a:69:1b:d2:28:86:91:fe:1a:8e:9e:93:f3:2c:
         11:5a:49:8c:43:70:ed:a2:b6:37:70:b5:b6:98:dd:04:57:88:
         7a:d9:f9:24:41:6f:0f:08:be:aa:06:95:71:8e:b4:d2:e3:42:
         ce:cd:af:4e:d9:22:c6:28:f9:30:8e:a0:e0:18:1e:38:cc:e0:
         20:9a:49:38:0f:15:74:e3:d8:f5:26:65:f9:26:bc:c9:6a:de:
         ed:a2:b2:21:5c:19:c9:46:d8:fe:c4:0b:84:ba:c4:17:0c:af:
         1f:5c:ed:d5:a7:b0:39:64:d6:40:71:71:dc:67:9c:81:d4:60:
         f1:e7:72:3d:c9:81:07:07:51:ed:45:c9:c9:c3:c5:1d:58:65:
         0f:7c:a7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:57:59 2026 by rpki-client