Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/323830343a323362303a3a2f33322d3438203d3e20323632363435.roa
File:                     323830343a323362303a3a2f33322d3438203d3e20323632363435.roa (raw, json)
Hash identifier:          +arMWS6XcfvT2fpyQhD7cMgNyzGlkO1GoMjoSoHQld0=
Subject key identifier:   0A:7D:B5:0C:6C:39:4A:C8:22:18:40:A6:5F:46:DE:57:13:9C:4A:4C
Certificate issuer:       /CN=E09F2B81ED12D4B02A5B104DB200DEF0A03303AD
Certificate serial:       75C19E16F5713A9447C321F1376EB9CF8D06EB55
Authority key identifier: E0:9F:2B:81:ED:12:D4:B0:2A:5B:10:4D:B2:00:DE:F0:A0:33:03:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/323830343a323362303a3a2f33322d3438203d3e20323632363435.roa
Signing time:             Thu 05 Feb 2026 08:26:09 +0000
ROA not before:           Thu 05 Feb 2026 08:21:09 +0000
ROA not after:            Thu 04 Feb 2027 08:26:09 +0000
asID:                     262645
IP address blocks:        2804:23b0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.crl
                          rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:40:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c1:9e:16:f5:71:3a:94:47:c3:21:f1:37:6e:b9:cf:8d:06:eb:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E09F2B81ED12D4B02A5B104DB200DEF0A03303AD
        Validity
            Not Before: Feb  5 08:21:09 2026 GMT
            Not After : Feb  4 08:26:09 2027 GMT
        Subject: CN=0A7DB50C6C394AC8221840A65F46DE57139C4A4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:f8:04:a3:f5:be:28:3b:19:95:25:fe:21:
                    dc:66:47:4d:2c:0f:b5:88:eb:40:8e:75:f7:0d:12:
                    be:f4:54:28:2e:d2:c9:33:71:e9:87:89:d4:d1:99:
                    df:49:df:82:c7:61:ba:85:f8:a5:6e:67:89:f2:b0:
                    65:c6:a3:fe:3d:fb:15:64:3f:32:f5:b6:34:f6:b2:
                    75:c7:f5:e4:eb:d7:01:f1:01:ff:ee:b7:76:52:c3:
                    c4:74:0a:e6:23:57:16:d6:29:e6:b4:7b:6f:67:20:
                    a5:ff:86:1c:57:69:0f:9d:55:50:08:23:42:3a:c8:
                    dd:c2:94:58:58:71:a0:62:08:8c:a5:87:2e:32:4d:
                    9b:51:c0:6b:54:a0:b8:20:9a:22:91:23:6b:88:c1:
                    d2:62:1d:4d:7e:82:1a:c9:76:48:6c:f7:d5:de:48:
                    f7:f7:18:18:fe:56:88:29:2a:6c:88:08:cd:cf:81:
                    df:71:b6:79:70:cb:fa:74:ed:a5:a5:4d:e6:03:04:
                    19:13:19:f1:08:27:77:c2:68:b9:08:99:0e:62:97:
                    92:78:2d:7d:61:f1:72:be:45:64:44:82:a7:e8:57:
                    73:bc:7b:3e:84:45:a2:1d:0d:e5:be:2b:8d:df:7b:
                    3f:9e:dc:f2:20:31:d5:d9:33:90:36:eb:3e:44:fd:
                    6d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7D:B5:0C:6C:39:4A:C8:22:18:40:A6:5F:46:DE:57:13:9C:4A:4C
            X509v3 Authority Key Identifier:
                keyid:E0:9F:2B:81:ED:12:D4:B0:2A:5B:10:4D:B2:00:DE:F0:A0:33:03:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/323830343a323362303a3a2f33322d3438203d3e20323632363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:d8:45:e6:96:a5:37:29:fc:f5:52:ba:4b:32:25:92:00:40:
         c8:4f:55:4d:f9:22:f9:9c:5b:72:58:f0:ec:db:68:47:37:a8:
         cf:7b:39:00:66:c0:54:dc:d4:9e:73:f8:c3:d4:61:b3:aa:cf:
         dc:b7:a8:b9:ee:86:f5:e9:d5:4b:34:94:75:2d:be:da:9d:74:
         bd:60:db:47:6c:ce:1d:f6:92:04:44:14:08:79:18:7f:cb:36:
         ce:93:e7:c9:14:46:1e:af:59:67:fd:7d:1c:03:60:70:86:79:
         d7:7e:7c:18:8a:41:43:84:e6:5c:34:d8:5a:e6:e1:43:d5:23:
         dd:3c:e3:59:80:d0:4a:3a:ec:2c:e8:30:65:3d:12:b5:35:d7:
         24:6b:3e:97:ce:a1:98:ff:58:ca:cc:2d:01:95:46:96:6b:f0:
         2c:d8:1e:bb:1f:d2:a1:20:e7:ee:c7:55:dc:ec:f9:54:00:4a:
         d6:9b:b6:c9:21:6c:b4:bb:b0:53:f1:25:5a:53:09:85:10:15:
         93:21:42:fb:89:67:4c:01:2d:c2:e2:0b:de:4a:9f:d9:ae:4c:
         39:26:d9:78:82:73:80:8f:f0:0c:a1:40:86:3c:b3:5a:5d:6a:
         0a:20:90:4a:c7:bc:d4:7b:3c:e5:45:ff:b8:6d:01:6f:c0:91:
         fd:cd:a5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:54:54 2026 by rpki-client