Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/323830343a3232343a383130303a3a2f34302d3430203d3e20323632373932.roa
File:                     323830343a3232343a383130303a3a2f34302d3430203d3e20323632373932.roa (raw, json)
Hash identifier:          TEBXMLoj2bSSnyIgV12hwsV6WffCtoyzjncUeJkWS7o=
Subject key identifier:   EA:DD:1C:EE:36:49:CF:1E:5F:FE:51:EE:3F:C4:D8:F4:A5:C3:21:0A
Certificate issuer:       /CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Certificate serial:       15C2C5ADB72F255B946F6060022454DD2E28B175
Authority key identifier: D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/323830343a3232343a383130303a3a2f34302d3430203d3e20323632373932.roa
Signing time:             Fri 06 Feb 2026 21:48:45 +0000
ROA not before:           Fri 06 Feb 2026 21:43:45 +0000
ROA not after:            Fri 05 Feb 2027 21:48:45 +0000
asID:                     262792
IP address blocks:        2804:224:8100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl
                          rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c2:c5:ad:b7:2f:25:5b:94:6f:60:60:02:24:54:dd:2e:28:b1:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
        Validity
            Not Before: Feb  6 21:43:45 2026 GMT
            Not After : Feb  5 21:48:45 2027 GMT
        Subject: CN=EADD1CEE3649CF1E5FFE51EE3FC4D8F4A5C3210A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:16:b1:42:8a:46:55:4f:dd:b0:46:1b:6a:79:
                    fa:3f:3e:a3:bd:44:68:2b:06:78:75:a9:20:a0:50:
                    b9:31:61:24:d8:9b:18:12:90:60:ac:88:19:55:40:
                    dd:2d:7a:7d:b8:61:95:24:e9:d1:ad:c5:05:17:d9:
                    87:41:2b:86:27:13:dc:2f:6b:4d:a9:a6:a4:ab:6c:
                    81:37:ab:fc:71:be:2a:4e:1b:40:b0:c0:cb:d4:31:
                    d6:d6:2c:bb:28:2c:f5:2d:f7:85:2e:b1:63:09:ca:
                    2d:26:ba:91:46:c9:49:b6:e1:79:3c:b7:95:d4:13:
                    29:7d:7a:17:7f:1b:a3:76:73:35:fe:9c:87:5e:f6:
                    7f:42:b2:cd:78:2c:70:7d:a3:da:54:a5:88:a7:d8:
                    95:bf:59:be:d0:87:20:72:90:ee:23:0f:d1:fd:83:
                    39:87:53:82:5e:1e:0c:bc:00:65:7f:0f:f7:2c:fb:
                    18:c3:22:c0:f5:12:84:36:48:fd:d9:c6:37:29:f6:
                    60:5d:46:5f:3b:d3:ef:84:30:8c:69:62:45:03:9c:
                    7c:1b:39:6b:62:18:31:4d:87:32:f6:21:88:af:4b:
                    fc:34:6e:80:d3:31:f3:08:c6:08:2b:9d:13:18:ae:
                    36:58:84:61:18:77:5d:41:9a:5e:70:4d:1c:ee:7d:
                    14:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DD:1C:EE:36:49:CF:1E:5F:FE:51:EE:3F:C4:D8:F4:A5:C3:21:0A
            X509v3 Authority Key Identifier:
                keyid:D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/323830343a3232343a383130303a3a2f34302d3430203d3e20323632373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:224:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         ac:50:b7:13:d1:ec:5e:3e:4b:5a:5b:bc:84:c7:b8:0d:8f:c0:
         2f:2a:1b:02:f1:dd:40:11:c9:2c:48:fe:2d:b7:6d:d3:e7:61:
         fe:ee:9a:20:b5:df:42:68:cc:5a:6b:d5:25:11:fd:2e:57:2f:
         8f:de:80:1e:ad:fb:98:42:05:cb:94:91:33:4e:4a:11:4b:2f:
         e7:e1:d1:a1:ad:89:dc:eb:6e:b2:30:6d:e5:3e:fa:3f:26:31:
         5a:c8:6d:fc:af:1d:69:37:94:42:0a:0f:01:5a:74:67:73:84:
         fb:3e:75:c5:d1:de:64:14:f9:c1:64:67:6a:21:55:92:bd:d7:
         22:23:f7:c7:e8:98:96:61:20:8e:32:ff:a7:c2:16:95:3e:0d:
         1e:15:74:61:16:31:24:fc:07:b6:18:65:ef:4f:54:43:c4:93:
         9e:bb:8e:19:79:fb:87:21:67:c8:30:7d:73:21:70:f8:d9:d9:
         ed:3f:0d:d8:9d:40:4b:6e:60:28:7a:86:e3:84:d0:e8:a1:e2:
         42:f6:7b:4f:35:eb:4e:1c:09:8b:ad:2f:13:ae:ea:7a:30:e7:
         b8:4f:90:78:f5:d4:22:89:40:9d:9b:13:32:f2:0a:cb:69:e6:
         5b:0d:d6:81:44:73:9c:6f:23:e4:42:8d:ed:e9:91:34:a9:2e:
         95:64:c4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:54:25 2026 by rpki-client