Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9PpDQWjoVWtHeB2HP8Fm2szrNYrHZGTrUBPfsbtb3Zwh/1/323830343a346436303a3a2f33322d3334203d3e20323633303936.roa
File:                     323830343a346436303a3a2f33322d3334203d3e20323633303936.roa (raw, json)
Hash identifier:          mkcrJekg4vpBKWvK+47pzueMOfSr/IW6JoHx3sfuGhw=
Subject key identifier:   8E:E6:27:74:62:89:CD:16:28:82:E7:2D:1B:D7:9C:43:D1:61:9C:47
Certificate issuer:       /CN=7292FC5483AF008ACAD31348DC7D4F5B8ABF4970
Certificate serial:       3D705EF6857A8817DE3EB2F587F47E2DF06A4136
Authority key identifier: 72:92:FC:54:83:AF:00:8A:CA:D3:13:48:DC:7D:4F:5B:8A:BF:49:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7292FC5483AF008ACAD31348DC7D4F5B8ABF4970.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9PpDQWjoVWtHeB2HP8Fm2szrNYrHZGTrUBPfsbtb3Zwh/1/323830343a346436303a3a2f33322d3334203d3e20323633303936.roa
Signing time:             Thu 05 Feb 2026 21:31:15 +0000
ROA not before:           Thu 05 Feb 2026 21:26:15 +0000
ROA not after:            Thu 04 Feb 2027 21:31:15 +0000
asID:                     263096
IP address blocks:        2804:4d60::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9PpDQWjoVWtHeB2HP8Fm2szrNYrHZGTrUBPfsbtb3Zwh/1/7292FC5483AF008ACAD31348DC7D4F5B8ABF4970.crl
                          rsync://rpki-repo.registro.br/repo/9PpDQWjoVWtHeB2HP8Fm2szrNYrHZGTrUBPfsbtb3Zwh/1/7292FC5483AF008ACAD31348DC7D4F5B8ABF4970.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7292FC5483AF008ACAD31348DC7D4F5B8ABF4970.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:70:5e:f6:85:7a:88:17:de:3e:b2:f5:87:f4:7e:2d:f0:6a:41:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7292FC5483AF008ACAD31348DC7D4F5B8ABF4970
        Validity
            Not Before: Feb  5 21:26:15 2026 GMT
            Not After : Feb  4 21:31:15 2027 GMT
        Subject: CN=8EE627746289CD162882E72D1BD79C43D1619C47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:99:42:24:32:c3:de:4a:31:90:b4:fe:87:b7:
                    99:be:83:43:f4:03:ab:6d:07:7c:66:66:e6:a6:ad:
                    04:c4:e2:f9:fd:e0:34:95:87:4c:6e:82:cb:e9:07:
                    36:97:4b:ee:c1:b0:40:18:05:b4:08:4b:b6:b8:8a:
                    f2:0c:57:1c:81:b7:89:6a:28:0c:1a:c7:aa:5d:b2:
                    89:67:29:4c:eb:e5:1c:92:06:06:d6:58:41:d5:22:
                    57:5c:62:74:c0:95:9f:6f:27:82:49:21:31:e2:e3:
                    eb:2d:11:56:92:c3:f8:41:a7:79:6c:2c:a4:f1:47:
                    ae:dd:6d:9f:bb:ea:5c:ab:42:f3:9e:bd:5f:80:3d:
                    fb:c0:0e:61:ab:7f:7c:d3:8d:a6:53:c2:5f:ad:19:
                    2d:95:04:b8:10:88:27:9f:16:d8:5b:23:8d:b6:4f:
                    29:4c:3c:30:2c:99:33:51:59:36:80:b7:1a:4f:25:
                    53:4e:19:d4:fa:34:19:d7:33:c0:bd:f3:64:23:c0:
                    c2:a2:43:4d:2a:89:24:dd:63:14:e7:61:1f:03:20:
                    01:37:6b:bd:70:07:0b:22:eb:6c:a2:30:c5:c5:70:
                    41:81:f4:58:1e:29:19:1b:4b:13:f8:87:20:0e:33:
                    c2:be:9e:9a:a1:a6:1d:78:43:dd:5e:46:99:bf:ee:
                    b8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E6:27:74:62:89:CD:16:28:82:E7:2D:1B:D7:9C:43:D1:61:9C:47
            X509v3 Authority Key Identifier:
                keyid:72:92:FC:54:83:AF:00:8A:CA:D3:13:48:DC:7D:4F:5B:8A:BF:49:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9PpDQWjoVWtHeB2HP8Fm2szrNYrHZGTrUBPfsbtb3Zwh/1/7292FC5483AF008ACAD31348DC7D4F5B8ABF4970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7292FC5483AF008ACAD31348DC7D4F5B8ABF4970.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9PpDQWjoVWtHeB2HP8Fm2szrNYrHZGTrUBPfsbtb3Zwh/1/323830343a346436303a3a2f33322d3334203d3e20323633303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d60::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:7d:c5:59:00:96:92:0d:27:02:a1:ed:10:06:20:f5:fc:91:
         07:28:e0:21:e4:2f:81:9f:b0:69:42:0d:97:b2:34:35:62:cd:
         60:54:98:82:bf:b7:07:af:bd:c8:67:39:b6:f6:24:38:e8:0f:
         54:c9:d0:2f:33:bc:a7:45:d6:f0:64:2a:d1:9a:a6:9c:e1:1a:
         b1:2f:b0:33:e0:75:75:96:e1:ca:2f:8a:a9:49:e2:50:03:70:
         d0:3b:e7:5a:bf:83:60:66:9c:74:40:7a:77:33:29:a5:22:cc:
         44:6a:be:89:ed:6e:da:af:55:8d:d0:2b:e4:cc:56:df:48:87:
         78:32:4e:f2:c5:9d:16:02:42:e6:fd:8a:11:f4:32:19:93:4c:
         6b:86:6f:43:6a:49:4a:1f:a6:f6:67:4d:f9:23:dc:0a:4c:df:
         2f:26:cb:13:61:87:3b:c6:c5:31:ff:a8:3e:3d:4f:ac:1f:b9:
         5c:f8:45:7a:d6:26:ee:df:12:27:7e:02:d8:b7:7a:05:2c:23:
         48:0b:d5:ee:a8:b1:cc:17:51:ce:48:af:2c:8e:63:84:f6:50:
         41:8e:5c:19:bb:07:7c:5e:6f:0c:30:f6:88:cd:19:ea:74:c7:
         e3:76:7e:49:37:79:23:7a:71:1b:b8:24:3b:3b:b0:db:29:20:
         e5:a9:9e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:59 2026 by rpki-client