Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/323830343a6636303a3a2f33322d3438203d3e20323633353832.roa
File:                     323830343a6636303a3a2f33322d3438203d3e20323633353832.roa (raw, json)
Hash identifier:          5vnYdXuW/wBGj1jxK3JU+yljvnLX+X3G48MwKOnazDk=
Subject key identifier:   9D:69:59:FC:62:47:55:B3:55:77:D2:0F:1E:CD:47:B5:73:D8:A8:98
Certificate issuer:       /CN=4373021A1019537C2A9D84FF03720B0ECF4EBB52
Certificate serial:       2E1367930770ECC0E935987F0CDD428956099176
Authority key identifier: 43:73:02:1A:10:19:53:7C:2A:9D:84:FF:03:72:0B:0E:CF:4E:BB:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/323830343a6636303a3a2f33322d3438203d3e20323633353832.roa
Signing time:             Thu 05 Feb 2026 12:12:48 +0000
ROA not before:           Thu 05 Feb 2026 12:07:48 +0000
ROA not after:            Thu 04 Feb 2027 12:12:48 +0000
asID:                     263582
IP address blocks:        2804:f60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.crl
                          rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 16:13:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:13:67:93:07:70:ec:c0:e9:35:98:7f:0c:dd:42:89:56:09:91:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4373021A1019537C2A9D84FF03720B0ECF4EBB52
        Validity
            Not Before: Feb  5 12:07:48 2026 GMT
            Not After : Feb  4 12:12:48 2027 GMT
        Subject: CN=9D6959FC624755B35577D20F1ECD47B573D8A898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f5:84:9c:1d:27:37:cf:b4:c1:ad:f1:78:fb:
                    51:d3:58:32:d5:95:e2:6a:79:63:d6:7a:25:bf:69:
                    37:bd:12:60:2b:50:f0:0e:4d:e6:c7:2e:03:48:23:
                    71:32:6b:45:3c:19:17:d1:a6:51:4c:5b:a5:b6:4c:
                    ab:e3:a7:ab:d6:fa:b6:01:0a:40:c4:eb:e3:74:4a:
                    e3:54:ba:43:d9:a3:79:88:2e:58:6d:2d:74:44:ce:
                    29:c6:0f:c6:3b:61:83:cd:d8:02:fe:a6:50:4d:00:
                    1a:b1:3e:3a:6d:5b:18:0c:c1:69:c0:d5:c3:90:fc:
                    3a:8e:58:d0:8f:f2:48:76:b6:72:a7:7c:74:72:23:
                    47:dc:2d:f0:00:b1:2f:74:db:7f:21:d0:10:de:10:
                    23:93:f0:89:0b:d0:e1:b3:b4:64:00:85:a7:70:a3:
                    1a:06:67:31:66:e3:cb:81:4a:3c:03:21:c0:55:71:
                    8b:41:0e:c4:d8:af:bd:1b:38:f0:97:58:4b:54:e6:
                    ee:d3:53:44:d4:0c:5b:c3:b6:b8:c7:0e:d7:4b:e9:
                    70:85:26:49:17:20:4a:14:6f:3e:6e:9e:7c:b9:4b:
                    3c:0d:22:a3:90:14:76:b9:58:2d:78:9f:ef:a8:90:
                    d3:4c:56:ba:c5:73:60:07:5e:e6:4c:35:b5:45:9f:
                    dd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:69:59:FC:62:47:55:B3:55:77:D2:0F:1E:CD:47:B5:73:D8:A8:98
            X509v3 Authority Key Identifier:
                keyid:43:73:02:1A:10:19:53:7C:2A:9D:84:FF:03:72:0B:0E:CF:4E:BB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/323830343a6636303a3a2f33322d3438203d3e20323633353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:7d:51:97:e0:a6:99:5c:90:f6:1c:60:aa:45:61:51:f8:62:
         1a:e5:36:2a:9d:2e:3a:4b:72:8f:dc:ba:c2:c6:60:49:27:fd:
         c4:c3:01:bb:93:23:04:b3:ff:2f:26:e2:64:aa:80:8f:58:32:
         9c:7a:f5:35:40:b0:39:ad:6d:51:13:9f:f4:01:fa:75:9a:c6:
         9d:be:f4:24:3a:1d:8a:0e:1f:03:de:93:e7:96:bf:a8:dd:b2:
         2d:93:22:0d:0d:90:98:b4:fe:2a:b4:c3:77:ae:82:9d:ce:33:
         7e:b6:c0:15:18:e0:5a:b5:0b:7d:9c:7a:b6:87:a1:79:b9:37:
         7e:32:8f:0f:60:ed:ec:6a:72:ca:cc:c8:db:97:60:58:65:a4:
         db:34:d5:8b:1b:40:67:a2:63:b5:ef:10:33:ef:7b:64:47:a3:
         b8:f7:c2:e5:de:72:5e:82:42:85:2c:32:23:8f:39:79:6e:ac:
         5f:17:cf:e9:ca:a0:ed:ac:bd:2f:09:d8:0e:46:0d:72:71:51:
         0f:7c:f1:1a:fc:e0:2c:06:88:9c:dc:ab:35:66:65:c1:cd:38:
         b0:23:b6:28:c9:32:a0:dd:81:f4:93:f4:70:8d:13:d0:b0:da:
         7e:fb:9a:50:8f:1f:02:8c:de:be:2c:1e:62:a2:0e:1e:33:96:
         7d:d0:cd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:55:36 2026 by rpki-client