Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1/323830343a353037383a3a2f33322d313238203d3e20323638333931.roa
File:                     323830343a353037383a3a2f33322d313238203d3e20323638333931.roa (raw, json)
Hash identifier:          a9dshdCh9ZbNgzHAk2xZTFzuhm7kXW3Dx8WFNq2jlP8=
Subject key identifier:   E1:97:46:9E:F7:5A:88:2C:EC:05:EC:C3:D1:74:A3:0E:8A:30:B6:1E
Certificate issuer:       /CN=37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97
Certificate serial:       25295A6EB7A63D6574750200C6FB3B5829EBE908
Authority key identifier: 37:FE:03:60:BF:70:C2:BB:2E:6A:D3:D3:4F:0D:94:2B:07:6F:AA:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1/323830343a353037383a3a2f33322d313238203d3e20323638333931.roa
Signing time:             Thu 05 Feb 2026 01:05:41 +0000
ROA not before:           Thu 05 Feb 2026 01:00:41 +0000
ROA not after:            Thu 04 Feb 2027 01:05:41 +0000
asID:                     268391
IP address blocks:        2804:5078::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.crl
                          rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 21:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:29:5a:6e:b7:a6:3d:65:74:75:02:00:c6:fb:3b:58:29:eb:e9:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97
        Validity
            Not Before: Feb  5 01:00:41 2026 GMT
            Not After : Feb  4 01:05:41 2027 GMT
        Subject: CN=E197469EF75A882CEC05ECC3D174A30E8A30B61E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:69:46:cb:25:da:81:04:9a:c5:27:ad:84:b4:
                    0e:1d:37:7f:1d:05:2d:26:15:e9:53:06:37:6c:d1:
                    29:20:e2:93:95:2b:2b:1e:3c:f4:d0:ce:9f:01:7d:
                    a2:d7:33:4a:cf:53:3a:64:76:2f:88:d5:ee:fe:8b:
                    42:f6:16:ea:12:83:11:11:53:93:40:12:f2:02:0b:
                    2e:33:09:5f:d7:5e:5a:4f:27:99:34:c0:71:63:62:
                    8e:de:4c:b7:43:81:7c:dd:82:e6:ea:68:31:94:ae:
                    76:a7:45:9d:0b:e8:90:4a:73:b6:56:a4:41:b8:02:
                    4f:bb:40:94:11:f4:58:db:19:79:d3:3d:e4:a1:27:
                    eb:79:6d:1a:e2:4f:52:51:15:a7:87:5b:9d:9c:8f:
                    d4:20:9e:bd:03:ec:03:9c:41:22:bc:1b:f7:43:96:
                    59:b0:d3:09:8a:14:23:24:19:ae:36:4c:80:69:34:
                    8d:11:45:67:96:3f:f3:ab:56:75:ff:67:bd:94:9d:
                    90:fc:d2:ba:4f:48:27:5d:13:e0:5e:58:22:d9:8d:
                    10:c5:bd:84:11:f6:e8:99:c5:36:88:1f:36:01:bc:
                    99:0c:0f:0a:74:4e:69:81:e3:44:86:3f:64:ca:f1:
                    32:60:58:2a:36:ee:47:c6:af:c3:27:86:8e:0c:a9:
                    e4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:97:46:9E:F7:5A:88:2C:EC:05:EC:C3:D1:74:A3:0E:8A:30:B6:1E
            X509v3 Authority Key Identifier:
                keyid:37:FE:03:60:BF:70:C2:BB:2E:6A:D3:D3:4F:0D:94:2B:07:6F:AA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1/323830343a353037383a3a2f33322d313238203d3e20323638333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5078::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:e3:a1:fb:9e:92:90:58:00:0f:fc:b4:7c:5a:00:82:85:c8:
         46:76:ba:cf:0d:d5:f0:b4:e7:be:17:99:a6:d9:7e:89:20:e4:
         f9:1b:21:cf:53:2c:57:f1:e0:ec:77:d3:11:c5:53:46:3c:26:
         72:52:65:45:a3:47:85:c4:d4:65:b6:79:63:22:c4:72:35:f1:
         07:fe:25:2d:26:77:c9:b2:7e:dd:3d:02:d7:3e:76:7b:a5:51:
         b6:24:0b:b3:f3:f2:c2:ae:d3:5d:79:0f:a2:0a:a6:80:55:75:
         24:f9:5a:a9:7b:9c:da:ee:4d:ab:69:89:bb:76:f5:e2:80:93:
         f2:e0:f5:84:87:90:6f:94:f9:b7:bd:3b:e7:79:67:a8:8a:93:
         63:f0:e3:a7:b3:ce:4a:a6:e5:f8:9f:5d:72:e9:9b:1f:56:9b:
         1a:2e:d6:eb:14:fb:2d:61:d9:9b:ca:37:37:2c:f4:87:da:7f:
         b8:e3:fd:bb:cf:58:aa:23:4c:8b:8e:c5:b1:8f:4e:c1:bc:e4:
         f4:6e:e3:01:ad:d5:68:8a:94:56:c0:f5:f8:de:e8:65:2d:9f:
         d7:e5:41:e0:86:23:df:d7:a5:db:b8:28:de:62:cb:53:c7:73:
         f1:46:0c:9f:48:d0:af:ef:1e:b2:67:4d:9d:07:c3:b9:49:14:
         29:14:24:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:54:28 2026 by rpki-client