Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a383030303a3a2f34302d3430203d3e20323632363837.roa
File:                     323830343a333835633a383030303a3a2f34302d3430203d3e20323632363837.roa (raw, json)
Hash identifier:          IKdIJiGs5Nu/o1ZI6oZ83MWjfAv3TCfvaA4VVMURpkk=
Subject key identifier:   7E:B7:CE:F0:71:12:4F:5B:A4:D1:6D:69:9A:A6:E0:64:29:CC:C8:74
Certificate issuer:       /CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
Certificate serial:       422F4CF4BB70C8C6F40B4C57BD7A966D62AC8C23
Authority key identifier: D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a383030303a3a2f34302d3430203d3e20323632363837.roa
Signing time:             Fri 30 Jan 2026 14:01:44 +0000
ROA not before:           Fri 30 Jan 2026 13:56:44 +0000
ROA not after:            Fri 29 Jan 2027 14:01:44 +0000
asID:                     262687
IP address blocks:        2804:385c:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2f:4c:f4:bb:70:c8:c6:f4:0b:4c:57:bd:7a:96:6d:62:ac:8c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
        Validity
            Not Before: Jan 30 13:56:44 2026 GMT
            Not After : Jan 29 14:01:44 2027 GMT
        Subject: CN=7EB7CEF071124F5BA4D16D699AA6E06429CCC874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:db:aa:73:3e:f9:65:9a:1e:8a:52:4c:cf:eb:
                    b3:15:51:33:e6:46:1b:a4:e9:bb:d6:01:41:6e:a2:
                    e3:a7:99:c1:53:23:05:1f:65:69:23:4e:be:75:e6:
                    20:28:3a:88:bb:74:9b:67:d1:d9:fb:84:d7:72:86:
                    4c:9e:47:e4:6d:68:ba:a4:49:af:90:0f:9d:27:14:
                    af:5a:d1:c7:92:28:bb:af:46:2e:d0:81:63:15:f8:
                    cc:da:9b:63:ad:d4:02:02:5f:72:a6:bb:fa:cf:10:
                    2b:75:17:7a:8e:56:2f:b4:35:ef:ba:bf:eb:e0:46:
                    5d:7c:f6:45:25:4f:18:ab:41:7c:ac:c5:2b:17:b2:
                    b0:ae:92:63:86:5e:bf:50:3b:19:f8:20:e4:72:0e:
                    3a:c7:e3:f5:e6:16:a2:68:85:3a:25:d6:2c:b7:f7:
                    cc:0c:57:09:ab:88:80:67:53:3d:bc:8a:2f:77:8b:
                    d0:37:84:48:16:8e:eb:cd:bf:dc:8d:13:fa:1a:e6:
                    8a:bb:5f:5a:b9:17:81:f1:76:ad:8d:f5:e5:98:94:
                    ab:d4:87:62:e7:c9:bf:0a:97:6b:0e:27:ff:46:58:
                    cd:fc:5d:49:e2:10:78:a6:ff:62:a6:9a:7d:df:27:
                    77:2b:b6:c4:6a:71:67:87:76:d8:23:ec:5e:64:ae:
                    df:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B7:CE:F0:71:12:4F:5B:A4:D1:6D:69:9A:A6:E0:64:29:CC:C8:74
            X509v3 Authority Key Identifier:
                keyid:D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a383030303a3a2f34302d3430203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ac:c8:f6:d1:87:ea:19:b0:c2:ca:30:fc:be:1d:9c:70:cd:42:
         30:1f:78:19:1c:8c:f4:57:86:dc:38:a3:27:6c:10:73:1c:7e:
         65:2c:5e:22:a6:67:0b:0a:ec:40:3f:da:8d:89:b7:86:62:7d:
         2a:3d:dc:ee:bf:08:8b:36:bf:9c:77:14:36:e9:bd:28:5a:f0:
         83:16:b0:cc:52:8d:c7:8c:03:54:4f:61:68:bd:8b:dc:18:7f:
         4d:ac:88:68:76:11:36:9a:57:40:15:f2:57:d5:11:6e:93:ab:
         26:94:c5:85:72:f5:59:fa:dc:81:2e:8a:ab:04:32:8a:91:23:
         6a:23:db:0c:2a:af:af:dd:e7:9d:27:68:96:50:e6:7d:60:cc:
         9a:42:57:c4:8d:23:28:5b:2d:fd:6e:2b:6b:e2:4a:7f:0b:d1:
         2a:e3:35:67:5d:7f:4a:ce:6e:9f:1a:4b:d6:81:b9:71:fb:91:
         d5:9f:3a:32:9c:3f:a1:81:75:3b:86:2a:e0:12:6b:f4:7d:b9:
         4a:5b:0e:c1:b3:4e:86:d5:da:7e:bf:ee:d3:f8:73:c1:d9:ba:
         4f:24:35:a7:bc:95:ff:29:f9:96:a1:4e:76:a9:7d:38:10:64:
         c1:e8:b2:37:76:08:57:16:e3:76:4c:47:fb:35:49:91:16:1a:
         0e:5f:87:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:38:29 2026 by rpki-client