Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a613230303a3a2f34322d3432203d3e20323632363837.roa
File:                     323830343a333835633a613230303a3a2f34322d3432203d3e20323632363837.roa (raw, json)
Hash identifier:          xYXiReUUC6GTDM5k5aqTJe+AV5GFIVS4yRV7THGvd1k=
Subject key identifier:   DC:30:10:E0:F9:D6:06:9F:55:5B:52:58:79:F0:79:08:B5:D4:25:13
Certificate issuer:       /CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
Certificate serial:       4ED4BCF316FC799CE66F4A54A5935B242999660B
Authority key identifier: D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a613230303a3a2f34322d3432203d3e20323632363837.roa
Signing time:             Fri 30 Jan 2026 14:01:40 +0000
ROA not before:           Fri 30 Jan 2026 13:56:40 +0000
ROA not after:            Fri 29 Jan 2027 14:01:40 +0000
asID:                     262687
IP address blocks:        2804:385c:a200::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d4:bc:f3:16:fc:79:9c:e6:6f:4a:54:a5:93:5b:24:29:99:66:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
        Validity
            Not Before: Jan 30 13:56:40 2026 GMT
            Not After : Jan 29 14:01:40 2027 GMT
        Subject: CN=DC3010E0F9D6069F555B525879F07908B5D42513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d3:80:2c:fe:93:32:01:1d:1f:7d:6d:a5:75:
                    2f:19:04:3f:81:6d:4e:a4:59:44:a7:54:b9:d1:1a:
                    de:45:25:1f:0b:d6:5e:f5:c0:5e:5d:a4:a7:06:4c:
                    88:25:39:09:8c:73:86:7e:b9:8b:53:88:6c:b3:47:
                    95:ca:7c:d7:75:62:ea:be:7a:49:d1:1c:e3:cc:f1:
                    71:f7:df:07:45:b9:5b:2a:d4:72:c9:ff:3d:ee:85:
                    1a:9a:0c:27:68:f0:fd:79:5f:31:20:09:85:06:90:
                    8b:59:4b:fe:8c:a9:bc:66:f9:86:d0:35:b4:60:ce:
                    a4:1a:41:9c:16:e9:dd:2d:9d:68:47:4b:94:66:50:
                    ab:64:73:b1:49:4b:63:f9:cd:7c:8e:c9:5f:9c:31:
                    32:fb:80:db:af:05:ca:95:e3:0d:96:58:0b:d4:47:
                    e7:ac:b2:73:81:6b:13:45:7a:fa:6c:21:84:6f:e3:
                    fd:c4:32:4c:ea:49:8b:e9:16:e8:c4:81:b2:34:0d:
                    aa:4b:7c:91:2f:75:82:a6:8e:26:8a:f7:b9:94:1f:
                    73:16:30:ff:ba:a6:3c:da:9b:1b:f5:8c:96:33:32:
                    6f:a8:9c:34:0f:8f:20:54:fc:91:2c:6d:1f:70:68:
                    ba:dd:aa:f9:4d:de:49:67:17:0e:7b:73:6c:e7:fb:
                    2c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:30:10:E0:F9:D6:06:9F:55:5B:52:58:79:F0:79:08:B5:D4:25:13
            X509v3 Authority Key Identifier:
                keyid:D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a613230303a3a2f34322d3432203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:a200::/42

    Signature Algorithm: sha256WithRSAEncryption
         c6:58:5e:c2:55:80:a1:8c:59:69:ad:a9:db:27:ac:29:ce:e0:
         5c:38:e9:cf:56:00:17:7e:78:68:6b:0a:bb:6f:18:f6:f0:b0:
         57:c7:08:a5:25:47:21:4e:0c:c1:cf:93:b2:24:27:6f:02:43:
         de:40:2a:f4:7a:00:7a:cf:47:d3:ca:d5:31:00:6e:75:ba:48:
         cf:70:ca:69:23:61:b5:79:ef:1b:fd:c8:6b:08:cd:d0:25:ba:
         ce:61:75:69:40:f3:88:c1:5f:52:c0:90:84:36:b9:57:7f:e7:
         5c:f9:6b:eb:95:b5:fd:f9:3c:9b:fc:92:84:af:38:36:88:50:
         b2:75:67:57:0a:28:e9:dc:d3:03:ee:9e:23:24:f0:ca:55:48:
         40:41:a3:4b:2c:75:47:42:80:5c:f9:8b:9a:84:1a:9d:69:53:
         6e:3d:98:e8:62:a4:b3:52:5b:37:30:bf:38:ef:07:1d:5e:9b:
         9f:a1:9f:f1:d8:30:67:d3:69:a7:af:cb:f8:1c:da:57:71:36:
         07:02:99:7d:54:0b:64:de:c4:2f:89:8f:29:c8:59:7b:6f:5f:
         be:dc:67:35:b1:e4:94:1b:d0:31:92:1e:8f:ae:12:1d:d8:0f:
         a5:49:21:31:6f:98:e1:86:14:e4:33:e7:42:97:34:9f:f6:4c:
         d3:fa:d7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:12:25 2026 by rpki-client