Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a666630303a3a2f34312d3431203d3e20323632363837.roa
File:                     323830343a333835633a666630303a3a2f34312d3431203d3e20323632363837.roa (raw, json)
Hash identifier:          Biadva+h6nFyuphXb9FIaPOIwrT6ro7+Uhj8Vl91D3Y=
Subject key identifier:   1E:19:0F:DC:A4:EE:EF:3C:A2:CB:16:A1:6C:7E:62:AA:D8:E3:54:5A
Certificate issuer:       /CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
Certificate serial:       336C28FE4B18492BB2EAA8DB202DA084FDAEE862
Authority key identifier: D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a666630303a3a2f34312d3431203d3e20323632363837.roa
Signing time:             Fri 30 Jan 2026 14:01:43 +0000
ROA not before:           Fri 30 Jan 2026 13:56:43 +0000
ROA not after:            Fri 29 Jan 2027 14:01:43 +0000
asID:                     262687
IP address blocks:        2804:385c:ff00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 18:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:6c:28:fe:4b:18:49:2b:b2:ea:a8:db:20:2d:a0:84:fd:ae:e8:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
        Validity
            Not Before: Jan 30 13:56:43 2026 GMT
            Not After : Jan 29 14:01:43 2027 GMT
        Subject: CN=1E190FDCA4EEEF3CA2CB16A16C7E62AAD8E3545A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9f:51:62:55:f5:20:ed:ae:c5:91:29:20:f6:
                    97:94:e1:e3:94:9f:d5:d9:05:72:95:39:c0:98:a5:
                    9a:f1:70:24:2e:be:70:24:b4:7d:a0:27:59:5e:f0:
                    4d:b2:51:4f:2c:1f:e0:24:c9:a0:cc:89:f7:b2:08:
                    c0:aa:14:ac:b5:0e:fb:3d:8a:35:8e:40:96:f8:bb:
                    d6:dd:ec:ba:de:39:d6:a8:ea:83:57:7b:42:46:06:
                    5e:b0:2b:fb:26:c2:0c:f4:fa:6b:59:10:2e:5e:ff:
                    61:6b:4a:74:1e:31:f7:f7:f8:ff:df:1e:f0:ec:c5:
                    33:99:01:66:15:a4:88:0d:5e:be:e8:d7:07:14:12:
                    65:b7:e1:88:98:bd:63:04:05:99:ba:12:29:31:81:
                    ff:fd:0b:96:34:a6:09:a6:ca:d4:fa:25:59:21:fc:
                    73:c7:d7:23:ed:db:98:c1:96:67:ed:24:6e:fb:e8:
                    6c:54:e1:5d:f8:94:a8:68:07:d4:e8:41:00:28:d2:
                    08:19:f1:43:d0:23:7f:0d:73:fc:34:ae:aa:93:e2:
                    79:3f:a3:2c:0f:83:5f:5b:5f:9a:c3:69:2a:8a:87:
                    44:81:90:ea:76:5f:86:e2:05:39:26:9a:99:fc:1a:
                    c2:57:6e:54:44:b3:c8:27:4d:93:fd:12:f0:cd:75:
                    6f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:19:0F:DC:A4:EE:EF:3C:A2:CB:16:A1:6C:7E:62:AA:D8:E3:54:5A
            X509v3 Authority Key Identifier:
                keyid:D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a666630303a3a2f34312d3431203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:ff00::/41

    Signature Algorithm: sha256WithRSAEncryption
         43:98:b6:be:61:bd:f4:61:af:c9:32:0b:9e:d3:09:cf:5f:89:
         eb:5b:06:9e:1f:fe:f0:e2:d1:bc:77:af:17:8a:4a:69:f2:96:
         74:b3:50:48:9a:26:7a:ba:67:cf:5d:da:5d:0f:74:46:71:d0:
         d6:59:22:42:2c:eb:40:22:a4:31:3e:75:34:5b:89:19:43:07:
         f6:a5:d9:5b:60:26:02:6e:12:50:ca:6f:6e:5c:14:75:1d:50:
         ab:74:64:78:11:2e:60:af:48:83:75:6f:16:ae:9c:03:e7:98:
         91:c8:5e:7c:cf:d4:62:c2:b6:d4:a4:d7:a6:fd:59:0f:02:f0:
         51:64:d0:ee:69:0a:63:ff:d7:11:8c:26:5c:d3:ba:0c:cd:d1:
         24:4f:76:92:dd:cd:27:e4:24:a5:96:40:55:0f:96:e2:d0:6f:
         ed:8b:ae:68:9c:e4:01:8c:aa:fe:d1:71:10:f2:a2:49:32:b0:
         d9:48:40:c8:ae:0c:d8:76:36:f6:cf:0f:57:76:e4:20:25:4c:
         36:b6:eb:83:a8:35:3d:44:88:52:3e:ef:da:8d:4b:c5:ca:5b:
         77:4e:9e:9f:0b:3b:4c:a2:bc:43:56:61:be:75:41:f7:35:4e:
         dd:76:7f:23:dc:44:98:f0:34:b9:b6:07:3f:03:62:73:97:8e:
         81:37:b8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:01:57 2026 by rpki-client