Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a313030303a3a2f33362d3336203d3e20323638303638.roa
File:                     323830343a353737633a313030303a3a2f33362d3336203d3e20323638303638.roa (raw, json)
Hash identifier:          JHaSP4YpI+VKgU5NqCt5aDuJMrfaCKEaeT/j6r3E+Bo=
Subject key identifier:   EB:95:5F:ED:C6:6A:C3:C1:98:93:F3:C9:BD:45:F2:03:C9:24:59:0D
Certificate issuer:       /CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
Certificate serial:       69E3DEB813CFFFB84EC92E9CE7396584130E42EE
Authority key identifier: 21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a313030303a3a2f33362d3336203d3e20323638303638.roa
Signing time:             Thu 05 Feb 2026 06:29:21 +0000
ROA not before:           Thu 05 Feb 2026 06:24:21 +0000
ROA not after:            Thu 04 Feb 2027 06:29:21 +0000
asID:                     268068
IP address blocks:        2804:577c:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl
                          rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:39:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e3:de:b8:13:cf:ff:b8:4e:c9:2e:9c:e7:39:65:84:13:0e:42:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
        Validity
            Not Before: Feb  5 06:24:21 2026 GMT
            Not After : Feb  4 06:29:21 2027 GMT
        Subject: CN=EB955FEDC66AC3C19893F3C9BD45F203C924590D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:76:5a:75:16:10:79:2e:62:b9:5c:f9:2f:18:
                    67:f1:2e:15:f9:61:af:2b:88:4d:08:7a:01:41:cd:
                    55:dd:e7:ae:bb:00:b7:74:43:5c:50:c1:32:0a:57:
                    06:48:3c:30:34:ce:1d:5a:f2:08:b8:d8:e6:d0:05:
                    1e:fc:f4:cf:4f:36:b8:12:05:e4:22:cb:c3:a0:da:
                    c5:c5:87:58:c0:1b:05:c8:13:fc:c6:75:2b:bb:7d:
                    cd:0c:41:37:84:8d:14:35:b3:1c:de:ab:f5:f5:94:
                    55:5d:95:da:fd:0c:a5:22:1f:bd:87:b5:08:6b:f2:
                    2a:44:66:1c:08:6c:d2:12:46:84:5e:6a:63:ae:63:
                    9f:71:d6:47:2c:d6:39:87:9a:bf:86:a9:5a:75:a8:
                    f4:fd:31:df:26:e3:a9:b6:f0:bd:7b:6a:79:cf:7d:
                    9d:3c:f1:af:b2:92:ab:10:d9:36:49:be:5d:93:20:
                    ce:d2:a8:aa:eb:43:c2:18:b5:11:fd:a7:03:9e:82:
                    d1:6c:32:81:0b:db:c4:8d:f7:6a:50:2d:46:52:b5:
                    90:0e:5a:f5:d7:6e:09:a6:c8:e2:7a:06:b4:52:9c:
                    f8:b0:f0:d7:92:52:b8:ac:cb:97:cf:32:9e:ff:40:
                    7b:00:a8:79:fa:c5:8c:99:1d:68:c8:88:7b:ea:0c:
                    4d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:95:5F:ED:C6:6A:C3:C1:98:93:F3:C9:BD:45:F2:03:C9:24:59:0D
            X509v3 Authority Key Identifier:
                keyid:21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a313030303a3a2f33362d3336203d3e20323638303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:577c:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         16:09:85:29:b5:e7:be:23:8f:bf:a3:bc:9b:bd:86:58:21:cf:
         15:05:70:00:b4:9a:6e:fa:33:aa:04:5e:d9:bc:d1:2a:59:66:
         a3:a4:53:69:b0:75:af:72:cf:db:64:60:a2:58:4b:c7:4d:8e:
         2b:e5:ba:ac:8e:8d:4d:47:97:06:a3:e5:2f:35:8a:3a:a4:34:
         f7:f3:b7:39:1e:43:e9:da:cf:43:6b:95:f1:a8:f5:e7:b3:71:
         af:2b:89:0f:f2:b9:63:4a:ec:be:c7:2b:90:c8:3f:13:52:eb:
         f9:71:46:0a:f8:18:51:35:83:1d:d3:df:01:4e:d9:d4:07:3d:
         12:f7:d5:e4:48:8b:5c:28:6b:5a:b0:67:f2:86:8b:0c:a0:a2:
         26:c4:7e:7b:69:67:b2:eb:a1:a7:13:31:46:d3:9a:3e:e7:46:
         d7:0e:41:02:a9:df:65:ce:ad:ce:49:13:5c:39:0e:63:88:ce:
         ef:1d:7c:fb:74:ca:6d:6c:4e:d2:9b:bb:62:b4:5c:e1:77:d0:
         3f:fe:2e:ed:bd:c1:7d:0d:d9:a6:34:27:64:6a:0e:fc:96:33:
         a0:6f:cf:af:e3:51:4b:79:5a:ac:82:15:89:91:9d:aa:f4:cf:
         6f:5a:bb:55:4e:9f:d1:07:d5:55:5f:5f:86:d2:57:73:72:01:
         e0:23:26:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:08:04 2026 by rpki-client