Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a313130303a3a2f34302d3430203d3e20323638303638.roa
File:                     323830343a353737633a313130303a3a2f34302d3430203d3e20323638303638.roa (raw, json)
Hash identifier:          gmmg4vI97dIIn8mul3ZwY6gXtKDdFo8qrmePxEHf8m4=
Subject key identifier:   BF:9E:09:24:28:F6:9B:D5:8F:D0:78:F4:F4:84:06:ED:21:A5:F9:C2
Certificate issuer:       /CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
Certificate serial:       1D07AB21818F089BE6B6D3BF6D32D283D26435F1
Authority key identifier: 21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a313130303a3a2f34302d3430203d3e20323638303638.roa
Signing time:             Thu 05 Feb 2026 06:29:21 +0000
ROA not before:           Thu 05 Feb 2026 06:24:21 +0000
ROA not after:            Thu 04 Feb 2027 06:29:21 +0000
asID:                     268068
IP address blocks:        2804:577c:1100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl
                          rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:39:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:07:ab:21:81:8f:08:9b:e6:b6:d3:bf:6d:32:d2:83:d2:64:35:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
        Validity
            Not Before: Feb  5 06:24:21 2026 GMT
            Not After : Feb  4 06:29:21 2027 GMT
        Subject: CN=BF9E092428F69BD58FD078F4F48406ED21A5F9C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d7:29:b2:60:eb:38:d8:f6:61:0f:aa:d3:65:
                    4b:ff:c0:5f:e1:a7:9f:ff:d8:53:5d:60:e1:3e:6b:
                    c1:34:32:23:23:3c:85:35:77:14:5c:7e:06:c8:3b:
                    1f:0b:76:11:a9:47:dd:48:f4:a7:58:82:5c:68:7c:
                    f8:77:5f:9a:c7:4c:f2:45:4d:4c:68:81:12:9f:a5:
                    ca:e5:42:1c:fb:aa:9f:58:1c:8d:05:30:b2:b3:3f:
                    a4:3a:0d:b2:c3:5b:e6:91:6f:fc:71:c7:19:35:21:
                    4d:aa:91:fe:6b:78:04:d0:c2:22:4b:f6:5b:dc:5f:
                    d0:75:01:23:13:c9:b3:a9:b3:20:7b:46:a4:98:ab:
                    a3:42:5d:fb:df:0b:f6:7c:b8:57:1d:79:5e:5c:4d:
                    67:cf:8b:db:d7:e0:aa:a1:4e:c6:39:80:fc:1b:e9:
                    af:7c:9d:7d:49:c3:81:98:f2:88:fa:d4:d2:cc:56:
                    39:3f:f4:c9:12:a7:be:c7:44:2a:2c:cd:0f:25:d4:
                    4e:4c:b3:d8:56:f4:7c:03:ff:20:85:c3:a1:a8:5f:
                    9f:cb:34:5c:fc:6a:73:20:6b:a1:7e:a3:e1:cf:b0:
                    07:6b:65:ff:3a:fd:2d:ae:94:d3:03:51:e8:8d:d0:
                    35:63:75:3a:c4:0c:27:4b:8d:47:76:3c:7c:05:bb:
                    0a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9E:09:24:28:F6:9B:D5:8F:D0:78:F4:F4:84:06:ED:21:A5:F9:C2
            X509v3 Authority Key Identifier:
                keyid:21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a313130303a3a2f34302d3430203d3e20323638303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:577c:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         07:12:f8:a4:2d:60:fc:87:56:44:95:92:98:77:ce:ba:c4:5f:
         ba:96:54:92:bf:5d:6b:19:0a:60:ad:82:24:ea:d3:e9:48:8b:
         51:75:d9:2b:eb:44:02:64:09:3e:e8:16:93:0d:96:aa:cc:28:
         c6:f1:28:d4:c5:1e:b3:24:52:ad:73:54:cf:bd:1a:93:38:3f:
         2b:25:bc:69:48:81:51:fe:a8:91:2d:c1:d5:93:2f:bc:a9:7b:
         8f:4f:48:63:7d:25:36:f7:33:88:28:ea:fa:02:d3:b0:09:97:
         61:98:f5:c1:59:a8:29:d6:ef:81:ff:4c:3e:1c:cb:56:9f:d3:
         a9:81:74:df:a7:37:09:b7:c3:39:ef:16:ec:5a:8f:23:bd:5c:
         59:c5:de:7f:76:b1:95:82:46:17:10:b1:87:13:9a:23:51:00:
         11:ce:2e:a7:da:97:6a:c2:a6:94:72:3f:9f:ba:d2:ee:4a:20:
         b6:67:16:91:7c:72:d1:dd:4b:45:a5:b9:a3:01:9b:1a:35:bf:
         06:f8:5d:e5:bc:d2:03:60:bb:c2:d7:a7:e8:81:e6:21:df:e6:
         0d:0c:32:64:8b:94:f1:e8:ce:ef:05:f1:57:52:0d:20:a1:68:
         2c:f5:90:2b:5c:14:0a:b7:ce:e0:86:de:00:ad:1e:ec:14:33:
         df:f3:ab:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:57:26 2026 by rpki-client