Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa
File:                     323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa (raw, json)
Hash identifier:          pJVO5xkv+iYdzZJrpqx7nNNU4elmek2OY1V6JSqUvR4=
Subject key identifier:   34:3E:A9:12:55:48:8E:BC:D4:EA:58:49:16:01:47:4E:1D:C8:92:82
Certificate issuer:       /CN=F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4
Certificate serial:       01FA11C540B750902B8FFC792D4735E336236AD7
Authority key identifier: F5:FD:FF:F7:EB:44:AA:11:B6:41:9F:C8:3D:FF:9C:70:46:54:3E:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa
Signing time:             Thu 12 Feb 2026 16:28:46 +0000
ROA not before:           Thu 12 Feb 2026 16:23:46 +0000
ROA not after:            Thu 11 Feb 2027 16:28:46 +0000
asID:                     263995
IP address blocks:        2804:2910:8000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.crl
                          rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:fa:11:c5:40:b7:50:90:2b:8f:fc:79:2d:47:35:e3:36:23:6a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4
        Validity
            Not Before: Feb 12 16:23:46 2026 GMT
            Not After : Feb 11 16:28:46 2027 GMT
        Subject: CN=343EA91255488EBCD4EA58491601474E1DC89282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2b:74:62:91:3b:c1:c8:6f:e5:48:ac:b5:70:
                    97:62:e1:a3:fc:ae:4a:7d:61:33:3f:1d:ab:4f:a5:
                    e0:af:4e:e3:ad:c8:7f:0a:be:d9:bb:b6:4a:5e:0a:
                    8e:20:dc:b6:81:f8:1c:7d:6a:53:11:fa:ae:ae:a8:
                    8c:6e:1d:35:c6:6b:a0:6c:4d:ef:c0:bb:1c:c8:9a:
                    6f:70:de:39:92:57:de:75:4e:40:1d:dd:ce:e1:00:
                    f5:31:41:d0:bd:57:7f:a7:b7:42:ea:44:4e:1b:89:
                    1f:5d:f8:95:c9:7c:65:0b:b9:92:83:5d:8f:98:cb:
                    01:1b:ae:58:e6:c6:18:7d:76:60:1c:2b:5e:5d:bb:
                    b9:18:b6:16:9f:27:c2:8d:db:b8:b5:e5:67:4d:3d:
                    3f:69:ec:bd:d9:35:b1:92:ec:02:b0:18:54:9b:8f:
                    25:89:06:c4:58:40:d5:85:e5:31:e8:bc:52:a5:04:
                    f7:f2:f0:5f:f5:df:6d:14:77:88:d8:cc:b5:68:c0:
                    80:06:f4:c9:f5:e6:32:36:f1:75:7d:f3:a9:0f:56:
                    5f:0e:31:74:f2:69:b6:f9:68:9b:6b:63:65:b5:5a:
                    38:0d:8d:67:9f:44:4b:03:c3:bf:12:81:49:da:44:
                    97:b5:a9:a7:5b:cb:bd:07:d3:3c:21:cf:be:04:08:
                    cb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3E:A9:12:55:48:8E:BC:D4:EA:58:49:16:01:47:4E:1D:C8:92:82
            X509v3 Authority Key Identifier:
                keyid:F5:FD:FF:F7:EB:44:AA:11:B6:41:9F:C8:3D:FF:9C:70:46:54:3E:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2910:8000::/44

    Signature Algorithm: sha256WithRSAEncryption
         5d:a8:db:4c:a4:a0:7b:3a:9c:98:6d:39:5a:79:b5:98:9f:47:
         ea:d8:e4:c4:ef:86:e0:d1:50:61:e2:69:00:80:f5:6e:43:f0:
         64:cc:49:1e:64:91:9a:f0:0e:7a:12:e8:78:0e:21:d9:a1:5b:
         41:c9:46:9f:5f:8a:19:b2:ae:99:0d:5e:7c:f4:34:bf:60:f5:
         a6:3c:20:31:5b:f2:83:d5:5c:0c:55:ef:79:a7:81:f5:21:cc:
         e7:e8:3e:8e:59:97:17:a8:54:21:f3:b3:38:db:db:d6:db:c7:
         4d:1f:25:27:7f:4f:a5:14:6a:12:7e:66:93:0e:eb:e2:35:ce:
         17:6b:29:b8:27:a4:14:25:14:7f:71:b1:b1:e9:f6:13:1e:0b:
         14:30:f7:99:72:3b:32:a3:4c:85:53:57:ec:e3:06:87:41:8a:
         26:b4:c9:0f:27:a4:ac:8b:8c:52:4a:18:10:20:0e:6f:5f:90:
         7d:69:dc:35:18:a2:db:98:53:98:d9:0f:72:89:1a:97:bf:33:
         82:9a:d8:2c:1d:51:e5:4d:0c:54:d9:a9:b4:9f:b2:60:f6:91:
         44:ac:e9:e4:7c:e3:7a:05:f8:30:f4:72:06:58:35:3e:a2:b4:
         6b:cb:4b:1b:9f:c3:51:3d:ed:0b:41:a2:51:ea:31:90:04:92:
         46:3f:12:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:56:04 2026 by rpki-client