Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/323830343a343931343a3a2f33322d3438203d3e20323637313633.roa
File:                     323830343a343931343a3a2f33322d3438203d3e20323637313633.roa (raw, json)
Hash identifier:          dc9QhdmiDWH2gpMfh3pjslnADEk+/MGYgBOx0qmRy1U=
Subject key identifier:   2C:2C:8D:AE:18:9D:F3:05:AB:63:A3:F0:60:30:25:17:A3:C8:72:45
Certificate issuer:       /CN=2ED5E473D72A6D301514B818C3D2A94A5E387474
Certificate serial:       7D0A96BE5C2827F4BE75DA50FB18CB4150860B48
Authority key identifier: 2E:D5:E4:73:D7:2A:6D:30:15:14:B8:18:C3:D2:A9:4A:5E:38:74:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/323830343a343931343a3a2f33322d3438203d3e20323637313633.roa
Signing time:             Thu 05 Feb 2026 20:05:43 +0000
ROA not before:           Thu 05 Feb 2026 20:00:43 +0000
ROA not after:            Thu 04 Feb 2027 20:05:43 +0000
asID:                     267163
IP address blocks:        2804:4914::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.crl
                          rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0a:96:be:5c:28:27:f4:be:75:da:50:fb:18:cb:41:50:86:0b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED5E473D72A6D301514B818C3D2A94A5E387474
        Validity
            Not Before: Feb  5 20:00:43 2026 GMT
            Not After : Feb  4 20:05:43 2027 GMT
        Subject: CN=2C2C8DAE189DF305AB63A3F060302517A3C87245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5f:28:ee:9a:4e:79:78:6a:59:67:65:d1:95:
                    4c:2a:2c:96:7f:a6:95:a6:85:d3:e0:e3:ca:f8:2f:
                    0a:64:f0:97:46:42:2d:ce:f0:bd:19:98:dc:25:29:
                    12:c1:17:22:08:ed:27:40:65:17:57:b4:cb:8a:db:
                    cf:01:a1:a4:95:63:72:d8:44:7f:8f:ef:7a:42:80:
                    e9:e3:22:c1:b2:99:2d:64:9b:02:8e:de:58:24:87:
                    74:3e:e9:f6:2b:97:40:1a:a7:d8:16:7b:84:de:90:
                    20:23:8a:d4:03:c1:a1:5e:ac:44:bf:d3:9f:e4:dc:
                    41:ba:da:a6:51:e7:a5:ed:9f:82:7a:8c:04:ce:e8:
                    25:89:5f:c8:15:eb:f0:00:94:43:71:62:25:92:b5:
                    ef:a6:16:bd:8a:89:57:75:63:52:e5:53:3a:42:8a:
                    ec:38:de:54:43:c2:7b:1b:98:ff:ec:89:2f:0a:be:
                    e9:2a:3c:fd:0d:5c:1e:24:72:5e:4b:3f:89:fa:6b:
                    3b:60:9c:46:3b:4c:ee:39:8f:c6:19:35:9c:96:e7:
                    ce:64:be:93:0a:2e:26:da:da:25:06:12:24:e1:ad:
                    95:fe:fe:be:49:1c:8c:72:a6:50:e4:6a:bd:56:1b:
                    c1:55:70:dd:4b:52:a3:a9:fa:ee:67:04:3b:93:13:
                    15:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2C:8D:AE:18:9D:F3:05:AB:63:A3:F0:60:30:25:17:A3:C8:72:45
            X509v3 Authority Key Identifier:
                keyid:2E:D5:E4:73:D7:2A:6D:30:15:14:B8:18:C3:D2:A9:4A:5E:38:74:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/323830343a343931343a3a2f33322d3438203d3e20323637313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4914::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:d7:b7:c3:37:92:02:d7:7c:27:48:0d:38:6d:1f:71:b7:fa:
         5e:e5:b3:1a:c7:35:d7:cd:7c:1e:7d:4a:c0:b8:29:77:37:71:
         75:c4:f5:54:62:af:04:1f:d1:70:5c:ba:9b:dc:30:0c:bf:61:
         77:6c:a0:14:0c:e3:09:30:a8:77:eb:b2:f7:0b:a0:c3:e0:03:
         f8:82:24:fe:e3:2d:19:a6:99:80:28:70:b4:3c:45:bb:5c:50:
         b0:2b:52:38:90:45:5f:52:3d:83:01:59:ef:81:78:20:a7:ed:
         df:6a:94:f6:c6:2d:0a:89:93:36:d0:0b:e4:8f:b9:e7:45:a5:
         99:f5:86:48:12:cf:2a:0b:f4:d0:df:02:82:d7:8d:60:dc:ea:
         14:e5:03:f0:5e:83:fb:c5:5c:e3:07:ae:ca:4e:44:49:f2:cf:
         15:ae:45:05:36:b5:b8:18:7f:a0:82:7f:ce:c5:8f:a0:b3:4b:
         eb:ba:2c:91:d0:09:e6:96:02:dc:5c:35:2c:a7:2d:24:65:cf:
         30:d7:a8:be:7a:64:a2:3d:b7:54:7e:e0:d7:37:3f:df:d9:45:
         02:43:16:dd:31:bf:83:7c:1e:d6:b1:69:fb:49:9f:6f:72:7d:
         aa:be:b3:3b:30:b6:d0:d6:72:d7:71:11:98:84:33:85:f7:99:
         e1:72:8a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:56:27 2026 by rpki-client