Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/323830343a336236633a3a2f33322d3334203d3e20323636313438.roa
File:                     323830343a336236633a3a2f33322d3334203d3e20323636313438.roa (raw, json)
Hash identifier:          VLm8hXvfiCtoOXj4Ihpne2m4CEaYEgVnExo61oJDy08=
Subject key identifier:   97:8E:48:51:7D:01:67:5F:8A:62:A4:67:67:75:E1:BE:9C:7A:02:6A
Certificate issuer:       /CN=8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D
Certificate serial:       0DD24874316048F1F6A650CB3B783DAA5752E692
Authority key identifier: 8C:2E:92:E0:BA:D0:2E:89:BA:E6:DB:B5:B2:3B:67:4A:2D:57:7A:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/323830343a336236633a3a2f33322d3334203d3e20323636313438.roa
Signing time:             Thu 05 Feb 2026 08:16:59 +0000
ROA not before:           Thu 05 Feb 2026 08:11:59 +0000
ROA not after:            Thu 04 Feb 2027 08:16:59 +0000
asID:                     266148
IP address blocks:        2804:3b6c::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.crl
                          rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d2:48:74:31:60:48:f1:f6:a6:50:cb:3b:78:3d:aa:57:52:e6:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D
        Validity
            Not Before: Feb  5 08:11:59 2026 GMT
            Not After : Feb  4 08:16:59 2027 GMT
        Subject: CN=978E48517D01675F8A62A4676775E1BE9C7A026A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fb:fc:a6:96:6d:50:68:8c:6f:81:2d:1d:10:
                    bb:29:c7:36:6a:88:ae:14:49:72:f5:48:da:1b:02:
                    8e:cc:cd:4d:ca:f7:d7:62:49:f7:b7:24:fb:3f:1c:
                    a3:92:12:71:5f:09:5a:71:ba:05:91:49:6f:5a:e2:
                    c8:43:c3:8b:6a:00:5c:a6:11:de:8e:c9:0a:fc:bb:
                    e4:46:eb:e6:18:1f:ca:38:cd:5d:5b:b1:8c:3b:eb:
                    be:c9:6c:1a:e5:84:e3:d6:fc:a5:27:01:ce:c4:6d:
                    1d:22:91:f5:87:54:9d:68:1f:78:08:bd:b4:49:56:
                    bc:05:4d:bc:db:f4:a2:42:3a:ff:b9:24:cf:a6:52:
                    ac:e1:6b:2a:f7:ed:a6:02:f4:40:1e:20:15:13:92:
                    f9:95:a6:eb:30:40:6c:16:d3:63:3c:c0:69:3d:a6:
                    9e:02:8e:e8:75:3b:51:cb:e0:77:d9:9c:d6:85:9f:
                    38:f8:4f:37:e4:0b:03:7b:6d:e9:18:17:fe:7e:5c:
                    5e:96:5f:df:c6:c3:17:4c:9a:07:91:bc:3b:4a:d6:
                    86:09:98:85:39:49:ed:f0:17:05:cc:fb:1b:d5:bf:
                    48:45:b8:04:80:10:5a:35:eb:b0:e2:35:d2:66:de:
                    81:dc:af:c7:d6:26:4c:ec:be:0a:df:0a:53:50:57:
                    2f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8E:48:51:7D:01:67:5F:8A:62:A4:67:67:75:E1:BE:9C:7A:02:6A
            X509v3 Authority Key Identifier:
                keyid:8C:2E:92:E0:BA:D0:2E:89:BA:E6:DB:B5:B2:3B:67:4A:2D:57:7A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/323830343a336236633a3a2f33322d3334203d3e20323636313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:89:5d:b6:02:20:3c:2d:3e:03:65:c0:c2:fd:38:c0:dc:86:
         06:aa:e6:6c:a7:99:6e:c6:23:cf:f0:cf:3c:da:51:b4:94:89:
         d9:59:67:b7:98:76:9f:23:d2:9c:90:44:46:7b:25:a1:fe:cd:
         c5:10:dc:68:89:0d:8c:77:aa:2a:6f:32:d9:97:b1:77:54:ae:
         a5:b1:5d:3a:d7:b2:59:6e:3e:6c:b1:f3:32:5b:f4:6b:1c:db:
         f2:e2:f3:b0:81:d7:4e:25:df:b3:fc:ad:de:6d:02:13:e7:3c:
         31:b6:54:24:bd:7c:aa:40:55:1a:06:87:57:bb:8b:e0:a8:df:
         82:aa:6a:00:8f:8b:64:1a:8e:6a:17:5c:02:c4:8d:ba:ef:8c:
         39:cc:a1:1b:dc:a3:4b:21:57:65:3f:70:4f:b7:7e:bb:ca:4c:
         0f:8c:ed:b3:30:76:69:d5:c6:22:ba:42:28:90:d0:d3:85:04:
         ba:25:e9:9c:7b:73:57:85:45:42:82:7b:67:e8:ec:fe:cd:45:
         6c:f9:6d:c4:c3:25:82:f7:ac:91:bf:cc:5a:87:e2:86:25:84:
         7c:ab:d3:16:57:10:f7:8f:52:e6:21:d2:8a:51:8d:a7:e7:aa:
         5c:9b:ec:f3:72:18:c6:73:d2:75:f1:7a:8a:80:63:db:3b:d5:
         a5:fa:8a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:07:42 2026 by rpki-client