Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/323830343a366137343a383030303a3a2f33332d3438203d3e20323730333337.roa
File:                     323830343a366137343a383030303a3a2f33332d3438203d3e20323730333337.roa (raw, json)
Hash identifier:          ERe3MSguhcZrZz4GMQ9r6CjagVvEJ8JikGwPVvbtsVU=
Subject key identifier:   D3:87:E2:CE:AB:E5:75:70:D3:8C:BA:24:E1:F5:E3:31:79:A0:C6:28
Certificate issuer:       /CN=102E8D201FEFBD18DA17FA1622858BB27784D51F
Certificate serial:       34426145406574E9A8BD7C0297C94EA364848714
Authority key identifier: 10:2E:8D:20:1F:EF:BD:18:DA:17:FA:16:22:85:8B:B2:77:84:D5:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/102E8D201FEFBD18DA17FA1622858BB27784D51F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/323830343a366137343a383030303a3a2f33332d3438203d3e20323730333337.roa
Signing time:             Thu 05 Feb 2026 15:48:06 +0000
ROA not before:           Thu 05 Feb 2026 15:43:06 +0000
ROA not after:            Thu 04 Feb 2027 15:48:06 +0000
asID:                     270337
IP address blocks:        2804:6a74:8000::/33 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/102E8D201FEFBD18DA17FA1622858BB27784D51F.crl
                          rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/102E8D201FEFBD18DA17FA1622858BB27784D51F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/102E8D201FEFBD18DA17FA1622858BB27784D51F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:42:61:45:40:65:74:e9:a8:bd:7c:02:97:c9:4e:a3:64:84:87:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102E8D201FEFBD18DA17FA1622858BB27784D51F
        Validity
            Not Before: Feb  5 15:43:06 2026 GMT
            Not After : Feb  4 15:48:06 2027 GMT
        Subject: CN=D387E2CEABE57570D38CBA24E1F5E33179A0C628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:1e:f2:0b:46:bc:7e:70:bc:e9:c2:77:c5:
                    97:1d:19:33:ea:b5:db:76:16:84:54:f8:ae:2c:4b:
                    a6:25:44:24:7a:63:7f:a5:29:1b:55:5b:95:55:b5:
                    a6:f7:62:cc:c1:69:7f:55:39:b2:99:33:7c:f0:ec:
                    23:d9:4f:38:17:ca:2d:86:08:04:44:87:23:77:9b:
                    3b:22:2d:65:da:8e:2d:b6:54:c8:e4:81:f2:c1:f2:
                    7f:4d:e4:35:f0:a2:a4:be:50:9d:0f:ab:cb:41:bc:
                    06:2a:f2:a9:55:33:f3:c6:d6:b4:9b:e9:88:7f:73:
                    ad:e1:4a:58:35:f0:ab:bb:ce:e8:9a:ac:13:4a:e1:
                    17:58:60:a1:46:76:7d:9c:08:f2:1e:68:5e:eb:0d:
                    bb:f3:0d:40:5b:10:ae:99:9a:8d:c8:48:e4:c3:e1:
                    ed:ed:0d:df:16:cc:15:82:cd:66:21:8d:98:05:48:
                    49:41:b8:d8:5a:de:01:93:26:b0:4b:bf:73:c4:f1:
                    72:5d:6e:fa:74:24:71:77:1e:8d:da:c2:78:51:65:
                    93:96:7e:bd:2d:4a:4b:1c:8a:e2:1a:1f:1b:d2:d6:
                    e3:06:be:1f:4f:32:fb:40:69:bd:0d:eb:8a:d2:40:
                    02:e0:67:25:10:d1:c5:cc:4a:4e:e7:73:2a:e3:e5:
                    05:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:87:E2:CE:AB:E5:75:70:D3:8C:BA:24:E1:F5:E3:31:79:A0:C6:28
            X509v3 Authority Key Identifier:
                keyid:10:2E:8D:20:1F:EF:BD:18:DA:17:FA:16:22:85:8B:B2:77:84:D5:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/102E8D201FEFBD18DA17FA1622858BB27784D51F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/102E8D201FEFBD18DA17FA1622858BB27784D51F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/323830343a366137343a383030303a3a2f33332d3438203d3e20323730333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a74:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         27:b4:13:29:34:72:04:36:26:ed:48:79:65:c0:d8:cb:4a:09:
         e3:71:55:e0:13:37:7f:ba:00:3a:b8:59:74:73:0e:b2:eb:4f:
         5e:ab:cf:2c:12:1d:f2:21:11:1e:0e:5c:07:e4:57:b2:06:33:
         8e:00:de:91:b5:cc:d3:ac:bf:34:49:c7:71:c5:ef:72:fe:ea:
         33:c5:14:6a:7d:9a:68:50:36:62:6e:8e:2e:77:83:a2:71:3e:
         76:2e:95:c0:77:e3:e7:4a:32:1b:c8:4f:a5:f8:91:65:37:45:
         d3:0b:6c:4b:00:9e:42:43:c7:32:70:ad:ee:f4:d5:3b:48:89:
         5d:60:fe:8f:bf:6a:e7:6e:bc:24:35:0b:f2:3f:73:15:09:52:
         57:97:5d:5b:50:91:c0:16:ea:7f:a7:50:a8:75:d1:be:08:b4:
         dc:25:ba:31:ac:ce:93:21:e4:25:b0:b7:49:56:95:cb:31:27:
         4c:f1:db:d2:17:53:de:18:64:de:5d:ce:fd:8e:cb:b5:29:13:
         e1:4c:62:25:f1:bc:75:b1:4b:57:1a:fd:93:df:bc:cb:28:f5:
         ad:e3:8a:bb:01:f5:9f:af:4d:56:d9:06:4b:56:35:92:44:84:
         d3:7c:f1:a9:e3:87:ff:d2:3d:2b:5a:da:89:c8:92:e2:f3:28:
         f7:bb:6a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:13:13 2026 by rpki-client