Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/323830343a356664633a323030303a3a2f33362d3336203d3e20323639313238.roa
File:                     323830343a356664633a323030303a3a2f33362d3336203d3e20323639313238.roa (raw, json)
Hash identifier:          s8r72wWlzGe6mae/DSF7TLWlJoar8P48OvwGqSY8Vmg=
Subject key identifier:   0D:69:CF:2C:49:18:16:60:90:45:4C:BD:14:85:EB:D5:28:05:4B:8E
Certificate issuer:       /CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
Certificate serial:       7344759310FF9E265431C5A4FB8F6B33256E8006
Authority key identifier: F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/323830343a356664633a323030303a3a2f33362d3336203d3e20323639313238.roa
Signing time:             Thu 05 Feb 2026 10:00:21 +0000
ROA not before:           Thu 05 Feb 2026 09:55:21 +0000
ROA not after:            Thu 04 Feb 2027 10:00:21 +0000
asID:                     269128
IP address blocks:        2804:5fdc:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl
                          rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 17:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:44:75:93:10:ff:9e:26:54:31:c5:a4:fb:8f:6b:33:25:6e:80:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
        Validity
            Not Before: Feb  5 09:55:21 2026 GMT
            Not After : Feb  4 10:00:21 2027 GMT
        Subject: CN=0D69CF2C4918166090454CBD1485EBD528054B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c4:70:5e:88:c7:1e:cd:a2:ca:12:32:44:c8:
                    aa:4f:16:01:dd:0e:88:e8:fd:b6:e0:5e:ac:0f:b7:
                    95:60:81:3b:52:03:34:23:92:44:66:c9:08:c1:80:
                    c8:d7:2e:da:f5:be:9b:00:e1:e2:79:ab:35:ef:d6:
                    f6:15:fc:71:48:ea:17:af:c1:9f:d3:08:e6:63:86:
                    d9:85:b8:89:b3:30:e4:ea:f3:b1:88:42:72:9e:01:
                    11:71:79:fb:8a:ae:f5:c8:39:1e:21:9a:df:10:06:
                    e5:e5:f0:20:df:af:0e:e4:58:5a:5d:7e:21:b4:34:
                    e4:71:b3:4f:21:40:cd:c3:30:34:6e:00:98:63:47:
                    f9:1a:19:bd:a3:b6:0e:77:3b:98:72:1a:90:d1:55:
                    e3:46:b7:7a:3a:da:97:de:97:8a:13:56:f5:56:75:
                    a6:06:9e:1f:69:90:ca:63:ac:25:39:81:c7:53:61:
                    f8:90:81:97:8a:8f:ff:65:d0:3b:a1:29:c6:ca:43:
                    4e:cd:ed:6b:2c:e0:58:a3:e2:e9:fb:7a:aa:1c:48:
                    f9:a0:de:d1:ff:b5:33:5f:10:61:11:e9:fe:f9:fc:
                    ce:e9:1d:05:94:b4:ec:1e:6f:78:b3:ee:9e:f6:64:
                    ec:8f:0b:06:e1:14:19:18:60:77:df:84:48:d7:21:
                    d0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:69:CF:2C:49:18:16:60:90:45:4C:BD:14:85:EB:D5:28:05:4B:8E
            X509v3 Authority Key Identifier:
                keyid:F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/323830343a356664633a323030303a3a2f33362d3336203d3e20323639313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fdc:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         53:f1:ba:9a:82:50:d6:e0:1d:6b:a8:13:eb:b9:4a:23:41:55:
         38:d9:fd:c3:a5:0b:17:04:bc:79:67:31:8e:25:62:a1:b5:cd:
         26:87:f8:89:9c:d8:64:04:1a:3d:14:0b:0d:d6:04:a2:4c:dc:
         ed:61:50:34:fe:3b:d1:1d:a4:e6:f5:80:77:4d:8c:1b:50:21:
         5e:84:e5:4d:e5:0b:0c:41:e7:11:7c:b4:7c:03:cb:06:a9:e2:
         33:8c:14:45:13:47:15:44:01:c3:80:fc:14:3c:20:e1:a1:b8:
         67:f2:26:f4:4c:a7:6a:dd:cb:17:43:ed:99:f5:8b:52:c0:2d:
         1a:b3:8c:6c:2b:0a:76:07:f0:79:b9:3f:d6:fa:bd:83:e7:8a:
         3c:bc:98:67:be:9d:ab:db:fd:aa:9a:82:0a:da:d7:49:9b:60:
         9f:6a:29:70:4b:90:1f:f4:5d:87:78:7e:6c:68:95:b8:24:42:
         9e:e6:ed:61:26:57:2c:b0:3c:20:c0:9e:bc:7d:63:0e:5c:f8:
         6d:ae:c9:56:24:4c:61:bf:af:7c:55:26:84:90:13:37:10:90:
         51:c8:be:2c:da:5d:4f:b7:fa:8a:d4:82:94:08:ec:6a:59:56:
         4b:29:a1:c9:c5:3f:a5:89:88:d8:df:b7:d9:33:29:a2:ab:6a:
         fc:14:3c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:53 2026 by rpki-client