Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/323830343a356664633a3a2f33322d3332203d3e20323639313238.roa
File:                     323830343a356664633a3a2f33322d3332203d3e20323639313238.roa (raw, json)
Hash identifier:          x973QcKWMa2kKFVJgixdxY4Yy1ivykJ4K2KrBW9FCmg=
Subject key identifier:   47:16:22:A6:8A:3B:F9:55:93:CC:E7:C2:E6:34:8D:2D:6E:07:83:03
Certificate issuer:       /CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
Certificate serial:       1FF8E5725C2DF28C6998208C55BE0294D04AD85B
Authority key identifier: F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/323830343a356664633a3a2f33322d3332203d3e20323639313238.roa
Signing time:             Thu 05 Feb 2026 10:00:21 +0000
ROA not before:           Thu 05 Feb 2026 09:55:21 +0000
ROA not after:            Thu 04 Feb 2027 10:00:21 +0000
asID:                     269128
IP address blocks:        2804:5fdc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl
                          rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 17:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f8:e5:72:5c:2d:f2:8c:69:98:20:8c:55:be:02:94:d0:4a:d8:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
        Validity
            Not Before: Feb  5 09:55:21 2026 GMT
            Not After : Feb  4 10:00:21 2027 GMT
        Subject: CN=471622A68A3BF95593CCE7C2E6348D2D6E078303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ae:cc:e3:28:d4:f3:88:f1:41:ff:14:4c:ae:
                    d4:b9:28:52:a5:55:d2:fb:3e:2a:55:c6:3e:8e:6c:
                    0e:4a:a1:6f:5e:65:1d:24:93:2a:b4:c2:e9:d3:64:
                    cf:f7:4f:a8:dc:d0:7d:7b:c6:28:e8:d6:46:a6:ec:
                    8c:b2:b4:11:4a:c5:05:53:68:71:71:73:c4:fd:4d:
                    7d:2a:f6:c0:9b:ff:43:8b:10:85:0f:0d:7c:59:a5:
                    2b:35:4b:d6:0b:6f:a6:95:9c:2c:d7:1a:29:ee:15:
                    4a:4b:b5:eb:46:de:7d:84:bb:c5:e7:43:25:d6:82:
                    d0:39:7f:5e:98:91:36:4e:68:18:b3:11:3c:a5:64:
                    46:07:68:7d:d1:2b:c1:cf:b1:42:ea:0f:75:ce:13:
                    44:1b:2f:62:7e:7c:e1:27:04:46:26:05:b7:6f:d6:
                    9d:95:21:a9:17:1c:66:68:a7:d5:fc:37:69:c0:77:
                    8d:aa:11:79:a2:60:29:73:f2:31:29:24:2b:ac:72:
                    03:f4:6c:08:d8:88:24:1a:f1:59:4c:1c:a6:b6:ee:
                    24:c1:cd:df:fb:0c:92:6a:79:9f:d8:e3:45:67:3d:
                    63:3b:12:0c:5a:5e:81:59:14:ac:04:fe:c1:b1:a0:
                    5c:20:ce:da:ae:13:ad:a1:5f:a0:d4:ff:d8:22:81:
                    ea:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:16:22:A6:8A:3B:F9:55:93:CC:E7:C2:E6:34:8D:2D:6E:07:83:03
            X509v3 Authority Key Identifier:
                keyid:F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/323830343a356664633a3a2f33322d3332203d3e20323639313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:54:7c:8e:f8:9e:ed:47:8b:b1:ad:82:1f:21:90:00:be:04:
         73:57:fe:84:5b:fc:85:b4:18:9e:82:cc:d3:50:cd:0d:4e:a8:
         5e:7f:a3:8e:e3:98:6e:cb:2d:03:b9:4d:f5:32:56:48:41:e3:
         f7:68:d2:1d:43:c3:72:84:aa:77:87:1e:bc:aa:c0:e4:87:df:
         f6:d4:6d:42:cf:c1:2a:33:59:e9:b1:d8:08:39:a8:b0:f5:e6:
         8a:08:a0:33:34:42:b9:86:42:5b:2a:24:18:01:bd:6a:66:88:
         9f:b8:7f:77:86:85:e4:98:a3:ec:2f:aa:4c:bd:46:f9:bd:44:
         82:ee:e4:34:bd:36:61:36:bd:84:f1:85:a6:88:13:76:06:78:
         d8:04:08:52:63:b7:21:74:70:79:3e:2d:c9:0e:16:78:3a:dc:
         2c:a0:f4:82:43:ff:ed:64:c1:c5:ed:21:5f:95:bf:6b:05:d0:
         c6:46:3e:af:32:e5:45:8f:db:ae:c9:ea:54:5f:62:d4:da:fc:
         86:ce:ad:26:11:09:3c:92:d3:77:ef:6e:24:fd:25:43:18:cf:
         f7:bb:58:e2:a9:52:b2:59:3c:93:1b:e0:c6:bd:0f:20:7b:bd:
         ff:94:8b:77:fa:fa:30:af:c9:d4:c4:46:d9:88:81:38:61:f3:
         0c:2c:55:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:33 2026 by rpki-client