Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a316136383a3130303a3a2f34302d3430203d3e20323637343834.roa
File:                     323830343a316136383a3130303a3a2f34302d3430203d3e20323637343834.roa (raw, json)
Hash identifier:          PjRnBsXccs0aByDBNy6YQR65BsfleUK10vh4nrZiiC4=
Subject key identifier:   B9:95:AD:55:75:2D:9F:FF:D9:65:45:33:E8:AF:95:75:D3:A4:21:32
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       3653FA3FDFDF8CC0E89A8415D3D5313F43E80C1E
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a316136383a3130303a3a2f34302d3430203d3e20323637343834.roa
Signing time:             Mon 12 Jan 2026 15:22:16 +0000
ROA not before:           Mon 12 Jan 2026 15:17:16 +0000
ROA not after:            Mon 11 Jan 2027 15:22:16 +0000
asID:                     267484
IP address blocks:        2804:1a68:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:53:fa:3f:df:df:8c:c0:e8:9a:84:15:d3:d5:31:3f:43:e8:0c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Jan 12 15:17:16 2026 GMT
            Not After : Jan 11 15:22:16 2027 GMT
        Subject: CN=B995AD55752D9FFFD9654533E8AF9575D3A42132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fe:81:8e:0d:dc:14:95:48:c4:08:cf:67:8d:
                    6a:b8:47:25:3c:98:98:d2:4d:4a:48:09:7f:79:84:
                    b9:3f:8f:e2:32:7c:1e:a1:e8:5d:61:5a:2d:ff:07:
                    c9:9a:ed:ec:d4:0f:8c:b3:00:60:9f:e1:e5:1e:6a:
                    21:4b:64:9e:97:6d:cd:42:d7:f1:58:a0:3c:11:99:
                    ed:53:8c:51:c1:46:3f:27:12:d2:d4:04:24:94:43:
                    75:20:56:6c:5c:b1:33:bb:18:d8:0f:c8:ed:c1:b8:
                    7d:dd:4a:2b:7b:15:2a:50:59:93:8d:d9:f7:4b:39:
                    b7:83:86:91:1f:a4:ab:b7:d8:a4:a2:80:2f:06:8f:
                    c2:23:47:35:b9:eb:f3:8a:ce:26:96:39:bb:39:b3:
                    30:7d:6c:b0:75:de:97:16:42:60:57:89:d8:2a:05:
                    49:eb:66:fa:e6:50:93:c1:40:36:0b:b9:3a:37:55:
                    9a:4b:b1:8b:1c:2b:72:fd:2b:6c:55:a7:e7:26:5a:
                    9f:0b:85:a3:e5:e3:ee:a2:1d:ce:35:48:bc:fb:4a:
                    bc:f4:a7:9e:40:c2:d3:6b:55:69:8c:90:99:87:e6:
                    fd:9b:6f:d6:61:47:0c:68:f4:9a:78:6b:00:54:2e:
                    07:1c:d6:46:fa:de:ad:62:8f:f6:7a:b8:3d:58:9c:
                    16:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:95:AD:55:75:2D:9F:FF:D9:65:45:33:E8:AF:95:75:D3:A4:21:32
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a316136383a3130303a3a2f34302d3430203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a68:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5a:28:10:08:44:9b:e0:fb:8d:89:63:4a:55:50:13:fc:9e:ff:
         70:06:50:5a:a2:ec:49:1f:ef:0e:c3:ce:8f:96:f6:0e:cf:4c:
         3d:34:a1:60:f0:aa:bf:fa:81:42:b5:87:09:3c:a0:6d:52:92:
         75:c9:c4:29:8b:d6:7c:f8:8e:f5:90:13:e0:a6:96:59:df:66:
         55:8a:84:e0:60:bf:a4:3c:e2:57:ac:b9:26:13:96:e5:77:25:
         2c:de:fd:b5:3b:17:91:66:3f:96:ea:ff:b7:50:ab:ad:fa:06:
         65:36:41:24:0f:2c:80:17:27:5c:55:fe:3a:6a:e1:61:30:99:
         03:0b:64:ef:1f:ad:d5:b7:b5:f4:75:71:c4:d9:c7:00:7e:30:
         f8:58:ce:11:05:f8:65:23:65:49:61:5f:e6:06:16:ef:37:84:
         b0:90:a3:58:36:0b:fa:43:71:96:6c:83:26:0a:ad:b9:de:04:
         90:0c:5d:8f:32:f2:5c:10:ec:28:f0:94:fc:f1:d8:33:05:6d:
         65:bc:17:95:95:62:40:49:4a:48:e1:1a:21:3d:c4:3b:58:2e:
         6d:39:25:d1:28:16:71:06:48:1a:1d:13:fc:bf:6d:32:64:47:
         8e:94:49:c1:ac:47:fd:f0:9d:24:82:6d:d9:45:96:20:a7:60:
         43:a9:ac:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:56 2026 by rpki-client