Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a6135303a3a2f33322d3438203d3e203238333439.roa
File:                     323830343a6135303a3a2f33322d3438203d3e203238333439.roa (raw, json)
Hash identifier:          J9/OZiAdQhQinA93nPVH7/JxUwyJrMDY5oWBAIoPN9E=
Subject key identifier:   FE:7B:14:14:BE:CE:8C:12:5F:A1:85:CD:4D:05:EC:10:12:B4:12:7C
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       66268B2D5B08E65AC4E3D294E71C9C0777672F58
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a6135303a3a2f33322d3438203d3e203238333439.roa
Signing time:             Mon 12 Jan 2026 15:22:13 +0000
ROA not before:           Mon 12 Jan 2026 15:17:13 +0000
ROA not after:            Mon 11 Jan 2027 15:22:13 +0000
asID:                     28349
IP address blocks:        2804:a50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:26:8b:2d:5b:08:e6:5a:c4:e3:d2:94:e7:1c:9c:07:77:67:2f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Jan 12 15:17:13 2026 GMT
            Not After : Jan 11 15:22:13 2027 GMT
        Subject: CN=FE7B1414BECE8C125FA185CD4D05EC1012B4127C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b6:51:2e:5a:bd:94:33:eb:68:93:c1:06:5b:
                    6f:3b:cc:a5:d7:c0:ff:b8:cd:9f:90:03:e4:45:7d:
                    19:81:c0:bd:08:ca:2f:f8:15:29:74:f9:c7:d2:ec:
                    2b:67:d1:61:32:c0:79:95:86:dd:c5:b2:10:b3:24:
                    cc:f3:35:d5:32:9d:8f:53:9b:81:4e:d3:d2:d7:26:
                    72:55:da:7b:61:9d:02:d5:d3:c8:cd:da:07:59:c9:
                    a1:d8:ac:08:4b:a5:68:f8:dc:ac:75:bf:ca:7a:55:
                    81:3c:85:d6:ea:02:dc:28:0b:e4:ba:be:8e:95:0e:
                    f6:1d:34:b0:e9:3f:97:40:83:a2:59:33:b2:fa:06:
                    bd:89:6b:e2:e1:5a:3c:35:60:58:56:5b:29:4e:1d:
                    52:eb:e5:6b:43:dd:f5:5c:51:f1:d6:c7:05:14:0f:
                    85:4e:c0:32:10:8d:71:d1:f1:01:31:09:c7:75:cd:
                    2e:65:5f:a6:3c:8e:81:5b:2e:18:94:97:4a:61:03:
                    50:04:de:65:40:29:ac:65:58:f2:93:76:04:c2:a9:
                    06:6c:6c:09:14:5d:a0:15:ef:71:d2:12:f6:94:b5:
                    1c:ac:e2:d6:c3:55:c2:ee:29:ef:7a:61:fc:a0:80:
                    bb:22:2f:d5:47:b7:8c:c8:03:c2:49:ec:05:13:28:
                    b2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7B:14:14:BE:CE:8C:12:5F:A1:85:CD:4D:05:EC:10:12:B4:12:7C
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a6135303a3a2f33322d3438203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a50::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:06:db:42:88:ae:82:e8:f1:f5:26:09:4a:69:50:d5:2d:d4:
         18:ab:67:f4:ee:b3:dc:28:d2:e1:71:df:98:01:79:52:a3:86:
         33:cb:e7:21:c2:cc:93:e7:c8:5a:c0:8f:67:b0:6f:17:51:dc:
         58:9f:2d:48:df:29:ef:4a:8e:9a:d7:ee:30:d9:5e:d6:df:cb:
         f3:bc:46:e7:e9:43:01:11:c2:a9:92:5b:01:ee:73:82:41:6f:
         34:eb:03:a0:ed:19:71:38:11:49:1a:55:91:fe:86:7b:0e:2d:
         a1:e8:f6:83:b6:88:b3:89:ae:bd:97:d2:7b:1d:db:9b:88:95:
         f4:b1:9f:3b:07:85:82:9c:5f:74:e4:b8:60:ea:7b:f7:b3:b4:
         be:63:94:9a:63:92:7e:15:14:67:91:f1:f0:34:36:89:7e:d9:
         25:89:60:bf:ad:55:51:a3:0e:9e:77:b2:bb:35:bd:61:7c:4e:
         f5:15:f1:1d:9d:68:35:c3:b3:b6:eb:ee:1b:2b:85:07:14:32:
         35:5c:6f:8d:69:96:4a:a0:79:04:92:c2:0d:0c:63:ac:4b:2b:
         96:d7:db:78:df:6f:fc:ba:42:92:35:d3:f9:0c:a1:c0:27:40:
         a5:c5:24:ca:4d:43:d1:47:c9:5c:a2:a1:13:0c:cf:fb:38:8a:
         b8:8c:6e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 13:00:32 2026 by rpki-client