Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/323830343a363838633a633030303a3a2f34302d3430203d3e20323639373030.roa
File:                     323830343a363838633a633030303a3a2f34302d3430203d3e20323639373030.roa (raw, json)
Hash identifier:          zEzjL+jT7owCnQYTOWo1i49QNfzcf58l0LLzYZsJYFA=
Subject key identifier:   42:B0:22:9F:97:07:73:52:54:DF:C7:5D:53:F0:9B:79:EC:9B:14:ED
Certificate issuer:       /CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
Certificate serial:       193A273DCF02D94B99064F2D5B2C64944777858C
Authority key identifier: 83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/323830343a363838633a633030303a3a2f34302d3430203d3e20323639373030.roa
Signing time:             Wed 04 Feb 2026 19:00:01 +0000
ROA not before:           Wed 04 Feb 2026 18:55:01 +0000
ROA not after:            Wed 03 Feb 2027 19:00:01 +0000
asID:                     269700
IP address blocks:        2804:688c:c000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl
                          rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:3a:27:3d:cf:02:d9:4b:99:06:4f:2d:5b:2c:64:94:47:77:85:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
        Validity
            Not Before: Feb  4 18:55:01 2026 GMT
            Not After : Feb  3 19:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a5:4c:8a:1f:18:f3:d2:c9:85:08:b9:97:bd:
                    46:bc:70:1a:5d:68:66:89:2f:3f:a4:f4:01:94:9e:
                    48:d9:2d:c7:c6:1f:38:c3:ed:e7:64:7b:79:b5:7a:
                    86:36:75:6b:b2:79:76:b3:ff:47:a5:e0:3e:c7:f1:
                    9a:96:59:63:40:d2:10:9f:53:1d:44:60:d8:5e:85:
                    15:10:74:0c:97:64:23:7a:dc:97:1e:3e:17:e4:5e:
                    de:67:01:f4:5d:61:a2:d8:91:9b:a0:9b:79:d3:7d:
                    cf:bc:f9:f0:74:2d:46:f9:ca:5e:30:86:e9:99:24:
                    9b:22:e7:bf:be:08:90:ca:7c:72:bf:74:9f:8e:93:
                    cc:47:33:f7:d6:fe:3a:7a:e2:4b:01:e0:e0:02:52:
                    d0:d5:5e:ba:ca:73:10:15:a9:e0:ee:8d:56:ea:03:
                    e1:04:83:ee:2b:0a:ba:d9:b8:19:c4:cb:d0:5b:e9:
                    75:c4:2f:0a:bd:a6:a7:6a:79:2e:a2:8d:bf:8d:5e:
                    5b:9d:63:3a:3d:f4:d9:72:e6:52:b8:1c:0a:db:e6:
                    95:40:f4:d9:57:4e:85:76:97:5b:b8:6b:c9:43:ac:
                    64:3e:66:70:84:86:b0:42:26:f8:b6:41:af:da:34:
                    28:87:35:f6:b4:76:2a:37:61:9f:05:32:91:c7:3a:
                    20:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B0:22:9F:97:07:73:52:54:DF:C7:5D:53:F0:9B:79:EC:9B:14:ED
            X509v3 Authority Key Identifier:
                keyid:83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/323830343a363838633a633030303a3a2f34302d3430203d3e20323639373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:688c:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:4f:59:42:a7:38:27:de:48:82:96:d9:2c:5f:65:69:5f:5d:
         a6:31:cb:ee:d9:25:7d:d1:0f:6d:d9:e7:db:f3:8e:f6:9c:d3:
         2a:63:31:a4:6d:5a:82:30:05:a0:14:cc:19:2a:45:53:79:c2:
         db:61:a9:73:ec:ca:e0:7d:c1:98:e0:85:d6:4e:cd:3f:17:79:
         f0:f8:a8:91:ad:a9:ee:ba:00:0a:c1:9f:ed:b7:b6:18:4c:71:
         81:9a:80:23:d3:42:10:0e:57:55:3b:08:25:bd:a4:6d:5f:30:
         7b:4a:21:76:5f:f1:6f:f6:e4:c3:53:63:b5:60:25:d3:5f:df:
         f5:c8:4e:18:64:e5:de:27:b5:9e:45:74:15:00:02:dd:6c:52:
         4f:ee:43:3b:79:18:78:a5:a2:34:aa:39:f3:0a:81:79:7a:de:
         ed:6d:5b:c3:14:48:b7:8e:12:65:d0:59:fb:1f:9d:17:5a:f5:
         f2:68:ab:88:44:3f:05:20:14:b1:53:83:78:3e:ec:76:63:10:
         15:52:f0:a9:18:1d:54:de:e8:04:c6:bd:4f:4d:64:d4:aa:e1:
         35:75:49:ec:06:24:8b:21:46:9c:af:8c:74:ff:9c:75:01:11:
         b7:77:55:71:74:07:b7:30:c9:10:78:d9:75:56:76:f9:cd:f2:
         71:1b:d9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:21:03 2026 by rpki-client