Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/323830343a323637383a3a2f33322d3335203d3e20323634333432.roa
File:                     323830343a323637383a3a2f33322d3335203d3e20323634333432.roa (raw, json)
Hash identifier:          7bXztEkkjutzCuDzMjrpjB7HukkkBAKAC2suGoA2guQ=
Subject key identifier:   7D:41:6C:A4:D9:6B:3F:43:A1:38:BD:60:E8:9D:E0:1F:7A:3F:B0:4D
Certificate issuer:       /CN=AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD
Certificate serial:       0D5BE210189F0857C4CC07083F6650108647A0CE
Authority key identifier: AC:9D:ED:B6:6C:13:A6:8A:FC:D2:B7:A3:76:D9:E8:14:C9:F2:0B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/323830343a323637383a3a2f33322d3335203d3e20323634333432.roa
Signing time:             Wed 04 Feb 2026 20:00:10 +0000
ROA not before:           Wed 04 Feb 2026 19:55:10 +0000
ROA not after:            Wed 03 Feb 2027 20:00:10 +0000
asID:                     264342
IP address blocks:        2804:2678::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl
                          rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:5b:e2:10:18:9f:08:57:c4:cc:07:08:3f:66:50:10:86:47:a0:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD
        Validity
            Not Before: Feb  4 19:55:10 2026 GMT
            Not After : Feb  3 20:00:10 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:40:a6:b9:4d:26:01:ca:20:d2:92:4a:5b:d0:
                    b5:87:7c:12:e7:93:c3:ce:0d:73:ed:66:f9:f8:5c:
                    45:7c:17:69:0b:41:13:cb:c3:5f:d5:c3:b9:10:6b:
                    da:ef:aa:51:ff:a6:67:55:19:13:93:4f:d3:79:3a:
                    a9:ea:d8:29:0e:22:a7:85:db:9d:b6:96:26:c7:48:
                    ca:1c:2e:2a:25:e7:55:6d:67:24:33:9d:cb:ea:2e:
                    7f:36:c4:87:94:67:53:ea:39:ea:2e:cf:10:54:4a:
                    2c:2b:3b:2f:ea:af:8f:b4:75:bb:af:4d:1c:20:e5:
                    af:e2:4d:d9:44:9e:ef:6c:d6:ed:15:22:6b:77:37:
                    36:3e:66:9c:02:fa:96:02:0f:8a:a6:6b:b0:26:4e:
                    89:2d:40:6a:60:6d:be:54:e1:3a:14:01:a8:3d:20:
                    d9:a5:de:63:ae:f0:e4:b7:f1:5e:c3:8a:26:5d:fe:
                    eb:a9:5a:5c:22:af:da:a1:4f:d7:99:54:ad:81:d1:
                    1b:68:e5:3d:9e:49:2d:cb:f6:f1:20:96:a9:e9:e4:
                    77:c1:a2:ab:42:d1:82:02:30:f7:13:68:28:a1:1b:
                    72:32:f2:d2:57:83:f7:5c:18:7a:43:84:ec:5a:18:
                    db:84:91:bc:72:f5:91:5b:4e:a3:4d:c9:a1:43:fd:
                    c4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:41:6C:A4:D9:6B:3F:43:A1:38:BD:60:E8:9D:E0:1F:7A:3F:B0:4D
            X509v3 Authority Key Identifier:
                keyid:AC:9D:ED:B6:6C:13:A6:8A:FC:D2:B7:A3:76:D9:E8:14:C9:F2:0B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/323830343a323637383a3a2f33322d3335203d3e20323634333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2678::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:30:3c:1a:8f:c6:af:c1:ac:6c:f4:3b:b4:94:2a:78:2c:a9:
         f1:b1:df:86:d5:d9:b7:02:e9:0f:2b:2e:23:66:6c:20:61:49:
         37:34:96:2a:7e:13:53:56:5f:b1:1f:72:53:cc:61:06:90:ec:
         9b:63:54:94:a7:0a:1e:98:87:df:6f:f8:60:9c:b0:5a:55:93:
         2a:51:42:91:65:d7:db:77:58:15:94:5f:9e:e2:80:d1:b0:7a:
         c2:6c:27:fd:64:93:fb:05:22:46:f6:e7:6f:35:39:ea:6c:ee:
         61:18:ac:1e:7e:1f:08:7e:e9:1e:d6:cd:cb:c4:b0:d6:98:58:
         bc:31:88:52:5d:34:eb:ef:ca:b6:27:c8:39:fc:8d:55:6d:3b:
         fd:08:3e:e5:ed:a4:ad:29:f1:e3:63:28:e1:aa:0e:c9:e7:39:
         b2:3a:ad:9a:71:32:b1:db:fd:af:ed:c3:21:48:97:9b:e6:92:
         92:52:83:30:15:c9:39:68:85:6e:b7:1e:95:52:93:fb:6e:ee:
         72:21:0c:b9:24:7d:76:d9:70:a1:fa:cc:28:a2:0a:c3:de:4e:
         be:90:72:37:db:79:97:d3:8d:ea:95:d0:c5:d0:83:c5:dd:3a:
         91:1e:62:8c:5d:02:f7:f2:3e:1f:9f:a8:47:82:ac:ac:60:63:
         e9:a3:2e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:29:05 2026 by rpki-client