Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/323830343a363938343a3a2f33342d3334203d3e20323730323735.roa
File:                     323830343a363938343a3a2f33342d3334203d3e20323730323735.roa (raw, json)
Hash identifier:          +y/2nfJBzLRn6r1lZI7TkE9vmkFGvsqyoLCJSu1yF90=
Subject key identifier:   C9:DE:66:8E:F1:7A:61:D6:D5:D3:4D:D7:72:7A:A4:EF:0E:4D:33:08
Certificate issuer:       /CN=1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6
Certificate serial:       2F5AACB5C96C3942C42040B9AA5B6806D1023D64
Authority key identifier: 1A:50:5F:A7:6D:FA:4D:23:0C:9E:04:A9:1C:C5:9D:7C:F8:1D:72:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/323830343a363938343a3a2f33342d3334203d3e20323730323735.roa
Signing time:             Thu 05 Feb 2026 07:00:33 +0000
ROA not before:           Thu 05 Feb 2026 06:55:33 +0000
ROA not after:            Thu 04 Feb 2027 07:00:33 +0000
asID:                     270275
IP address blocks:        2804:6984::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.crl
                          rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:5a:ac:b5:c9:6c:39:42:c4:20:40:b9:aa:5b:68:06:d1:02:3d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6
        Validity
            Not Before: Feb  5 06:55:33 2026 GMT
            Not After : Feb  4 07:00:33 2027 GMT
        Subject: CN=C9DE668EF17A61D6D5D34DD7727AA4EF0E4D3308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8c:28:f0:13:dc:89:26:84:d7:3b:34:25:4e:
                    e6:44:cf:eb:ca:4b:74:98:ac:df:33:f1:3f:16:3f:
                    ff:2e:bc:39:42:02:ae:b2:74:3b:f6:41:79:38:a3:
                    29:96:ca:64:5a:5c:09:da:30:85:08:31:ad:c5:ae:
                    28:fb:b0:34:ea:eb:84:e8:07:94:17:12:9d:06:dc:
                    c3:62:53:26:8b:d3:60:10:74:ae:32:b7:84:a4:0e:
                    40:4e:72:74:38:3d:ea:ba:5e:01:53:f7:3c:94:68:
                    54:01:3d:7b:f0:87:ba:c6:c2:70:df:71:26:7d:40:
                    8d:bc:30:76:0b:d3:ef:46:cc:92:88:f5:65:30:a4:
                    2d:ce:aa:f7:55:68:b9:21:13:6b:cf:6a:be:7f:64:
                    f7:24:ce:85:ac:9e:6c:00:3d:19:4a:9b:06:64:c1:
                    d1:87:ac:72:aa:71:74:f8:ea:f6:79:64:7a:0f:2c:
                    95:ce:d6:44:69:76:1a:9d:8e:6d:4b:e7:fc:ec:c7:
                    9c:d7:f0:63:4e:4b:02:5b:e3:33:56:8a:b0:3d:35:
                    24:d0:4f:cf:d2:83:20:37:93:38:a3:37:3e:0e:6c:
                    b0:b4:cd:9d:06:b4:8b:73:29:be:0c:e7:6c:42:82:
                    a3:e3:44:b1:b2:df:1c:86:52:0a:b7:c8:e7:48:04:
                    09:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:DE:66:8E:F1:7A:61:D6:D5:D3:4D:D7:72:7A:A4:EF:0E:4D:33:08
            X509v3 Authority Key Identifier:
                keyid:1A:50:5F:A7:6D:FA:4D:23:0C:9E:04:A9:1C:C5:9D:7C:F8:1D:72:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/323830343a363938343a3a2f33342d3334203d3e20323730323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6984::/34

    Signature Algorithm: sha256WithRSAEncryption
         55:48:7d:1b:a3:5d:4b:f9:01:23:20:e6:69:aa:b7:9b:f2:c1:
         67:dd:82:91:6b:cd:4f:e1:e2:5f:b9:0e:36:20:8a:32:27:df:
         3d:02:a7:a5:6a:b8:c1:6a:64:62:9c:9f:40:52:43:12:54:6a:
         0a:41:f0:ed:ae:cd:c8:3b:07:4e:c2:58:27:24:3a:fb:b1:e4:
         79:ec:38:70:c5:7e:55:56:68:61:cc:e9:ef:34:43:f3:d9:c8:
         68:88:11:36:4a:ac:ef:90:f7:cd:08:82:f2:a1:2a:ec:72:59:
         9f:0d:e6:c7:ba:9b:64:ab:2b:96:48:8b:c0:ac:40:67:2f:29:
         15:c5:ba:19:f9:01:9b:d5:78:81:9f:aa:6f:63:0c:cb:d5:f8:
         06:7c:94:14:b6:ad:e0:b4:45:d1:7f:a8:7a:67:79:68:df:b3:
         ef:9b:7a:94:79:9c:9a:33:a6:15:05:84:d7:9f:39:37:f6:1a:
         c3:92:3b:32:de:53:52:b4:56:4b:3e:12:8e:f7:b6:3b:35:a5:
         c2:b7:f8:86:31:78:03:a2:ab:32:57:2b:1f:ae:26:b1:90:29:
         9a:75:cd:ef:c6:0c:3a:be:e0:86:66:52:b9:3b:1a:f5:53:dd:
         78:99:a3:bb:1f:76:05:ea:58:14:bd:1b:aa:1d:69:c5:7c:ad:
         f4:b1:a8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:23:03 2026 by rpki-client