Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/323830343a333131383a3a2f33322d3438203d3e20323634393932.roa
File:                     323830343a333131383a3a2f33322d3438203d3e20323634393932.roa (raw, json)
Hash identifier:          iZmC1t/fjeUUNQnWbsucToAMSgInG3Ark2xpwjFVDnA=
Subject key identifier:   98:5F:E3:1E:1E:82:66:2C:DD:D0:87:C8:80:C2:D0:16:93:59:6A:34
Certificate issuer:       /CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F
Certificate serial:       2FC8C5E596F816168CA05D61F7590FF8A0BD9B3F
Authority key identifier: DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/323830343a333131383a3a2f33322d3438203d3e20323634393932.roa
Signing time:             Thu 05 Feb 2026 04:01:06 +0000
ROA not before:           Thu 05 Feb 2026 03:56:06 +0000
ROA not after:            Thu 04 Feb 2027 04:01:06 +0000
asID:                     264992
IP address blocks:        2804:3118::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl
                          rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c8:c5:e5:96:f8:16:16:8c:a0:5d:61:f7:59:0f:f8:a0:bd:9b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F
        Validity
            Not Before: Feb  5 03:56:06 2026 GMT
            Not After : Feb  4 04:01:06 2027 GMT
        Subject: CN=985FE31E1E82662CDDD087C880C2D01693596A34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:04:af:ac:78:cc:71:64:f6:8f:28:9c:15:9b:
                    8d:e9:a0:90:30:55:d5:e6:0b:99:ed:b2:5f:72:8d:
                    04:45:9b:27:0b:dd:c7:ed:17:50:ba:7d:de:a7:17:
                    15:52:d1:24:25:ac:2e:f6:dd:e5:89:ff:9b:ac:5d:
                    85:13:27:f3:e4:4f:22:92:03:e0:1f:b7:08:c4:22:
                    b6:d2:da:fe:b6:c7:5c:8b:8c:75:19:01:0e:9d:c1:
                    c7:98:bd:d5:56:ce:ed:26:b7:4f:8f:99:29:9e:ba:
                    a7:a8:7d:4f:52:52:66:66:79:13:40:d1:56:e8:e1:
                    c3:67:8a:0d:e4:2e:32:13:6d:0d:5d:00:1a:88:b4:
                    a1:58:0c:14:65:53:87:26:90:23:48:ea:f7:26:d3:
                    54:46:63:27:85:f0:1c:c6:6f:e2:5d:b7:0c:a3:28:
                    fc:5f:7b:18:fd:13:2d:35:49:83:62:c5:3b:be:5c:
                    bf:d5:a3:17:6f:60:59:c5:ec:8d:b4:1a:d6:87:db:
                    66:df:45:55:3c:e5:80:8f:9d:31:eb:b5:95:68:9e:
                    a1:c2:0f:c3:5d:80:e3:fb:49:c0:df:65:79:cf:8d:
                    ac:79:76:82:b7:19:1c:ab:e6:2a:d5:0e:fb:9d:2b:
                    5a:a1:fe:d2:0c:b0:18:a3:3a:92:6a:d9:94:3a:7f:
                    b9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5F:E3:1E:1E:82:66:2C:DD:D0:87:C8:80:C2:D0:16:93:59:6A:34
            X509v3 Authority Key Identifier:
                keyid:DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/323830343a333131383a3a2f33322d3438203d3e20323634393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3118::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:b9:ef:45:01:9d:b7:37:7e:18:b1:3e:8f:62:3e:cf:a9:f4:
         95:d4:c0:74:07:fe:c0:ce:69:de:1b:f4:6f:73:9b:4a:eb:b7:
         08:62:b7:8c:27:57:d1:33:79:37:62:06:d1:1b:d7:13:20:5b:
         5a:98:37:71:6b:07:6d:eb:8b:83:50:35:8a:6c:83:b6:2b:eb:
         94:d1:d0:45:bd:81:fe:51:c9:15:23:27:9c:00:8b:4b:af:69:
         e4:2e:48:eb:f0:bb:a8:db:b3:5c:bf:a0:8c:66:59:f9:ca:fd:
         25:88:3c:97:70:79:f9:73:c8:90:57:f3:a5:5e:56:a4:04:04:
         bb:8d:3d:20:90:be:3b:53:5d:d2:ee:3a:06:12:14:6b:79:c1:
         f8:77:42:0d:e7:83:ef:76:8b:47:16:e2:ec:8e:b4:90:1c:47:
         f9:19:79:5e:e3:6e:7c:c9:b0:58:d4:4c:ec:17:26:46:25:c1:
         b5:2a:15:3a:8e:ce:df:42:dd:3b:23:40:e7:45:61:0c:9d:4c:
         8f:73:f9:b4:7a:52:f1:a1:2d:81:6f:88:55:af:0b:2c:05:3b:
         b9:eb:5f:b2:b2:15:da:31:da:93:dc:0d:9d:4d:cf:62:03:36:
         2b:28:19:78:ed:de:8a:49:63:f5:25:49:53:6d:51:50:eb:0f:
         71:58:0a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:21:01 2026 by rpki-client