Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/323830343a323130383a3a2f33322d313238203d3e20323634353238.roa
File:                     323830343a323130383a3a2f33322d313238203d3e20323634353238.roa (raw, json)
Hash identifier:          aeUP4R8sWTKQL+6MYbc6037fDWXSnqmNfQDGvTms0no=
Subject key identifier:   43:82:BF:E2:99:0B:44:75:21:2C:A9:BE:84:48:44:5F:54:26:31:14
Certificate issuer:       /CN=2EE7830EC8B817A3DBD80AAF93266292D6118661
Certificate serial:       12CEB9601DD868B92B544B3BCEFBA8CA09D40FF3
Authority key identifier: 2E:E7:83:0E:C8:B8:17:A3:DB:D8:0A:AF:93:26:62:92:D6:11:86:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/323830343a323130383a3a2f33322d313238203d3e20323634353238.roa
Signing time:             Thu 05 Feb 2026 10:13:32 +0000
ROA not before:           Thu 05 Feb 2026 10:08:32 +0000
ROA not after:            Thu 04 Feb 2027 10:13:32 +0000
asID:                     264528
IP address blocks:        2804:2108::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.crl
                          rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ce:b9:60:1d:d8:68:b9:2b:54:4b:3b:ce:fb:a8:ca:09:d4:0f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EE7830EC8B817A3DBD80AAF93266292D6118661
        Validity
            Not Before: Feb  5 10:08:32 2026 GMT
            Not After : Feb  4 10:13:32 2027 GMT
        Subject: CN=4382BFE2990B4475212CA9BE8448445F54263114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:04:b3:34:d6:dc:3f:aa:df:8c:30:59:13:21:
                    6d:6f:0d:b2:29:e3:11:22:3b:be:df:fa:08:3a:e3:
                    17:80:df:94:61:30:0c:bc:27:0a:8b:48:b3:61:2b:
                    2c:75:36:d9:e6:8d:5d:ff:27:38:72:35:59:83:b2:
                    f2:85:8f:64:75:c2:9c:25:1b:d3:b7:8a:0e:4d:e1:
                    bb:5e:58:eb:2e:c0:f9:13:11:4a:d6:34:78:77:2b:
                    05:0d:ac:da:b4:7e:64:ee:ea:68:57:5b:2e:1e:25:
                    f7:21:c5:06:ec:e5:94:96:50:59:e5:3e:73:33:a4:
                    3d:4c:34:6b:a0:09:27:bf:6b:c2:09:4c:64:58:82:
                    48:b8:47:eb:25:c9:00:04:7b:54:03:b1:f0:d4:53:
                    4f:04:1b:2c:63:3d:8d:e9:f1:ae:16:59:eb:9d:ac:
                    99:08:bd:e5:7e:9c:fd:71:1e:6f:b8:ec:e2:94:ab:
                    23:62:86:5d:b1:77:b7:33:ff:b2:17:78:df:58:a8:
                    0a:b8:a6:ba:dc:0e:55:16:74:84:f7:fb:20:61:b7:
                    a6:8b:00:48:42:98:07:31:71:2f:48:e4:fb:51:9e:
                    a9:b3:a2:88:3d:e9:30:b5:17:12:cd:f7:cd:1c:51:
                    7b:b0:f5:01:4b:3c:bd:34:bd:94:69:ec:2a:6f:7a:
                    ac:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:82:BF:E2:99:0B:44:75:21:2C:A9:BE:84:48:44:5F:54:26:31:14
            X509v3 Authority Key Identifier:
                keyid:2E:E7:83:0E:C8:B8:17:A3:DB:D8:0A:AF:93:26:62:92:D6:11:86:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/323830343a323130383a3a2f33322d313238203d3e20323634353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2108::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:17:20:1a:b7:55:ea:ab:4f:87:d3:22:dc:2f:bd:04:cc:dc:
         35:59:fa:33:c5:d2:3d:9d:8a:68:d5:9f:20:50:29:53:2b:3e:
         00:88:45:c6:92:21:74:32:44:28:68:68:69:0b:48:d8:10:a8:
         ef:03:15:14:08:40:dc:d0:7e:d6:2c:21:5b:09:57:ff:18:67:
         1b:ca:1c:bd:4f:ef:15:74:3c:2e:e3:b6:e5:3d:90:82:d4:93:
         76:05:e2:b0:aa:23:58:34:1a:4d:38:f6:7c:35:85:c4:2b:01:
         03:8e:cc:fb:21:85:a7:44:c7:5f:2c:db:8b:ee:3e:3e:25:f7:
         29:36:4a:ae:a7:07:0f:8e:2b:7b:08:9c:f2:61:c7:46:c0:8b:
         61:ab:c9:d8:d7:d4:fe:be:10:8f:84:78:92:53:07:7b:b8:cc:
         04:e5:24:09:25:9e:c8:3d:e5:72:d3:ca:3b:0d:a1:ac:aa:63:
         29:37:0a:a6:2b:8c:5d:2d:e3:56:d0:40:b5:49:b4:33:5a:7b:
         8b:63:ec:0d:48:6d:92:f0:0d:ec:eb:59:3f:37:7e:0a:a8:64:
         e7:92:1f:be:52:c0:78:f9:e3:f1:25:7d:d0:52:36:8e:3d:50:
         bf:09:d9:26:2f:f9:5e:a9:ae:f2:30:4d:10:c1:ad:c5:38:71:
         4d:83:e1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:38 2026 by rpki-client