Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/323830343a323262383a3a2f3332203d3e20323634313138.roa
File:                     323830343a323262383a3a2f3332203d3e20323634313138.roa (raw, json)
Hash identifier:          K1hHSS7LnwmmFe8eu9aGkC+sbIx+To//Z9JsfByIiNc=
Subject key identifier:   02:FD:F2:FF:05:76:4D:68:FB:56:F7:22:1E:31:63:EB:DB:0C:83:5B
Certificate issuer:       /CN=0B31CCC1E89F4389597737BE4B57373331925A2F
Certificate serial:       2F67A962A27D84B22B6F34FA42C5810D72AC80CA
Authority key identifier: 0B:31:CC:C1:E8:9F:43:89:59:77:37:BE:4B:57:37:33:31:92:5A:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/323830343a323262383a3a2f3332203d3e20323634313138.roa
Signing time:             Thu 05 Feb 2026 22:26:27 +0000
ROA not before:           Thu 05 Feb 2026 22:21:27 +0000
ROA not after:            Thu 04 Feb 2027 22:26:27 +0000
asID:                     264118
IP address blocks:        2804:22b8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.crl
                          rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 14:16:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:67:a9:62:a2:7d:84:b2:2b:6f:34:fa:42:c5:81:0d:72:ac:80:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B31CCC1E89F4389597737BE4B57373331925A2F
        Validity
            Not Before: Feb  5 22:21:27 2026 GMT
            Not After : Feb  4 22:26:27 2027 GMT
        Subject: CN=02FDF2FF05764D68FB56F7221E3163EBDB0C835B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5c:95:ce:f0:33:ed:f4:7f:cf:70:b6:51:dd:
                    cd:c8:db:fe:e9:ff:35:54:28:1f:55:f4:1f:ed:58:
                    bd:fd:5d:8f:aa:4c:10:3c:80:97:ab:e8:a3:db:ce:
                    40:27:f8:8b:e1:04:3e:09:3f:7b:42:09:27:7e:86:
                    37:4c:e2:ae:59:53:b7:ca:2a:84:24:0c:be:e5:9d:
                    5f:91:73:06:1f:d8:63:6a:aa:b5:e8:40:82:1a:7e:
                    a2:6c:6f:bc:d9:52:44:b4:0f:d5:8a:1e:53:e5:35:
                    42:a9:d7:8f:8c:90:01:bc:9e:85:ce:a0:d7:06:2a:
                    a1:e7:86:07:9d:fe:96:a4:ce:64:26:24:45:c1:be:
                    ad:ac:17:b8:4e:cc:a0:98:de:89:f9:7d:7b:2d:58:
                    bf:ca:77:df:d9:87:cc:a6:8d:dd:e4:9a:f1:d0:ed:
                    9f:fd:4d:8c:15:07:fe:a2:69:85:c2:c3:7b:4a:23:
                    75:f7:d8:19:24:9a:e3:82:d8:3b:f3:eb:9e:05:af:
                    02:c8:1a:75:d3:e8:2f:60:26:5f:6d:f8:7e:bb:24:
                    8f:b3:9e:e2:62:8a:1b:ae:62:2c:c8:07:b3:fc:05:
                    29:f7:aa:83:60:db:19:17:9c:6c:0f:bd:f1:30:66:
                    1b:a2:7c:6f:95:6f:df:ac:71:87:c0:a9:97:8e:b5:
                    f8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FD:F2:FF:05:76:4D:68:FB:56:F7:22:1E:31:63:EB:DB:0C:83:5B
            X509v3 Authority Key Identifier:
                keyid:0B:31:CC:C1:E8:9F:43:89:59:77:37:BE:4B:57:37:33:31:92:5A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/323830343a323262383a3a2f3332203d3e20323634313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:37:17:e2:ac:09:76:7e:cd:4a:fe:29:9d:32:8d:38:7c:1e:
         9e:e4:bc:9a:eb:2e:00:d9:78:90:c9:a5:a3:43:08:ec:8a:e8:
         54:75:32:20:bc:bb:6a:14:dc:cb:54:60:91:5e:16:dd:f6:c2:
         25:c0:3a:94:ca:8c:19:24:e1:5e:50:8d:1b:4c:80:2a:24:55:
         25:98:3a:fb:7f:15:d2:96:f8:d9:e0:a0:f0:63:78:3c:a9:25:
         9a:e8:c7:c5:d5:2f:05:ed:ba:12:7b:43:26:7b:16:23:63:57:
         a7:0d:f4:6b:e7:6c:cf:69:8b:bd:fb:5d:7c:d8:31:8b:20:a7:
         72:15:59:6b:1f:0e:8c:78:22:c2:38:b8:78:65:1e:69:ae:f4:
         7f:8c:e7:5f:6d:de:74:8d:2a:37:b6:c8:9a:39:ea:7b:7a:84:
         b2:0d:99:29:23:b5:ee:2b:14:d2:27:9c:8a:4f:a3:6b:5f:b9:
         a8:cc:a2:4a:21:27:46:a7:13:9b:27:7d:64:be:17:82:45:7e:
         92:45:a0:8c:38:a0:aa:74:2c:ed:43:c3:ae:d6:2d:60:f3:db:
         16:eb:55:95:2a:4d:b8:c1:0d:c8:83:5a:66:cf:8b:81:49:8f:
         67:94:92:57:db:ff:2f:84:0b:7c:10:6e:90:b9:0c:63:6b:41:
         17:ec:07:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:40 2026 by rpki-client