Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/323830343a363939343a3a2f33322d3332203d3e20323730323739.roa
File:                     323830343a363939343a3a2f33322d3332203d3e20323730323739.roa (raw, json)
Hash identifier:          lsKFK6x3575OqW9uR7qEH3lOMn2rqLc7jCzpcqAzFvk=
Subject key identifier:   41:23:AD:78:9B:67:15:16:27:3D:68:2B:6E:D3:D0:2C:CD:13:F9:BC
Certificate issuer:       /CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96
Certificate serial:       7A7E1C6D2345803F269222F9DB01C5571FA7E874
Authority key identifier: CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/323830343a363939343a3a2f33322d3332203d3e20323730323739.roa
Signing time:             Wed 04 Feb 2026 20:00:18 +0000
ROA not before:           Wed 04 Feb 2026 19:55:18 +0000
ROA not after:            Wed 03 Feb 2027 20:00:18 +0000
asID:                     270279
IP address blocks:        2804:6994::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl
                          rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:45:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7e:1c:6d:23:45:80:3f:26:92:22:f9:db:01:c5:57:1f:a7:e8:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96
        Validity
            Not Before: Feb  4 19:55:18 2026 GMT
            Not After : Feb  3 20:00:18 2027 GMT
        Subject: CN=4123AD789B671516273D682B6ED3D02CCD13F9BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:65:59:4f:75:7f:ad:72:25:ea:c5:7b:0c:b7:
                    f9:95:e5:df:92:f0:1c:3e:8a:52:10:fd:75:5c:4b:
                    17:44:10:14:6f:bb:a7:c1:b5:d5:06:38:50:3d:99:
                    e5:66:7f:c4:8d:48:84:5a:a0:01:89:b4:3b:d0:2b:
                    eb:ca:00:c7:f5:e6:cb:01:a4:f8:8c:68:86:be:88:
                    53:de:24:5c:5f:f7:cc:d3:4d:02:ba:7d:77:02:2c:
                    08:2d:80:b6:4f:58:35:7e:bd:19:73:e7:d8:94:3f:
                    74:e6:40:65:f0:e2:36:28:c6:d0:f4:30:e4:ea:42:
                    8c:c4:e2:f7:9d:c7:cc:bc:08:4f:26:f5:c1:c9:d8:
                    a2:c1:1b:13:66:9f:0d:23:10:13:56:b8:f4:c3:1c:
                    cf:fd:f1:f4:90:3e:2c:33:27:f7:64:5e:22:1f:da:
                    94:66:67:7c:ad:a8:87:a6:41:65:ce:14:41:c1:e6:
                    16:a7:83:b8:08:60:da:bb:07:8b:df:36:bd:5a:38:
                    4a:a5:40:5d:c3:53:73:ca:dc:fc:ea:50:57:d6:a1:
                    c4:4e:30:e5:50:35:21:fc:b6:9b:fa:4d:59:0c:f4:
                    c0:f8:c5:59:2d:39:80:c6:db:b5:e3:d6:7e:1b:40:
                    59:cd:98:30:6d:1d:b1:b9:7f:61:86:62:bc:ce:22:
                    9d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:23:AD:78:9B:67:15:16:27:3D:68:2B:6E:D3:D0:2C:CD:13:F9:BC
            X509v3 Authority Key Identifier:
                keyid:CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/323830343a363939343a3a2f33322d3332203d3e20323730323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6994::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:0c:ac:cd:bf:4c:1b:37:04:cb:3a:cb:74:80:fb:0f:c7:87:
         fc:e9:53:c8:93:c9:69:6f:48:2a:2f:6d:79:38:10:9d:ba:66:
         f8:a9:09:3a:61:2a:77:c0:dc:12:3b:c3:e6:c9:19:68:a2:36:
         02:f9:46:ff:3b:f4:91:6a:c7:6c:01:89:bf:22:62:fa:5c:d8:
         84:3a:47:db:f1:93:b5:95:03:2d:fb:c1:5b:bc:f1:78:ac:ac:
         82:c2:f8:e9:cb:84:69:58:3a:7f:a9:06:06:27:05:62:a9:96:
         73:ed:8c:77:43:c6:a6:66:5b:a2:52:f5:53:3f:fb:18:8b:ca:
         26:42:85:81:94:bc:f3:e3:b9:74:1c:6b:ba:2c:ac:b1:d6:1e:
         09:a7:e6:bb:f3:4a:b3:6c:fb:15:16:a0:51:d7:d0:c9:7a:d3:
         09:64:20:7c:04:23:da:91:ae:89:2c:26:02:a6:57:05:30:59:
         a1:19:d6:cb:05:d8:65:93:c3:00:ab:65:5a:63:a8:79:ae:92:
         5e:1c:c0:65:38:d8:cc:72:82:b5:cc:39:cf:67:5c:bd:ed:71:
         20:58:79:32:aa:44:68:e0:31:98:ff:71:eb:a7:ef:aa:5a:dd:
         81:1c:33:e8:39:be:e7:fa:d6:fa:c6:4a:b1:60:f2:9e:7d:50:
         b3:d1:2e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:40:41 2026 by rpki-client