Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/323830343a6235343a3a2f33322d3438203d3e203532373635.roa
File:                     323830343a6235343a3a2f33322d3438203d3e203532373635.roa (raw, json)
Hash identifier:          LyThCBTR+owUCPDBEJU6B+D+44jjnUgWcPmxPNt7f9I=
Subject key identifier:   D3:6D:F1:9B:9C:76:11:60:83:4C:80:F9:B0:F2:FD:7C:6F:2A:B1:32
Certificate issuer:       /CN=A601CC15A099E546A3DCBD53AF497300DAA65598
Certificate serial:       3E1EEFDE63DCBBABABE7058F8A980F8F31FBC52C
Authority key identifier: A6:01:CC:15:A0:99:E5:46:A3:DC:BD:53:AF:49:73:00:DA:A6:55:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A601CC15A099E546A3DCBD53AF497300DAA65598.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/323830343a6235343a3a2f33322d3438203d3e203532373635.roa
Signing time:             Thu 05 Feb 2026 18:46:29 +0000
ROA not before:           Thu 05 Feb 2026 18:41:29 +0000
ROA not after:            Thu 04 Feb 2027 18:46:29 +0000
asID:                     52765
IP address blocks:        2804:b54::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.crl
                          rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A601CC15A099E546A3DCBD53AF497300DAA65598.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:1e:ef:de:63:dc:bb:ab:ab:e7:05:8f:8a:98:0f:8f:31:fb:c5:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A601CC15A099E546A3DCBD53AF497300DAA65598
        Validity
            Not Before: Feb  5 18:41:29 2026 GMT
            Not After : Feb  4 18:46:29 2027 GMT
        Subject: CN=D36DF19B9C761160834C80F9B0F2FD7C6F2AB132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:36:a2:7e:3c:4a:79:b2:60:8e:70:e4:27:95:
                    74:67:ca:cc:b2:62:f2:73:bf:d1:12:84:0e:be:ff:
                    3f:d0:a3:1f:c4:ae:df:f6:42:f2:ab:bb:ae:00:ae:
                    17:68:a5:ba:1b:28:99:d1:5e:d9:4b:95:c2:46:dc:
                    20:4d:51:9f:21:51:af:65:9b:d1:85:6e:8a:fe:25:
                    ba:f4:14:c7:11:05:48:d8:91:42:19:bc:dc:d2:2d:
                    00:b6:4c:c0:af:c0:a9:26:94:9d:fe:07:16:77:2b:
                    65:27:8c:fe:89:d8:80:50:4e:f1:53:0f:b9:01:eb:
                    fc:64:87:21:74:90:2c:41:18:90:7b:44:9c:16:29:
                    e1:ad:2b:5f:c7:ab:57:18:76:82:9e:8e:5e:04:89:
                    66:2e:37:76:11:04:b6:6e:89:32:6e:59:67:8f:33:
                    a3:a8:54:ba:a8:fe:21:2b:bb:8c:87:98:40:93:f8:
                    48:c8:3d:97:83:aa:a6:59:99:35:d9:5d:10:bf:22:
                    57:2a:81:b0:8b:77:5b:63:9d:16:59:df:34:9a:dc:
                    32:dc:21:ac:10:53:f1:9f:85:6d:c7:35:6a:3b:87:
                    6c:c0:9f:6e:70:86:ea:c8:13:39:59:8a:b4:38:10:
                    38:fc:ad:fa:98:8f:71:19:10:34:dc:c2:96:d5:67:
                    e5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6D:F1:9B:9C:76:11:60:83:4C:80:F9:B0:F2:FD:7C:6F:2A:B1:32
            X509v3 Authority Key Identifier:
                keyid:A6:01:CC:15:A0:99:E5:46:A3:DC:BD:53:AF:49:73:00:DA:A6:55:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A601CC15A099E546A3DCBD53AF497300DAA65598.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/323830343a6235343a3a2f33322d3438203d3e203532373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b54::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:a2:e0:34:5b:b4:22:b9:c7:0c:ce:6e:1e:e7:45:c0:c6:f3:
         14:13:50:7f:09:70:33:cd:62:be:05:ef:99:cc:34:b7:74:9a:
         9e:68:12:54:32:b5:c3:5b:fb:ac:3d:50:d7:4a:29:3d:34:e1:
         d7:24:1d:44:88:3f:d8:47:26:bd:89:6e:b8:95:97:76:aa:51:
         73:ae:7c:36:47:8d:66:8d:f1:3a:67:76:41:c5:89:dc:fb:86:
         90:2b:b7:a9:37:c7:c5:32:5c:b4:87:43:7d:51:27:6e:2d:39:
         90:44:52:c7:86:b0:83:86:0a:cc:ca:02:28:29:68:38:1c:9a:
         a4:81:52:73:90:46:12:d0:e1:af:6e:a2:82:fb:f3:d3:4d:52:
         83:3b:33:14:ea:b8:65:60:c9:c3:2d:bb:95:01:93:f3:6b:19:
         9c:22:64:b8:6e:3b:5c:25:76:4b:61:cc:b3:24:7d:27:35:a9:
         5e:fc:d7:f8:bf:d3:64:42:2a:3e:dd:bc:73:3f:75:42:7e:56:
         f9:c2:a0:2f:88:b7:1e:f8:61:da:4d:26:6a:a0:e3:b1:17:95:
         90:55:04:c3:54:10:7f:f6:f8:28:ec:8b:54:df:69:e7:a8:96:
         7f:64:6f:93:b2:61:18:e0:0c:0a:98:6c:8a:c5:d3:57:6a:21:
         de:55:ac:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:40:12 2026 by rpki-client