Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/323830343a3266303a3a2f33322d3332203d3e203533323336.roa
File:                     323830343a3266303a3a2f33322d3332203d3e203533323336.roa (raw, json)
Hash identifier:          WbTBKMVjWEpbtdR3lyQ0pqFtKYfBxq4W8pkK3f/7Hpo=
Subject key identifier:   05:6E:28:FA:40:1D:2A:D3:44:77:A3:3B:8C:72:01:B1:C7:FB:86:E6
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       07F61914D1DCDEB03FD8C5B52FB81C705A94E01A
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/323830343a3266303a3a2f33322d3332203d3e203533323336.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     53236
IP address blocks:        2804:2f0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f6:19:14:d1:dc:de:b0:3f:d8:c5:b5:2f:b8:1c:70:5a:94:e0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=3082010A0282010100CA15BDE1676512543BB5796F3F09C4DE49865BAE735298791EE5374DD9B3D5C554789A14C8D4CC4BEF9F7740F3BF1DCA2813EB7868F060284B265B9FF1FB9E1768E29D70CB61D7BA5AFDFD4529075FE9327FCCA05CCDD4A7244FE84B1C26737293DCC828E54E996F5673F395104266E34D28EE883EE1F8DC011C466004D3F9E50844E42EF4AFF19AF6D367CE92398250BD7A5817CC97FB03EAE85FEF998CE1D630034594284F8F3CDF038869C3A8178418DF0FB4FBEC60635788B6E8906642E181DB785D30B060023A25781A90757EF240E1F04A0FB3A66248850D756F7BD28FF3025F3A46CE894704054622DE17C5921CE0C71041FB52A0452E21E24DD973DD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:15:bd:e1:67:65:12:54:3b:b5:79:6f:3f:09:
                    c4:de:49:86:5b:ae:73:52:98:79:1e:e5:37:4d:d9:
                    b3:d5:c5:54:78:9a:14:c8:d4:cc:4b:ef:9f:77:40:
                    f3:bf:1d:ca:28:13:eb:78:68:f0:60:28:4b:26:5b:
                    9f:f1:fb:9e:17:68:e2:9d:70:cb:61:d7:ba:5a:fd:
                    fd:45:29:07:5f:e9:32:7f:cc:a0:5c:cd:d4:a7:24:
                    4f:e8:4b:1c:26:73:72:93:dc:c8:28:e5:4e:99:6f:
                    56:73:f3:95:10:42:66:e3:4d:28:ee:88:3e:e1:f8:
                    dc:01:1c:46:60:04:d3:f9:e5:08:44:e4:2e:f4:af:
                    f1:9a:f6:d3:67:ce:92:39:82:50:bd:7a:58:17:cc:
                    97:fb:03:ea:e8:5f:ef:99:8c:e1:d6:30:03:45:94:
                    28:4f:8f:3c:df:03:88:69:c3:a8:17:84:18:df:0f:
                    b4:fb:ec:60:63:57:88:b6:e8:90:66:42:e1:81:db:
                    78:5d:30:b0:60:02:3a:25:78:1a:90:75:7e:f2:40:
                    e1:f0:4a:0f:b3:a6:62:48:85:0d:75:6f:7b:d2:8f:
                    f3:02:5f:3a:46:ce:89:47:04:05:46:22:de:17:c5:
                    92:1c:e0:c7:10:41:fb:52:a0:45:2e:21:e2:4d:d9:
                    73:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6E:28:FA:40:1D:2A:D3:44:77:A3:3B:8C:72:01:B1:C7:FB:86:E6
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/323830343a3266303a3a2f33322d3332203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:4a:5b:40:a6:5c:1b:d4:fb:a5:06:14:af:03:b9:30:e0:a3:
         87:c9:c9:f8:41:6c:28:ef:ce:62:7d:73:39:f4:b0:32:b9:ac:
         50:98:5e:4e:65:1f:2c:3d:0c:f2:1a:12:c2:5c:89:02:d5:0b:
         3f:08:ac:9a:98:cb:94:f9:b0:66:f9:77:51:99:4b:ee:05:2f:
         4a:80:2a:ae:e9:36:1f:15:f2:05:90:ea:e5:ac:e2:5c:d0:2b:
         08:b6:49:b6:b2:ea:3f:05:5b:83:09:37:95:37:31:dc:6d:ce:
         7e:12:3a:cf:10:4e:08:32:60:18:b8:f0:6e:be:04:1e:eb:22:
         ff:4c:9e:7d:9f:f4:63:b4:2f:b8:85:89:37:6c:98:df:ef:e6:
         a5:00:79:ae:b0:6e:0e:fb:2c:39:04:9b:e8:7d:fe:7f:c5:0e:
         04:a1:84:53:a3:79:00:2d:75:64:ec:d1:74:3a:1a:62:bb:99:
         17:d3:71:4b:c6:e6:2d:94:de:0a:2b:ae:ce:8b:a2:cc:3f:ad:
         1e:22:cc:9b:2a:14:34:4e:37:d5:39:16:eb:6b:aa:e4:cb:4f:
         1d:c4:00:2e:d1:f3:cf:c4:1d:6b:9d:90:74:56:c5:0b:5d:0f:
         65:b9:e9:3c:bb:c5:d0:73:46:24:85:d4:66:c0:bd:f7:8d:7d:
         e0:04:41:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:42 2026 by rpki-client