Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/323830343a3266303a3a2f33362d3336203d3e203533323336.roa
File:                     323830343a3266303a3a2f33362d3336203d3e203533323336.roa (raw, json)
Hash identifier:          3dqmsQ455F7+PLHfPLd4xMEWmmtAZVDOu1tTREdmocI=
Subject key identifier:   C9:1D:31:FA:BD:8B:FA:23:71:FC:FA:BB:09:99:4B:E1:D3:14:20:DF
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       122F621CB36442DCDACC3A065D1A193601ACEE77
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/323830343a3266303a3a2f33362d3336203d3e203533323336.roa
Signing time:             Wed 04 Feb 2026 20:00:02 +0000
ROA not before:           Wed 04 Feb 2026 19:55:02 +0000
ROA not after:            Wed 03 Feb 2027 20:00:02 +0000
asID:                     53236
IP address blocks:        2804:2f0::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2f:62:1c:b3:64:42:dc:da:cc:3a:06:5d:1a:19:36:01:ac:ee:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Feb  4 19:55:02 2026 GMT
            Not After : Feb  3 20:00:02 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:14:6a:6e:8d:e7:7d:8d:ee:0f:e8:2c:fd:43:
                    c1:fa:89:9f:ba:29:26:ea:68:9b:06:3a:b1:a7:de:
                    82:78:c7:c4:7c:70:cd:5d:cb:4d:26:85:19:71:99:
                    96:f7:82:3f:a4:f3:6b:46:72:5e:2a:16:82:15:07:
                    ca:67:5f:40:8d:d1:f9:29:1d:95:89:37:f0:34:7d:
                    df:ec:78:89:7d:0f:43:16:c8:b7:cb:39:5f:80:0d:
                    19:d5:9b:ff:ea:76:88:ec:e4:2e:fd:92:ce:89:18:
                    85:4d:b5:3a:fb:c4:49:f8:11:53:73:15:0d:7d:52:
                    3e:e1:b4:ac:c2:d9:ed:67:2d:4c:de:23:24:66:79:
                    ea:58:e8:df:cc:82:f7:1b:25:1c:77:89:c6:68:a0:
                    b0:5d:7e:a0:6d:6f:34:04:c4:2e:4e:e8:3a:55:52:
                    2a:48:08:0e:13:da:6b:ef:33:c3:11:1a:9a:8e:15:
                    6d:02:91:2a:17:5f:d7:87:fd:0c:13:ec:f4:9f:33:
                    0f:0f:1e:89:38:8e:3a:6f:c4:11:13:27:30:a5:77:
                    e2:bb:f9:78:26:4f:21:71:99:06:cf:e9:c3:30:c1:
                    08:eb:64:d0:68:e4:67:d2:37:98:47:c0:d3:77:4f:
                    e8:8a:48:d9:46:8b:18:82:2c:ac:e4:c7:6a:81:0a:
                    f6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1D:31:FA:BD:8B:FA:23:71:FC:FA:BB:09:99:4B:E1:D3:14:20:DF
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/323830343a3266303a3a2f33362d3336203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f0::/36

    Signature Algorithm: sha256WithRSAEncryption
         78:11:09:2c:d9:ab:be:ef:92:fb:41:8c:14:49:76:4f:82:1e:
         b3:7f:f4:28:da:00:0d:4a:0c:e7:ff:43:4a:c7:57:d5:76:c6:
         54:e9:5e:e0:2c:00:f9:6c:88:81:c5:94:43:21:2f:a6:89:b4:
         16:60:51:15:c6:10:2b:bd:31:da:f5:c5:e9:2b:99:f2:5e:8d:
         63:6c:3f:98:a2:f0:c3:07:18:80:68:bd:e9:e7:a7:33:42:c1:
         fe:d6:ca:27:ca:29:2b:71:38:65:d4:c3:25:a8:02:a0:06:a0:
         58:4d:4a:7a:c9:14:a5:e6:b7:76:b6:87:8d:a8:ab:01:46:d8:
         26:88:b3:1a:5c:27:fc:c5:93:93:22:20:d0:99:ff:65:04:5e:
         8f:91:69:87:5c:99:dd:81:d3:4b:15:0d:7e:b7:b6:b6:32:c1:
         fa:49:af:ef:e7:d1:0a:c6:56:b8:5e:73:a9:41:d5:3d:11:d7:
         47:f2:17:38:ce:2d:1c:d0:6d:a2:c5:64:d2:5c:9a:c0:2a:da:
         0c:f5:a4:e1:26:58:be:2f:99:f0:98:50:4d:29:9b:eb:9e:ef:
         67:90:96:92:61:68:9f:db:63:93:1b:68:65:81:0c:f7:28:40:
         5b:91:c9:57:3d:28:1d:84:12:3e:c9:3a:b2:4a:54:20:c6:be:
         9f:76:6e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:24:46 2026 by rpki-client