Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/323830343a323131343a3a2f33322d313238203d3e20323634353331.roa
File:                     323830343a323131343a3a2f33322d313238203d3e20323634353331.roa (raw, json)
Hash identifier:          RnZLWmxN6QNdeAcWBoQN19lbcoxQt5XcCE/3XPc9Bik=
Subject key identifier:   8D:2F:C0:4F:BF:5F:39:7D:D9:28:04:A3:BE:66:6A:93:D3:00:5E:A4
Certificate issuer:       /CN=678744E2F008A98B388D024DEEAB7AEEF09D3883
Certificate serial:       0F0C6C3A3190F4ACCE99CE067593E6A81B42350C
Authority key identifier: 67:87:44:E2:F0:08:A9:8B:38:8D:02:4D:EE:AB:7A:EE:F0:9D:38:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/323830343a323131343a3a2f33322d313238203d3e20323634353331.roa
Signing time:             Sun 08 Feb 2026 01:51:24 +0000
ROA not before:           Sun 08 Feb 2026 01:46:24 +0000
ROA not after:            Sun 07 Feb 2027 01:51:24 +0000
asID:                     264531
IP address blocks:        2804:2114::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.crl
                          rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:0c:6c:3a:31:90:f4:ac:ce:99:ce:06:75:93:e6:a8:1b:42:35:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=678744E2F008A98B388D024DEEAB7AEEF09D3883
        Validity
            Not Before: Feb  8 01:46:24 2026 GMT
            Not After : Feb  7 01:51:24 2027 GMT
        Subject: CN=8D2FC04FBF5F397DD92804A3BE666A93D3005EA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b4:67:2d:8e:9b:17:ba:c1:c6:37:9b:ba:38:
                    ad:ba:5b:03:2a:b4:78:cd:f2:19:10:42:67:c6:56:
                    b7:b0:c5:fa:17:f7:2a:a3:56:44:ef:c0:24:6b:50:
                    f8:c5:28:14:9d:31:80:46:a3:fb:2e:c7:b0:20:8e:
                    f8:f5:f7:3a:05:3a:f3:62:cb:2b:31:95:83:80:53:
                    5f:77:9e:8f:35:22:66:c5:52:c9:c9:7d:65:67:38:
                    59:3b:79:a3:98:3e:e2:74:7c:0c:37:06:11:7b:9f:
                    93:0b:35:61:c1:55:1f:ff:0f:ec:38:d7:c8:24:19:
                    02:7b:82:93:57:13:37:ac:57:1e:23:1d:d5:3e:60:
                    70:55:88:86:d8:38:49:cb:b7:b9:51:11:c4:48:da:
                    5d:56:1f:38:a5:a1:0a:94:63:36:8b:e9:9f:a8:cd:
                    b4:aa:c5:d2:d5:aa:23:26:f7:87:45:dd:95:e2:de:
                    2f:3c:5c:ed:43:e5:33:2d:e8:d8:33:ac:b3:85:ce:
                    c4:83:fb:6e:80:0a:86:22:83:ba:87:59:32:44:59:
                    59:df:ab:54:bd:12:11:50:52:c8:ff:87:59:ca:b2:
                    5a:8a:40:5d:f0:90:c6:98:c7:a7:61:ce:c4:95:b9:
                    7b:43:f6:98:d7:15:22:d9:90:12:b5:50:dd:1c:25:
                    73:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2F:C0:4F:BF:5F:39:7D:D9:28:04:A3:BE:66:6A:93:D3:00:5E:A4
            X509v3 Authority Key Identifier:
                keyid:67:87:44:E2:F0:08:A9:8B:38:8D:02:4D:EE:AB:7A:EE:F0:9D:38:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/323830343a323131343a3a2f33322d313238203d3e20323634353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2114::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:24:6c:f6:05:33:54:81:2c:37:44:90:7d:e7:ca:33:f4:54:
         7e:49:f1:8c:91:b6:98:f6:b9:23:25:09:47:94:91:fa:9f:81:
         de:bc:43:5f:67:70:ca:5c:06:3c:67:b1:44:94:5d:c4:54:86:
         f6:94:cc:a0:c8:5f:cb:09:29:6e:31:c7:c3:78:40:2a:2f:b2:
         0f:a1:b6:ee:9f:df:a0:e6:b9:8d:ee:73:16:d0:93:3f:52:c1:
         f1:3c:b8:7b:bc:b5:91:47:fc:f6:3f:1f:09:02:a4:a7:c5:25:
         d8:2b:4f:57:a6:e9:c2:1e:b1:e1:d5:ab:c4:29:87:83:83:99:
         02:17:6a:68:99:f3:cc:20:40:a8:a1:f0:31:6c:d2:46:09:04:
         e5:a3:31:7e:6b:70:13:de:44:88:b4:f9:73:cb:26:ce:4b:75:
         98:c5:b1:6e:3b:2e:b3:4d:c3:6c:80:a6:4c:15:4e:96:ed:33:
         49:0d:e3:f0:9b:7c:c8:e7:76:c3:eb:1c:82:cd:9d:1c:65:93:
         b4:f2:44:51:8d:75:42:bf:e9:62:8e:9c:60:4b:c6:27:99:5d:
         2d:3f:2c:49:65:50:40:82:b5:1a:75:c4:82:55:9f:27:ca:8b:
         2b:ca:18:9c:91:77:37:93:9d:77:cf:f6:f3:a9:6c:c8:46:a6:
         09:2c:fb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:36:21 2026 by rpki-client