Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/323830343a326430633a3a2f33322d3332203d3e20323632343038.roa
File:                     323830343a326430633a3a2f33322d3332203d3e20323632343038.roa (raw, json)
Hash identifier:          Jyg7uuoqRgxPoK2mN3y2Z5lXpwjNgkblynHyZIoODGU=
Subject key identifier:   8F:E2:D7:2C:24:74:D1:05:D0:AA:AD:B2:B9:5A:A5:E7:F6:4E:21:AC
Certificate issuer:       /CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555
Certificate serial:       413F1D31D611BC2B160228DD2145610072A42081
Authority key identifier: 1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/323830343a326430633a3a2f33322d3332203d3e20323632343038.roa
Signing time:             Thu 05 Feb 2026 03:30:13 +0000
ROA not before:           Thu 05 Feb 2026 03:25:13 +0000
ROA not after:            Thu 04 Feb 2027 03:30:13 +0000
asID:                     262408
IP address blocks:        2804:2d0c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl
                          rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:3f:1d:31:d6:11:bc:2b:16:02:28:dd:21:45:61:00:72:a4:20:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555
        Validity
            Not Before: Feb  5 03:25:13 2026 GMT
            Not After : Feb  4 03:30:13 2027 GMT
        Subject: CN=8FE2D72C2474D105D0AAADB2B95AA5E7F64E21AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5c:31:33:c5:95:fb:9a:4e:71:06:85:a0:06:
                    f1:c6:17:b5:8f:fa:7b:78:a5:2f:dc:05:92:10:c4:
                    18:a8:c7:ba:77:54:29:b0:d7:fb:54:a0:b0:01:75:
                    d2:e7:92:34:d4:1e:7c:9e:b7:6a:df:41:19:5b:03:
                    d8:72:b0:8c:0a:2a:12:3b:a2:b5:6c:11:99:7b:23:
                    d5:79:64:9a:9a:7b:5d:d9:69:af:e4:36:a2:dd:6d:
                    33:7c:07:42:af:0d:7f:61:9f:65:aa:56:18:72:44:
                    3d:98:42:71:fb:63:08:5c:0c:7a:28:9b:b1:b4:55:
                    dd:e5:89:d1:48:06:28:b3:d3:c0:d6:ac:8b:8d:d4:
                    c6:60:7c:ed:3c:68:b2:f7:fa:69:c2:d0:fe:30:29:
                    64:d7:39:06:d0:88:9f:97:4a:d0:05:8f:f0:3d:34:
                    1d:b8:13:6c:25:b8:cb:23:2b:36:4d:f4:a7:7a:13:
                    e8:fe:c0:fc:06:f2:83:45:35:db:f1:8a:f3:ae:a1:
                    2f:ab:70:73:24:68:15:03:72:91:c0:7f:81:c5:28:
                    d2:8d:e5:15:ca:b3:08:ac:d7:a2:1d:f0:79:d3:f7:
                    4c:f0:79:d6:b8:30:e3:11:62:b2:41:1d:06:af:52:
                    dd:1f:06:74:c0:e8:8d:3d:8a:19:86:bf:4b:cc:f4:
                    d4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E2:D7:2C:24:74:D1:05:D0:AA:AD:B2:B9:5A:A5:E7:F6:4E:21:AC
            X509v3 Authority Key Identifier:
                keyid:1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/323830343a326430633a3a2f33322d3332203d3e20323632343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:de:61:f9:97:8d:1d:ab:ba:d0:63:d0:e0:80:f7:a6:97:b9:
         e9:e6:81:77:f2:ad:78:bd:6f:63:a0:db:18:2d:32:5d:05:7d:
         9c:d1:1e:53:d0:ae:ca:6f:00:c7:ce:8f:75:10:88:57:02:f0:
         4e:41:54:4e:8a:0d:4f:a4:d0:1e:62:45:7c:d2:ae:6d:69:0f:
         67:41:06:ab:42:14:01:de:db:d0:3d:38:70:62:a3:1d:06:ad:
         fd:68:b2:d7:2f:a3:ee:f7:b8:df:30:4f:62:e5:86:7b:23:63:
         93:b1:11:72:52:3a:66:02:77:0f:4c:75:b6:82:5d:78:58:e8:
         73:de:6f:02:9f:b4:83:4d:4a:ff:5d:75:de:de:ad:40:24:ba:
         a5:61:5c:58:38:7f:42:ee:49:09:55:1e:e9:3c:96:02:aa:1e:
         bc:5b:cb:14:c6:75:74:ec:be:00:4d:75:07:47:68:03:62:35:
         70:12:15:e5:53:bd:f8:48:a8:b5:63:fd:f9:49:95:6c:8e:ae:
         25:cf:2e:b2:1e:ed:94:6d:c7:90:ae:f1:8f:f4:9d:45:b6:3b:
         78:9e:11:64:17:d5:0d:61:94:e5:8c:a5:84:ef:ab:8a:ae:2a:
         ca:df:ce:02:8a:16:e6:56:e4:d9:7c:eb:0e:52:96:89:2a:24:
         4c:d8:73:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:25:10 2026 by rpki-client