Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/323830343a323736303a383030303a3a2f33332d3333203d3e20323633383937.roa
File:                     323830343a323736303a383030303a3a2f33332d3333203d3e20323633383937.roa (raw, json)
Hash identifier:          sYihdP5wa2AP+CPqNW03Dh3fzevaID2VFSojAsLeH7A=
Subject key identifier:   E3:65:FA:19:5E:E6:60:04:46:19:0F:FA:96:83:29:C8:00:4F:4B:F6
Certificate issuer:       /CN=7309159F56A47754EF99E9F4F55BD61B99CCD644
Certificate serial:       441BCBCDC91C4CBCA447329F0BD203BFEA74E071
Authority key identifier: 73:09:15:9F:56:A4:77:54:EF:99:E9:F4:F5:5B:D6:1B:99:CC:D6:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/323830343a323736303a383030303a3a2f33332d3333203d3e20323633383937.roa
Signing time:             Thu 05 Feb 2026 22:02:30 +0000
ROA not before:           Thu 05 Feb 2026 21:57:30 +0000
ROA not after:            Thu 04 Feb 2027 22:02:30 +0000
asID:                     263897
IP address blocks:        2804:2760:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.crl
                          rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:11:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1b:cb:cd:c9:1c:4c:bc:a4:47:32:9f:0b:d2:03:bf:ea:74:e0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7309159F56A47754EF99E9F4F55BD61B99CCD644
        Validity
            Not Before: Feb  5 21:57:30 2026 GMT
            Not After : Feb  4 22:02:30 2027 GMT
        Subject: CN=E365FA195EE6600446190FFA968329C8004F4BF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:59:74:67:13:0d:54:24:64:00:d8:28:5f:7e:
                    2e:18:3e:74:5f:67:86:d7:f0:61:4d:7c:f9:1f:29:
                    49:88:a4:93:5f:c9:19:bc:c4:4a:5f:56:d5:bf:6a:
                    8e:1d:16:b3:e3:f1:cc:07:c6:b8:17:c4:49:b7:a7:
                    1a:59:a0:df:f7:1b:2e:be:b8:29:f6:fd:c6:7c:48:
                    c2:e2:4d:09:ce:aa:60:b1:3a:da:6a:47:45:39:e8:
                    41:49:25:eb:32:6c:25:2d:ca:bf:17:1d:b5:69:67:
                    0f:ad:9f:fa:fa:a2:fb:cb:79:ed:15:69:ca:d0:c4:
                    7e:aa:1f:11:89:34:24:63:ec:54:d2:7f:0d:3c:74:
                    34:c9:e3:99:38:1a:ff:cf:b2:0e:14:32:23:e1:d5:
                    05:30:54:d5:01:bc:3e:5c:b8:9e:e9:88:9e:9a:5c:
                    34:24:57:3b:f1:36:04:16:02:ea:9f:05:bb:7e:bf:
                    c9:41:ec:a1:26:ac:d3:f0:64:bf:bb:9f:73:e5:ee:
                    71:d4:68:85:42:5c:bc:30:81:7f:62:ec:95:9d:ba:
                    33:ec:ff:f8:a3:45:1c:b2:5a:2a:f8:25:4d:90:6f:
                    80:34:22:13:35:85:9d:c3:e6:00:84:15:ab:60:91:
                    67:26:e1:81:1b:f9:ce:ad:16:4f:1b:98:e5:dd:45:
                    3b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:65:FA:19:5E:E6:60:04:46:19:0F:FA:96:83:29:C8:00:4F:4B:F6
            X509v3 Authority Key Identifier:
                keyid:73:09:15:9F:56:A4:77:54:EF:99:E9:F4:F5:5B:D6:1B:99:CC:D6:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/323830343a323736303a383030303a3a2f33332d3333203d3e20323633383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2760:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         25:1c:36:4b:23:61:7d:95:55:22:e9:58:e1:a1:f9:53:04:2e:
         eb:d3:be:13:c2:50:76:dd:a0:ff:2b:3b:90:6a:6d:2e:7d:98:
         95:41:bc:b5:4b:56:31:9f:a3:21:b6:66:cf:a9:40:30:f2:50:
         c1:9b:8e:23:7f:8e:1d:52:e8:7e:7b:7a:51:7c:7d:d8:aa:63:
         4a:ef:f9:4d:77:cb:1d:25:7b:aa:a3:68:1e:83:6c:d1:ac:ab:
         73:38:aa:73:0c:61:a9:94:ec:4e:ce:02:0a:9e:f9:cf:f1:84:
         74:d7:80:d5:c2:ad:d6:b0:24:45:0f:8b:e1:7c:ae:ba:36:cf:
         14:6d:7c:1d:69:af:7c:3a:c5:73:e1:82:0a:61:4b:47:ed:b8:
         63:76:27:43:68:16:ff:e7:5b:b9:f6:90:a8:2a:ec:88:78:d8:
         46:1b:02:3b:db:50:d8:a1:b2:1a:1a:3e:64:2e:36:3c:1e:1d:
         57:45:54:d7:55:19:32:f9:16:53:1f:76:8b:bb:eb:80:f4:7a:
         5b:c9:43:40:74:12:bd:e4:2f:9f:9d:00:f5:5a:ec:03:d2:1e:
         6c:6b:bb:be:c1:96:24:6f:55:0f:64:26:99:43:9a:fa:88:1e:
         f1:b1:42:59:a2:96:d7:14:d3:39:f6:05:d6:53:fb:2e:ab:79:
         52:19:c1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:55:28 2026 by rpki-client