Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a3a2f33332d3333203d3e20323637333334.roa
File:                     323830343a346265303a3a2f33332d3333203d3e20323637333334.roa (raw, json)
Hash identifier:          xWKs2MipihXxzqW+9K8qFQCXsWQCpHuxCy1DLfFGWOo=
Subject key identifier:   8F:B7:65:AB:9E:C4:AC:41:75:9A:19:17:91:FD:AD:BE:73:DA:14:12
Certificate issuer:       /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial:       7EC2F2CFD626BDC982B00BBB6D0CF9325935F2BF
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a3a2f33332d3333203d3e20323637333334.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     267334
IP address blocks:        2804:4be0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
                          rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c2:f2:cf:d6:26:bd:c9:82:b0:0b:bb:6d:0c:f9:32:59:35:f2:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject: CN=8FB765AB9EC4AC41759A191791FDADBE73DA1412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:58:67:13:c6:3c:ef:3d:06:6f:be:4d:d2:22:
                    81:19:70:af:a0:9e:cf:9b:8e:65:2f:43:d7:e5:b6:
                    b5:73:90:08:cd:b5:4d:4c:f7:e9:1d:2f:b9:7d:d2:
                    cb:5f:f2:dc:a2:85:98:1e:42:1b:cf:fd:71:58:bd:
                    37:3d:34:78:b6:99:95:86:31:42:6e:1a:a2:db:36:
                    a9:5c:86:c5:36:09:d6:93:98:60:8a:a4:cd:7a:f1:
                    04:d0:95:4f:6c:cd:43:02:1a:96:67:df:53:b0:df:
                    be:44:34:36:e3:16:de:7b:1b:50:7a:5b:01:45:cd:
                    5c:28:9e:d5:70:31:f1:02:82:ff:43:aa:fb:f9:66:
                    3c:61:ae:25:61:27:b6:59:a8:cb:4c:eb:08:be:ff:
                    12:aa:5d:a0:be:2f:4e:8a:a0:27:fd:2b:b4:58:7b:
                    35:51:ef:b0:c4:9f:d5:d2:3c:4d:eb:70:6e:ba:05:
                    1e:9a:63:12:45:71:55:8d:8b:bf:6f:7c:b5:7a:71:
                    eb:95:f9:69:50:9c:29:86:35:88:37:ff:ed:fd:55:
                    f9:c4:23:a4:5e:90:34:d3:61:20:f1:d6:3b:ed:0d:
                    a5:5c:f7:88:5e:5b:e9:66:f4:b8:7f:cb:a8:7c:94:
                    32:fa:7c:ca:a6:3c:0b:a1:3d:e4:f2:f0:70:57:06:
                    ef:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B7:65:AB:9E:C4:AC:41:75:9A:19:17:91:FD:AD:BE:73:DA:14:12
            X509v3 Authority Key Identifier:
                keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a3a2f33332d3333203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4be0::/33

    Signature Algorithm: sha256WithRSAEncryption
         9d:c4:a5:e6:ad:ae:f0:d6:ca:60:8d:b3:ab:56:62:e1:58:d8:
         56:96:f6:7b:5d:ed:c5:4c:11:8f:8c:c4:49:36:56:b9:10:49:
         6a:21:66:cc:a0:c2:9e:21:37:d2:8e:8b:a8:2f:27:dd:9b:83:
         c5:d9:9c:ca:06:37:db:63:68:12:f7:37:c3:e4:20:9a:38:e5:
         18:02:27:bd:63:86:ba:67:0e:de:3f:c0:af:65:cf:f6:94:44:
         85:8f:c6:26:a1:1c:a7:9b:a7:d6:a3:7e:80:03:da:4a:72:fd:
         27:2c:75:f4:68:0c:8e:76:d6:b1:35:4d:35:d4:e8:11:32:73:
         0e:c6:1f:bf:7b:77:48:45:4d:94:ff:db:07:93:1b:3c:6d:06:
         fb:5a:dc:2c:df:13:b4:a0:6a:3f:95:32:11:25:f6:06:9d:68:
         9f:05:f6:a7:31:87:7e:dc:9e:e0:a9:b4:19:b1:d1:b4:49:f1:
         53:aa:3f:c3:54:04:3d:bb:75:16:6b:5d:e9:f1:9a:59:b8:e6:
         0a:6e:d6:83:32:f2:ca:1f:70:23:65:e7:61:3c:a1:04:0e:43:
         4c:13:31:55:3a:2e:d6:d5:07:1f:fb:77:90:19:fb:b0:6c:7b:
         02:7b:29:e3:d8:3b:4b:65:91:c2:b3:8c:9a:89:3d:e8:cc:c1:
         36:dc:63:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:54 2026 by rpki-client