Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a3a2f33342d3334203d3e20323637333334.roa
File:                     323830343a346265303a3a2f33342d3334203d3e20323637333334.roa (raw, json)
Hash identifier:          G+RNKtP53PWokExgTrWiduE47E7/QZcfxFmzIPS3wvY=
Subject key identifier:   D0:A2:BD:61:3E:E8:0B:21:B9:B6:75:77:AF:56:22:22:EF:CB:FB:96
Certificate issuer:       /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial:       3E61F6866806F87C825B3A0CAF0A1297552FDF7F
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a3a2f33342d3334203d3e20323637333334.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     267334
IP address blocks:        2804:4be0::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
                          rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:61:f6:86:68:06:f8:7c:82:5b:3a:0c:af:0a:12:97:55:2f:df:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject: CN=D0A2BD613EE80B21B9B67577AF562222EFCBFB96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2c:0f:0b:83:9f:5c:71:58:41:ac:20:27:c6:
                    e3:35:61:e4:f4:fe:78:0b:52:12:95:d0:61:ad:52:
                    de:0b:99:5a:79:1f:1d:92:f4:50:43:f2:7f:c8:65:
                    2d:9e:e1:49:0c:b6:fd:fc:1c:eb:5c:19:15:ae:0e:
                    a3:9a:3b:7b:3d:42:7a:c7:33:5e:05:44:ae:ca:e3:
                    6b:a7:a7:4c:01:a1:13:18:11:82:96:a8:6f:0b:00:
                    b3:d3:55:8d:c6:2f:27:72:9e:67:ae:0a:04:9c:d7:
                    1b:9a:5b:ce:21:bb:6e:57:0b:8a:50:fa:5f:90:e5:
                    e1:30:0f:3b:d5:99:c5:bd:a3:9f:16:82:19:ba:b0:
                    89:26:d6:b3:9d:e8:78:61:a7:7d:a5:00:de:d7:65:
                    1c:24:b7:02:78:d2:b9:74:28:7b:85:94:33:6c:64:
                    f6:2b:0b:dc:5c:88:2a:e1:ea:df:f5:62:45:7c:f7:
                    69:6b:81:68:b7:9f:aa:5c:33:f1:ce:93:69:e5:1e:
                    f8:b2:ee:e0:cd:42:90:3f:5e:42:62:de:7e:96:74:
                    f4:8c:41:bf:76:1c:80:39:2e:f3:6f:a6:8a:1c:a8:
                    1d:dc:da:89:06:2d:1f:02:df:47:5c:0b:cb:c9:74:
                    3d:ae:f4:f1:c2:c7:ce:5e:92:97:68:dc:af:6d:99:
                    22:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A2:BD:61:3E:E8:0B:21:B9:B6:75:77:AF:56:22:22:EF:CB:FB:96
            X509v3 Authority Key Identifier:
                keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a3a2f33342d3334203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4be0::/34

    Signature Algorithm: sha256WithRSAEncryption
         54:aa:bf:e5:cf:c2:03:46:47:48:50:a0:fd:43:dc:cb:2b:a7:
         9f:82:27:b5:8e:1b:90:b6:be:b2:2c:e9:71:ea:67:f3:4d:10:
         1c:c4:39:60:7b:9d:45:17:1e:98:7b:45:df:33:0b:cd:be:55:
         a0:e9:97:f4:9b:44:37:6b:3a:69:5f:5f:89:8f:8c:85:a0:f2:
         2c:be:ef:4b:c6:b6:34:50:92:9f:10:6d:24:17:8b:b6:ff:7b:
         82:d6:5e:d4:78:d3:a9:b5:c7:fc:bb:77:ba:15:03:41:b5:27:
         bf:3a:f6:17:5a:da:64:d3:07:d2:94:2c:58:26:a5:6e:c1:73:
         b2:69:d7:3f:69:d3:4d:29:b6:26:9b:2c:f7:65:d1:83:2e:ab:
         02:a8:d4:00:95:36:df:f6:ec:d9:fd:00:fe:cb:a3:a2:ae:21:
         18:02:68:e0:f0:b0:b9:39:15:05:a9:ce:d4:d2:a9:1d:7b:38:
         49:3d:ea:5c:17:ee:b7:fa:b0:a9:7a:4e:46:3f:97:97:57:01:
         dd:c8:14:de:0f:68:c8:d7:36:85:41:5e:67:fb:23:91:e4:28:
         11:0f:d9:29:13:a3:dc:07:85:aa:20:ae:d2:12:bd:01:ee:cf:
         77:64:6c:d4:3d:fe:58:f8:2b:07:d1:35:f6:3d:00:cc:fd:8b:
         75:f9:79:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:04:33 2026 by rpki-client