Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/323830343a6436343a3a2f33322d313238203d3e203532363137.roa
File:                     323830343a6436343a3a2f33322d313238203d3e203532363137.roa (raw, json)
Hash identifier:          0gyQboNkvlY+UX4WPAV9xQTfcAxP+l3GSOdlLFBVd80=
Subject key identifier:   BB:B1:99:21:4C:55:32:48:4E:FC:6E:65:26:7D:08:16:7D:2F:B4:92
Certificate issuer:       /CN=D52EA87CB6ED7499343693851F4F93C4D28AAD65
Certificate serial:       397D754269FDCDDEDD74BD05F668006DE08A6ED3
Authority key identifier: D5:2E:A8:7C:B6:ED:74:99:34:36:93:85:1F:4F:93:C4:D2:8A:AD:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/323830343a6436343a3a2f33322d313238203d3e203532363137.roa
Signing time:             Thu 05 Feb 2026 12:59:37 +0000
ROA not before:           Thu 05 Feb 2026 12:54:37 +0000
ROA not after:            Thu 04 Feb 2027 12:59:37 +0000
asID:                     52617
IP address blocks:        2804:d64::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.crl
                          rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:7d:75:42:69:fd:cd:de:dd:74:bd:05:f6:68:00:6d:e0:8a:6e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D52EA87CB6ED7499343693851F4F93C4D28AAD65
        Validity
            Not Before: Feb  5 12:54:37 2026 GMT
            Not After : Feb  4 12:59:37 2027 GMT
        Subject: CN=BBB199214C5532484EFC6E65267D08167D2FB492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ef:c2:84:e9:af:ab:92:d1:b4:42:80:2a:6e:
                    04:05:c0:35:58:4f:bf:41:7d:2e:d6:23:1b:f5:f6:
                    6d:35:91:e0:22:4e:c8:fa:7c:63:0e:d6:4c:d3:31:
                    22:f3:b4:34:e0:5a:18:ff:5a:c4:78:31:9c:bd:d2:
                    c6:34:58:1c:47:ef:15:ec:4b:d4:87:03:d2:dc:3c:
                    68:fa:71:13:dd:80:5d:58:8b:2a:c6:84:62:e4:92:
                    87:fa:e8:42:c9:be:1a:24:59:f9:ef:3b:6e:25:37:
                    36:6c:17:9d:54:d5:ed:fd:a8:c5:ec:a4:c1:95:f9:
                    d6:df:6a:ae:d1:c6:a5:7d:a5:49:37:a7:1b:49:59:
                    c2:0d:ff:d9:92:ae:aa:41:77:d9:44:1d:08:d0:4e:
                    49:08:5d:c2:a7:b8:f2:a0:08:40:67:eb:82:c4:9a:
                    01:ef:81:08:eb:7d:5f:46:07:42:80:6b:68:8e:e8:
                    47:c3:f8:7b:a7:a2:30:51:de:de:06:14:27:e0:f0:
                    a3:ad:8a:66:5f:a9:6d:67:e1:ba:ff:6c:45:48:3b:
                    dc:db:bf:f7:d6:22:da:f4:91:06:86:dd:3b:6d:a7:
                    65:6c:c1:32:df:9e:bb:1b:c5:9a:a8:ab:6d:0b:0b:
                    cb:4c:02:fd:6d:9d:b1:59:04:61:1b:b8:ca:26:f4:
                    d1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B1:99:21:4C:55:32:48:4E:FC:6E:65:26:7D:08:16:7D:2F:B4:92
            X509v3 Authority Key Identifier:
                keyid:D5:2E:A8:7C:B6:ED:74:99:34:36:93:85:1F:4F:93:C4:D2:8A:AD:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/323830343a6436343a3a2f33322d313238203d3e203532363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d64::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:50:62:37:31:f2:14:af:ab:f6:55:dc:51:01:5e:40:b2:06:
         f5:22:f8:98:e3:de:3d:2f:3b:03:bc:d8:44:e3:2c:64:77:8c:
         2e:ff:5a:04:54:13:1e:fd:bf:42:92:64:01:a3:f5:6a:0a:75:
         74:e4:63:ee:8b:8e:00:67:80:a2:30:6f:be:a4:5b:52:57:cb:
         79:15:1d:ef:50:75:10:3a:d0:bf:2f:eb:d8:e4:9d:63:4e:6d:
         35:a0:30:31:4d:9b:d9:64:04:ed:ce:74:bd:6c:f6:07:09:33:
         0b:26:1f:5f:ba:ea:c8:48:cb:4d:17:7a:97:89:dc:2f:e5:b1:
         e7:c5:51:85:41:39:18:c2:50:93:d0:e1:11:a2:38:b2:e9:d0:
         a8:73:61:49:df:ad:20:bb:f4:ef:c0:02:90:23:32:c6:5a:c7:
         03:6f:d0:cc:db:35:8a:f3:19:b1:d3:b7:7e:06:f1:83:90:f7:
         36:a8:50:62:e7:24:5f:04:87:4b:cb:6b:18:9d:da:57:d5:18:
         ca:e6:0b:a0:cd:cf:b3:42:1d:a3:14:fa:2b:10:30:76:32:f1:
         83:88:42:5a:88:2f:f2:c5:dc:f8:0a:12:f1:0c:05:77:bd:27:
         57:ca:bb:a7:d5:76:f3:5e:e6:29:48:b0:84:49:6a:9a:3f:fd:
         d2:76:45:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:11:02 2026 by rpki-client