Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/323830343a373762303a3a2f33322d3634203d3e20323032.roa
File:                     323830343a373762303a3a2f33322d3634203d3e20323032.roa (raw, json)
Hash identifier:          +Fq/LqTDFvoQf3C3OD0kkoBTgZth99e2SfXtJjdJUj0=
Subject key identifier:   F8:FD:83:B7:63:FB:BA:24:B8:A3:C4:CB:6D:E1:5B:6E:66:9A:DE:BC
Certificate issuer:       /CN=BF45F5442049793490E484E18AD1516C8FDC8087
Certificate serial:       44305D902A2638A02A13CE76F0518B694C7668A1
Authority key identifier: BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/323830343a373762303a3a2f33322d3634203d3e20323032.roa
Signing time:             Thu 05 Feb 2026 00:09:34 +0000
ROA not before:           Thu 05 Feb 2026 00:04:34 +0000
ROA not after:            Thu 04 Feb 2027 00:09:34 +0000
asID:                     202
IP address blocks:        2804:77b0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl
                          rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:30:5d:90:2a:26:38:a0:2a:13:ce:76:f0:51:8b:69:4c:76:68:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF45F5442049793490E484E18AD1516C8FDC8087
        Validity
            Not Before: Feb  5 00:04:34 2026 GMT
            Not After : Feb  4 00:09:34 2027 GMT
        Subject: CN=F8FD83B763FBBA24B8A3C4CB6DE15B6E669ADEBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:17:a6:c9:f8:3e:a8:05:07:d4:01:d2:40:cb:
                    9c:41:af:74:12:43:bc:6b:86:89:66:95:37:55:1b:
                    ba:07:24:5c:6f:10:88:f3:ed:f5:40:02:c6:4d:a6:
                    15:9f:06:ee:2f:f4:88:37:0c:de:71:5e:65:5c:47:
                    4e:05:f3:be:60:fc:c3:1c:44:14:90:0e:71:10:2a:
                    3e:3e:04:33:cd:4f:0e:b3:68:0d:c2:43:5a:35:c3:
                    6b:30:9a:f9:f4:5b:5a:47:61:8e:16:a2:70:23:5f:
                    7c:20:49:92:1c:2b:cc:b7:93:f6:81:e0:99:2f:88:
                    a5:9d:8f:ad:be:1e:ad:33:7b:b0:f5:28:35:08:46:
                    8b:70:d0:23:92:dc:c7:3e:5c:41:e3:26:d6:46:d2:
                    11:e1:a7:d1:00:b4:e5:b8:5e:0d:75:59:33:14:1e:
                    19:64:bf:ae:28:d8:28:31:fc:f4:f3:b0:3f:90:5e:
                    9b:65:48:e9:09:73:6e:3f:7c:70:c4:91:7c:6f:b7:
                    f9:cc:ff:ee:94:ce:f7:a5:b4:1a:a3:83:04:ac:74:
                    6d:70:dc:87:77:7d:e5:b9:2c:17:8c:f3:16:ec:43:
                    a4:fd:f2:c2:cb:27:a8:6b:d9:e1:79:91:ae:74:a8:
                    7b:25:5d:fe:ec:b9:88:b6:43:36:ff:d3:0f:2b:44:
                    32:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FD:83:B7:63:FB:BA:24:B8:A3:C4:CB:6D:E1:5B:6E:66:9A:DE:BC
            X509v3 Authority Key Identifier:
                keyid:BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/323830343a373762303a3a2f33322d3634203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:b3:8d:5d:e0:2d:fe:f1:52:c4:86:a5:53:66:61:0f:3b:c0:
         82:69:7e:1d:b8:87:65:79:31:42:63:b7:cc:e9:68:d2:15:3e:
         0a:c4:05:56:31:66:b5:d5:8e:d4:9c:bb:3e:63:44:5e:a8:86:
         20:c1:3e:02:c0:f3:5b:2e:49:e6:89:51:97:38:8b:82:58:2a:
         21:6e:40:99:e4:54:a5:80:3a:bb:a2:5c:81:28:78:72:67:89:
         25:bf:cf:07:00:4d:05:5e:3c:10:b0:54:c6:4a:57:1a:fc:76:
         f2:d5:0e:ea:d5:42:09:96:d1:96:31:92:45:ed:af:32:a7:53:
         14:96:82:d3:cb:c9:f0:05:6e:55:6f:62:d6:60:dd:77:b7:04:
         95:5c:1b:8c:9e:94:6a:84:18:75:da:87:00:30:a8:ba:2c:1c:
         23:ca:a0:f0:aa:0c:34:b2:ed:12:e2:17:0e:c6:9e:2a:d7:9a:
         5c:5f:e8:ba:21:e1:57:86:e6:05:bc:ce:0d:91:14:6a:b9:7c:
         24:1f:f6:3e:f2:32:01:cb:5f:9b:4a:90:f6:60:d2:cd:e7:04:
         ad:ec:40:bc:cc:41:5e:f2:4e:53:d2:d2:25:e0:17:c6:67:0b:
         62:95:c2:89:9d:c9:b2:c5:8f:8e:e4:8b:5c:d5:a0:23:02:11:
         0b:43:8e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:05:51 2026 by rpki-client