Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a333a3a2f34382d3438203d3e20323731303031.roa
File:                     323830343a373463303a333a3a2f34382d3438203d3e20323731303031.roa (raw, json)
Hash identifier:          oADN4xx/OmX5VJ6pQXgUfHrknndpiAE/iLY48zwQ6Js=
Subject key identifier:   0E:3C:87:E3:28:F2:A9:6B:7C:6B:1B:95:B8:C1:80:3F:06:B3:41:CC
Certificate issuer:       /CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
Certificate serial:       206962D9705A7585F262B45F717600D105067C0B
Authority key identifier: B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a333a3a2f34382d3438203d3e20323731303031.roa
Signing time:             Thu 05 Feb 2026 02:16:16 +0000
ROA not before:           Thu 05 Feb 2026 02:11:16 +0000
ROA not after:            Thu 04 Feb 2027 02:16:16 +0000
asID:                     271001
IP address blocks:        2804:74c0:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl
                          rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:69:62:d9:70:5a:75:85:f2:62:b4:5f:71:76:00:d1:05:06:7c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
        Validity
            Not Before: Feb  5 02:11:16 2026 GMT
            Not After : Feb  4 02:16:16 2027 GMT
        Subject: CN=0E3C87E328F2A96B7C6B1B95B8C1803F06B341CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:01:e6:74:02:84:02:64:c7:5a:df:21:d0:3e:
                    ac:a8:6b:8d:5c:b9:4f:b1:7d:e2:f3:7c:17:d1:3a:
                    70:43:db:18:7f:72:1e:0b:1e:fc:82:09:a5:39:cd:
                    cc:6a:7d:b8:72:a2:3f:b0:da:86:a8:a1:9a:19:a7:
                    e1:55:6a:5f:2b:e0:2a:ae:a3:98:be:ca:91:0e:13:
                    03:72:52:35:69:14:58:fd:a6:0e:47:05:66:e2:c6:
                    a3:03:01:95:0c:b9:2a:c1:61:46:fc:79:d6:d6:b6:
                    7c:b1:ce:45:71:2d:64:39:1a:a5:5e:a2:37:62:d8:
                    72:f4:39:87:70:06:62:59:88:c6:ef:07:d9:2e:f5:
                    3f:1c:69:8b:d4:5d:9b:da:b6:c2:74:93:22:5d:cf:
                    4b:9c:a6:76:6b:44:5c:29:a4:43:0c:f6:6b:7b:1e:
                    d5:3f:e9:aa:d4:a4:ee:cb:16:d1:d0:69:22:d0:08:
                    02:7c:0e:b0:3b:19:9f:f6:ad:68:64:7d:a0:77:7c:
                    f4:75:c0:c4:08:f7:fb:7a:43:6c:05:54:bc:32:8c:
                    a0:4a:0e:1d:15:2c:67:dd:e1:5b:7d:75:64:ad:c0:
                    fb:28:4b:75:e2:6f:96:e0:28:74:80:5d:f1:56:b7:
                    3c:98:9f:67:14:ba:6b:a2:6e:2a:25:80:bc:47:b7:
                    4a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3C:87:E3:28:F2:A9:6B:7C:6B:1B:95:B8:C1:80:3F:06:B3:41:CC
            X509v3 Authority Key Identifier:
                keyid:B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a333a3a2f34382d3438203d3e20323731303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74c0:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:97:99:8a:2d:47:e1:2c:a9:b6:b8:9a:3b:6a:ae:24:f9:c4:
         09:b0:af:96:5e:e9:65:91:49:e4:8c:13:af:3a:46:10:85:e3:
         de:e0:57:19:4a:4d:cf:1a:d7:15:f4:a0:d5:19:fe:76:ee:ab:
         f6:07:64:89:a1:f8:cd:ed:6a:75:66:b8:f4:1e:83:7a:da:1e:
         3f:35:d8:ad:8b:8f:c3:7f:79:fc:c2:dc:09:23:e9:fc:11:ee:
         57:87:c1:2f:b0:0a:66:71:c8:05:a6:c4:1d:b2:77:5f:ec:b6:
         02:45:c9:60:75:ec:5b:81:e8:f8:fa:07:8a:6a:7d:7a:fd:95:
         ae:c2:cf:5f:7b:0f:79:fd:60:a6:45:89:da:47:99:d5:07:32:
         5a:77:21:ca:f9:15:9c:5b:a7:09:8d:7c:f7:fb:1c:26:d1:1d:
         aa:f7:37:a6:b5:bb:40:b5:54:ee:aa:e2:20:86:8e:c0:9e:e2:
         98:32:fb:93:97:0f:2f:17:35:6f:3e:30:2e:c7:16:4f:d0:f7:
         d3:6c:d0:85:9c:db:3e:73:ec:59:42:ef:30:36:cf:9b:78:20:
         09:92:70:71:84:58:75:19:da:88:c2:f7:92:9b:b4:5b:f8:b3:
         81:d4:b8:2f:b8:f0:a5:8b:c4:71:f5:09:87:56:a9:9d:bf:e7:
         5d:97:07:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:24:39 2026 by rpki-client