Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a3a2f33322d3332203d3e20323731303031.roa
File:                     323830343a373463303a3a2f33322d3332203d3e20323731303031.roa (raw, json)
Hash identifier:          qjWQFW+9i3bxMpb9nu0NnsmvW2vz0ZF77WeNaaHz8wg=
Subject key identifier:   AF:20:0A:37:43:90:04:63:EC:B2:1A:96:96:7F:98:3B:C2:DA:84:5C
Certificate issuer:       /CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
Certificate serial:       79937A44BAC2B4EAE9E71E3D4122619983EA4EEB
Authority key identifier: B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a3a2f33322d3332203d3e20323731303031.roa
Signing time:             Thu 05 Feb 2026 02:16:17 +0000
ROA not before:           Thu 05 Feb 2026 02:11:17 +0000
ROA not after:            Thu 04 Feb 2027 02:16:17 +0000
asID:                     271001
IP address blocks:        2804:74c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl
                          rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:93:7a:44:ba:c2:b4:ea:e9:e7:1e:3d:41:22:61:99:83:ea:4e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
        Validity
            Not Before: Feb  5 02:11:17 2026 GMT
            Not After : Feb  4 02:16:17 2027 GMT
        Subject: CN=AF200A3743900463ECB21A96967F983BC2DA845C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fd:93:94:22:ab:10:c3:d5:79:94:3b:d7:0b:
                    47:34:1f:82:9c:27:d7:dd:96:06:d2:e9:61:02:db:
                    cc:cc:ee:74:f6:37:ea:9c:45:32:29:93:22:c6:80:
                    b7:23:19:53:05:21:8f:21:b6:f9:58:d2:00:28:81:
                    83:04:05:3f:4e:85:88:94:50:1e:c6:16:d9:73:2e:
                    44:41:26:9a:ca:44:97:50:fc:1f:94:03:aa:2d:da:
                    29:43:59:7a:64:22:1d:28:0f:f9:85:d4:7f:24:ed:
                    17:58:db:00:98:af:16:67:26:01:0d:85:ac:d4:b2:
                    ad:5e:19:33:40:f9:dc:93:a0:2e:01:e4:47:76:23:
                    27:d1:fc:8a:bc:3e:7e:f5:dd:c5:35:47:11:8b:85:
                    70:ca:e0:97:90:4c:f4:91:c0:ae:a8:d1:01:75:90:
                    4e:03:1a:42:ca:49:c1:4f:62:51:95:82:9c:03:a6:
                    8a:a4:f6:75:2e:96:88:7a:af:c5:7c:c3:ed:11:15:
                    b5:32:74:a8:27:ed:69:3d:16:d5:30:49:a8:e6:60:
                    bb:d9:16:a9:54:f5:79:a5:31:4c:3e:1a:9a:2a:c5:
                    b5:86:85:7e:0e:ba:85:0f:bb:ce:79:c9:ee:d1:e9:
                    60:bc:23:ee:09:6f:b5:38:63:d2:79:63:3e:d9:46:
                    d8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:20:0A:37:43:90:04:63:EC:B2:1A:96:96:7F:98:3B:C2:DA:84:5C
            X509v3 Authority Key Identifier:
                keyid:B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a3a2f33322d3332203d3e20323731303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:d6:14:9a:69:8c:ab:a6:cd:2f:2a:58:6d:5e:97:9d:13:51:
         c3:5b:70:e4:3c:2b:29:c4:de:43:5e:b7:f8:5b:51:b0:9e:b8:
         23:78:8f:18:cf:3a:74:5f:1b:8f:ee:f3:99:50:ab:e8:a3:d8:
         96:36:b8:0e:f2:16:ac:19:0a:d8:1f:bc:d8:54:a7:43:19:2e:
         48:79:ba:e5:ac:11:be:6c:67:0f:9f:86:4d:93:4e:e5:76:4c:
         9d:32:01:f9:ca:93:c3:81:f4:da:55:ec:08:e3:07:86:f0:f6:
         8a:93:76:a0:95:12:d2:83:58:68:c4:01:ce:70:10:4a:4f:7f:
         35:82:b6:68:c2:09:7b:5f:fc:2b:97:bb:72:52:e1:91:9a:63:
         55:3a:fc:47:9a:84:12:51:79:57:f3:b1:0e:b7:58:e1:d4:39:
         85:cc:a3:b8:1a:85:7e:7a:a3:50:56:cf:fe:bc:76:b2:b9:9e:
         eb:7d:cd:1e:0d:21:0e:10:9d:e6:b5:03:c5:cf:0e:18:5e:be:
         68:52:6e:88:40:3e:3b:12:98:e3:77:7d:77:16:4d:0a:1d:ca:
         41:28:88:b3:35:d5:d9:1f:59:9b:3e:0c:6a:5a:59:d0:65:de:
         4e:9a:e5:56:6a:fb:d8:e2:4a:3e:31:56:2b:68:0d:d1:e7:13:
         0b:d7:92:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:26:14 2026 by rpki-client