Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a3a2f33332d3333203d3e20323731303031.roa
File:                     323830343a373463303a3a2f33332d3333203d3e20323731303031.roa (raw, json)
Hash identifier:          bfze2OkHv0CirGa6o3aVa143n8LPQ5iJTjycvufqJeQ=
Subject key identifier:   E0:E8:F2:AB:C5:03:57:54:D9:EC:A7:19:58:B5:21:CA:D5:A2:C1:4A
Certificate issuer:       /CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
Certificate serial:       33B16FB716892A48AB0E08C93BFCB15BB6C3E72F
Authority key identifier: B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a3a2f33332d3333203d3e20323731303031.roa
Signing time:             Thu 05 Feb 2026 02:16:16 +0000
ROA not before:           Thu 05 Feb 2026 02:11:16 +0000
ROA not after:            Thu 04 Feb 2027 02:16:16 +0000
asID:                     271001
IP address blocks:        2804:74c0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl
                          rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b1:6f:b7:16:89:2a:48:ab:0e:08:c9:3b:fc:b1:5b:b6:c3:e7:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
        Validity
            Not Before: Feb  5 02:11:16 2026 GMT
            Not After : Feb  4 02:16:16 2027 GMT
        Subject: CN=E0E8F2ABC5035754D9ECA71958B521CAD5A2C14A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:01:0c:1c:33:3d:46:c9:c1:57:ab:a9:05:d0:
                    a4:16:49:ed:02:0f:3c:24:55:20:68:6e:da:bf:bb:
                    ca:8f:74:a7:13:66:7a:24:d7:ce:21:26:3d:75:a9:
                    aa:43:92:24:9b:73:03:07:f4:f9:df:5c:6a:4a:e0:
                    c6:a5:09:c9:72:ec:8c:ba:82:f7:9a:5e:f1:97:93:
                    8c:e8:50:73:77:56:8b:59:35:29:bb:0a:ab:d8:0c:
                    a3:6d:c6:b1:5d:53:92:21:df:2e:fb:4a:27:54:32:
                    49:eb:3e:ee:39:0a:83:ed:3a:4e:ee:af:60:c7:fd:
                    fb:c0:f3:3a:0b:bb:ac:24:df:42:5e:df:4b:cc:ab:
                    ad:36:2b:02:f2:75:8b:f4:f4:68:b7:6a:47:22:05:
                    cb:af:3d:28:ab:31:80:07:36:ca:08:0e:99:fa:7e:
                    c4:01:a2:ff:34:59:3b:c8:22:91:18:e1:61:6e:e4:
                    d2:71:a4:c8:72:79:08:68:26:c7:e7:21:fe:70:d5:
                    1a:c6:92:79:b3:01:c0:7d:8b:5f:8c:d9:cf:2e:c2:
                    2d:70:46:1d:e6:5b:92:aa:c2:67:aa:72:7b:b5:56:
                    b1:43:66:67:71:42:c5:8e:88:06:4c:ec:37:09:28:
                    ca:fe:f2:1f:4d:db:aa:0d:a7:81:f0:39:95:33:b0:
                    13:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E8:F2:AB:C5:03:57:54:D9:EC:A7:19:58:B5:21:CA:D5:A2:C1:4A
            X509v3 Authority Key Identifier:
                keyid:B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a3a2f33332d3333203d3e20323731303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74c0::/33

    Signature Algorithm: sha256WithRSAEncryption
         be:d5:06:ce:dd:a4:3d:c7:98:3f:58:1d:02:04:d1:d0:7f:62:
         bb:37:9b:7a:a6:d0:1c:ee:05:53:88:4a:f6:f0:37:bc:f9:53:
         7c:d4:17:f0:c9:ea:77:5a:8b:e3:12:90:99:7c:58:59:b4:d9:
         5f:08:1a:3b:cf:20:52:28:6a:ec:c8:b0:e5:fb:09:22:d5:23:
         79:2d:e4:b5:5d:a5:e5:76:0a:82:88:f6:f4:30:06:a2:68:0d:
         32:fa:8f:e0:a4:a4:3f:6b:21:2b:40:cd:2e:b8:aa:67:58:56:
         7e:15:dd:a9:0e:cb:62:28:11:b3:b6:71:79:c8:c3:4a:59:0d:
         3f:3a:eb:c5:c7:19:bb:bd:d6:e0:88:3b:36:cb:a9:6d:77:c7:
         5f:0f:81:9e:1f:b9:5b:88:ff:cc:5c:4d:08:9e:4a:a9:aa:f0:
         27:3a:25:15:95:5d:5d:95:c7:97:36:5e:88:71:fb:e0:1a:b1:
         81:56:24:7c:4d:52:2b:fa:65:82:84:f4:3e:72:e3:35:b0:e6:
         a9:18:ee:48:6a:12:dd:68:52:e3:b3:68:b7:96:0d:13:bc:4e:
         a4:2a:1c:e1:a3:30:90:c3:01:c0:79:df:63:37:7b:16:58:6f:
         2d:a6:fb:c5:a2:85:dd:ba:b0:03:29:81:69:2f:bf:63:44:d3:
         33:ec:ff:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:24:12 2026 by rpki-client