Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a383030303a3a2f33342d3334203d3e20323733373034.roa
File:                     323830343a386166383a383030303a3a2f33342d3334203d3e20323733373034.roa (raw, json)
Hash identifier:          YjTgjICMAtaYSwVD3N0bUBl/2bqmkmwOlD5Bi5VvMqU=
Subject key identifier:   83:49:B2:9E:6E:6E:99:A8:2E:6D:C8:74:73:D1:E2:01:BE:B6:12:B0
Certificate issuer:       /CN=23A22E67C9FE9B589275D5C14902FF7C51DADBF6
Certificate serial:       5D6EBDF67D1610288B3E953B7E9C30F7521AD798
Authority key identifier: 23:A2:2E:67:C9:FE:9B:58:92:75:D5:C1:49:02:FF:7C:51:DA:DB:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a383030303a3a2f33342d3334203d3e20323733373034.roa
Signing time:             Fri 06 Feb 2026 21:53:36 +0000
ROA not before:           Fri 06 Feb 2026 21:48:36 +0000
ROA not after:            Fri 05 Feb 2027 21:53:36 +0000
asID:                     273704
IP address blocks:        2804:8af8:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.crl
                          rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:34:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:6e:bd:f6:7d:16:10:28:8b:3e:95:3b:7e:9c:30:f7:52:1a:d7:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23A22E67C9FE9B589275D5C14902FF7C51DADBF6
        Validity
            Not Before: Feb  6 21:48:36 2026 GMT
            Not After : Feb  5 21:53:36 2027 GMT
        Subject: CN=8349B29E6E6E99A82E6DC87473D1E201BEB612B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2f:83:27:23:0e:3f:cd:e3:ef:ca:cc:1f:34:
                    81:46:51:be:28:41:61:dc:12:92:e7:08:9f:dc:21:
                    86:a3:d4:08:0a:26:81:0f:0b:19:8c:d5:91:f8:f5:
                    fb:74:cc:c1:66:5d:6e:8c:29:19:03:e2:ff:31:31:
                    84:92:44:1b:17:cf:56:7e:65:54:cf:50:47:78:0a:
                    85:7a:3c:1f:25:58:38:62:87:cf:ab:c9:fc:fb:8d:
                    e0:95:c0:d7:d4:ff:e3:0a:95:9e:1d:e8:58:ad:b0:
                    51:a0:5c:0f:37:12:bd:ee:ad:1a:68:ba:d9:3b:00:
                    3b:bb:cc:b8:87:08:d9:23:dd:0e:f6:e4:70:55:0c:
                    41:b7:48:88:8e:32:ec:6b:4d:04:87:07:91:1f:4f:
                    d0:c4:fb:e2:7b:ec:ca:45:6b:0c:a7:9f:c1:4e:53:
                    20:51:53:a5:a3:5b:80:54:7f:53:7f:64:90:da:94:
                    da:e6:70:81:1e:55:16:62:6a:b2:12:b0:c6:aa:25:
                    ca:8a:ed:a8:29:3d:74:36:8f:f3:05:37:0b:46:97:
                    61:94:32:08:3a:ad:5f:b3:ac:71:1f:56:cc:11:5c:
                    fa:8f:6b:82:84:64:8c:94:e2:ee:5c:16:1c:08:98:
                    3e:70:28:89:ab:b2:24:ef:48:64:5b:c5:2d:2c:36:
                    a9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:49:B2:9E:6E:6E:99:A8:2E:6D:C8:74:73:D1:E2:01:BE:B6:12:B0
            X509v3 Authority Key Identifier:
                keyid:23:A2:2E:67:C9:FE:9B:58:92:75:D5:C1:49:02:FF:7C:51:DA:DB:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a383030303a3a2f33342d3334203d3e20323733373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8af8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0a:21:95:ba:66:9d:77:b9:e7:3b:5c:0c:80:6e:63:8d:92:1d:
         c4:39:66:ce:4f:dd:65:89:19:73:59:a8:7a:ef:9c:ae:6c:ab:
         9b:0c:2a:43:76:e4:19:c9:68:36:02:fb:2b:7d:cc:bc:d8:61:
         e0:ac:c5:a9:8e:42:9a:7d:56:a6:de:48:5d:4f:bb:89:1c:ba:
         f1:2f:02:1e:d9:aa:5e:b6:68:b4:66:0c:49:25:0e:8c:f8:73:
         b2:a2:83:52:7f:7f:b4:5e:9d:9a:c5:78:93:d1:3c:c3:6e:11:
         2d:85:4a:eb:fb:fb:9d:6c:65:fd:9a:02:21:0c:62:70:01:9c:
         4a:e3:9c:13:47:f8:3c:ea:a7:65:87:ed:d9:7b:a3:27:23:9f:
         02:de:09:29:18:3b:a0:8f:ef:2b:80:e9:6b:3d:10:c2:1a:a8:
         ed:e3:2a:a4:b2:0f:f6:eb:c5:f3:57:30:ee:b8:7b:5e:87:1d:
         1f:fe:af:4c:d0:28:1c:89:f7:d9:6e:73:af:21:09:59:94:1a:
         3d:71:c7:40:b7:b3:43:46:99:62:4c:91:e9:29:21:fc:73:55:
         ee:19:34:55:a0:5d:9a:8e:31:b7:ea:67:53:b2:19:38:2b:93:
         d8:bf:33:76:a4:32:f1:e8:e4:56:76:58:f8:95:53:b3:50:25:
         33:c5:f7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:26:38 2026 by rpki-client