Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/1/323830343a373134633a3a2f33322d3438203d3e20323730373830.roa
File:                     323830343a373134633a3a2f33322d3438203d3e20323730373830.roa (raw, json)
Hash identifier:          ECOnsLSIwpCFLrOiHokEwAq5X+y9THiIaZws18HOQtw=
Subject key identifier:   29:9C:E9:48:1E:0E:83:C1:CF:3F:8B:0B:55:DB:75:C1:3B:7D:A1:C8
Certificate issuer:       /CN=14DCE6323F84F3FE671A04D650359F18CDAE5603
Certificate serial:       2F6971A766251A0B223B109595394B76DBA76A25
Authority key identifier: 14:DC:E6:32:3F:84:F3:FE:67:1A:04:D6:50:35:9F:18:CD:AE:56:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DCE6323F84F3FE671A04D650359F18CDAE5603.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/1/323830343a373134633a3a2f33322d3438203d3e20323730373830.roa
Signing time:             Thu 05 Feb 2026 07:50:47 +0000
ROA not before:           Thu 05 Feb 2026 07:45:47 +0000
ROA not after:            Thu 04 Feb 2027 07:50:47 +0000
asID:                     270780
IP address blocks:        2804:714c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/1/14DCE6323F84F3FE671A04D650359F18CDAE5603.crl
                          rsync://rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/1/14DCE6323F84F3FE671A04D650359F18CDAE5603.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DCE6323F84F3FE671A04D650359F18CDAE5603.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:69:71:a7:66:25:1a:0b:22:3b:10:95:95:39:4b:76:db:a7:6a:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14DCE6323F84F3FE671A04D650359F18CDAE5603
        Validity
            Not Before: Feb  5 07:45:47 2026 GMT
            Not After : Feb  4 07:50:47 2027 GMT
        Subject: CN=299CE9481E0E83C1CF3F8B0B55DB75C13B7DA1C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c5:65:8c:b2:16:3a:b1:21:d4:13:ec:a0:98:
                    91:ca:b4:79:d5:91:46:67:cd:82:26:24:9f:9c:2b:
                    11:2e:ad:d6:08:c9:dd:d2:48:95:83:89:a0:4d:ec:
                    b5:a9:8c:c4:63:98:2d:c3:35:0e:19:ff:51:6d:fa:
                    d9:eb:44:28:fd:a4:67:dc:e3:fd:9c:04:24:04:c6:
                    e8:cc:a7:a1:7e:84:08:dc:f5:80:60:b5:95:c3:86:
                    e7:02:e1:45:ce:3a:c1:8f:37:3f:5b:0f:ef:96:8e:
                    a7:ce:19:3e:95:41:4d:8e:e6:6e:be:41:f7:47:34:
                    30:4a:db:fe:b4:9f:46:7a:55:f7:ca:dd:eb:ba:12:
                    4c:f5:03:f7:5a:98:6c:51:67:aa:f6:32:fe:e4:14:
                    4c:a6:1e:af:94:b8:84:c3:29:0c:9b:b4:da:4e:58:
                    1c:88:08:96:e1:18:77:12:e5:bf:39:55:07:e1:fd:
                    b2:4d:51:e8:d8:76:24:b4:4c:00:1a:0e:9d:d3:12:
                    dc:86:0d:57:37:44:da:ee:75:89:75:37:64:69:44:
                    73:89:8d:cf:a6:12:3e:fc:b5:fd:8d:29:8e:52:82:
                    56:15:fb:16:e0:52:a7:1e:a9:b9:b1:ea:af:73:c4:
                    1f:7f:5d:54:7e:7a:9e:fe:6c:56:c9:75:4d:ff:5e:
                    31:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9C:E9:48:1E:0E:83:C1:CF:3F:8B:0B:55:DB:75:C1:3B:7D:A1:C8
            X509v3 Authority Key Identifier:
                keyid:14:DC:E6:32:3F:84:F3:FE:67:1A:04:D6:50:35:9F:18:CD:AE:56:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/1/14DCE6323F84F3FE671A04D650359F18CDAE5603.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DCE6323F84F3FE671A04D650359F18CDAE5603.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/1/323830343a373134633a3a2f33322d3438203d3e20323730373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:714c::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:79:82:db:0e:05:b7:3a:70:7b:fc:3a:e8:0d:63:f7:ae:61:
         bc:20:e0:3b:fd:32:dc:2a:1d:f9:0b:90:e6:5f:44:27:42:bf:
         4b:8d:83:7c:24:8f:40:29:e5:2e:45:b0:d6:ad:de:04:84:22:
         40:e8:fe:a5:36:42:b0:88:a7:62:50:c9:35:e5:ee:00:3f:e6:
         09:35:db:a2:77:08:eb:03:11:84:48:ee:f3:c7:54:f4:47:ba:
         bb:10:8b:be:c7:7d:42:0d:e6:92:19:96:c8:52:27:ea:6b:d4:
         0e:a7:2d:fc:67:50:fe:4c:a5:59:e4:d5:ea:44:44:a3:e1:fb:
         0b:56:87:51:1d:ca:76:ed:d2:65:69:00:12:7c:0a:a8:cb:a0:
         74:cc:ac:ad:74:fe:df:79:a6:3a:a9:c6:44:82:28:b9:47:cd:
         2f:4b:52:19:1b:de:d6:7a:51:8a:8b:f3:46:05:bd:e3:04:57:
         7f:73:d7:8b:51:e3:3c:33:59:5a:75:88:20:5b:0e:8b:53:0f:
         cf:eb:21:67:57:66:e5:79:78:98:fb:2d:38:21:ac:a8:e4:5d:
         8f:85:f4:fd:47:48:f4:8e:b1:f8:c2:02:8e:ce:1b:a4:9f:e2:
         fd:81:b2:55:09:2c:2f:4c:0c:45:98:4d:5c:08:f8:6b:ed:6b:
         da:8d:f1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:58:08 2026 by rpki-client