Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/323830343a316537383a3a2f33322d3438203d3e203238363538.roa
File:                     323830343a316537383a3a2f33322d3438203d3e203238363538.roa (raw, json)
Hash identifier:          tqj3DHG6ZqR4IyxOmcIm659lavhrqzpEQ0//VUuF8yY=
Subject key identifier:   78:2A:0B:F0:4A:58:7B:73:AB:38:AE:99:80:67:6F:A0:24:8F:A0:CF
Certificate issuer:       /CN=59D97368930A28A43621D32020C3E70B26E79708
Certificate serial:       2EFB97FD9302B172F4688A91052891B1CCAAADE1
Authority key identifier: 59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/323830343a316537383a3a2f33322d3438203d3e203238363538.roa
Signing time:             Thu 05 Feb 2026 11:05:28 +0000
ROA not before:           Thu 05 Feb 2026 11:00:28 +0000
ROA not after:            Thu 04 Feb 2027 11:05:28 +0000
asID:                     28658
IP address blocks:        2804:1e78::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl
                          rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:fb:97:fd:93:02:b1:72:f4:68:8a:91:05:28:91:b1:cc:aa:ad:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D97368930A28A43621D32020C3E70B26E79708
        Validity
            Not Before: Feb  5 11:00:28 2026 GMT
            Not After : Feb  4 11:05:28 2027 GMT
        Subject: CN=782A0BF04A587B73AB38AE9980676FA0248FA0CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d6:3a:3c:2a:66:22:3a:b4:8d:b7:30:5f:49:
                    a6:20:56:64:cf:f0:5e:3d:0a:93:ed:4d:1f:11:27:
                    4b:28:05:9a:a0:11:1c:a2:29:8d:15:b4:a4:36:f9:
                    85:f6:b8:01:6d:c4:22:4a:fb:0b:73:64:53:a8:15:
                    cf:3c:f1:fb:f2:68:60:84:d3:ed:ad:25:8c:dd:2d:
                    a8:49:57:4b:18:f0:ae:d2:7c:7c:d9:eb:65:df:5a:
                    04:f4:be:62:df:92:35:47:47:17:48:9d:a9:65:b3:
                    ac:1d:3d:1e:6f:3b:34:d4:df:10:32:43:9a:16:cf:
                    5a:0e:73:4c:f9:b2:f7:f1:45:69:b3:3c:5c:ec:57:
                    21:76:3a:f0:00:9d:ec:b6:f1:59:bf:1c:2b:be:7d:
                    a3:27:d4:e4:c5:68:1d:2a:91:1f:81:14:79:db:ec:
                    4b:61:94:50:6c:d6:ec:61:67:7b:82:42:37:05:0f:
                    74:3e:67:fe:b5:c5:80:f8:e0:6f:ab:9b:bc:55:8b:
                    1a:64:e0:2d:b3:52:90:37:48:e7:2d:0e:45:b0:38:
                    6b:85:85:f4:5b:9d:f0:65:37:09:e6:c4:d9:dc:0a:
                    84:af:5b:8f:e7:d5:ff:e4:02:38:cc:a7:e5:ff:db:
                    c2:13:67:41:9f:43:d6:80:af:1e:d5:c3:2d:f2:f3:
                    ee:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2A:0B:F0:4A:58:7B:73:AB:38:AE:99:80:67:6F:A0:24:8F:A0:CF
            X509v3 Authority Key Identifier:
                keyid:59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/323830343a316537383a3a2f33322d3438203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e78::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:6b:82:3a:15:2a:07:eb:ae:79:9e:35:a5:73:09:a7:ca:56:
         98:33:14:a3:a6:ad:af:52:da:bd:17:b6:13:2b:82:4d:92:ee:
         0b:a3:eb:40:96:99:5b:8a:73:39:b1:6f:16:49:3e:c3:7b:cb:
         26:e4:49:16:19:1e:0b:39:1b:6f:af:68:bb:3b:26:2b:99:44:
         77:bf:7a:63:f6:09:5a:93:b8:d7:c5:1c:42:40:3d:31:89:af:
         f0:62:69:c6:5c:93:8d:87:bd:71:64:cd:d0:85:e2:ed:67:a5:
         e0:89:e3:5b:4e:c3:1c:19:74:d7:e4:8d:7a:28:5a:33:cd:64:
         fd:37:c4:c9:48:bd:5c:0c:14:0d:70:48:f4:c0:07:a5:98:e8:
         bc:9b:17:f3:37:32:90:67:93:c3:3b:a3:95:7f:d2:ff:91:dc:
         a1:df:23:97:42:f2:75:44:ca:65:39:1f:7b:f0:a1:59:5a:b2:
         24:2d:35:b1:b8:2e:94:a1:47:2c:6d:6c:51:3b:5e:68:d0:81:
         3d:af:70:fa:f2:52:4b:fb:57:fc:d6:a5:c6:6f:da:a1:4a:c6:
         7f:2c:a4:a8:74:ce:c7:f8:5d:5d:0a:c5:c1:09:6c:b3:ab:be:
         46:38:c7:5b:7e:60:b0:3a:32:20:3d:72:52:f2:2b:58:ed:13:
         c5:6e:0d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:23 2026 by rpki-client