Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/323830343a383636303a3a2f33322d3332203d3e20323732363339.roa
File:                     323830343a383636303a3a2f33322d3332203d3e20323732363339.roa (raw, json)
Hash identifier:          ePr4HGhFIVb32V/jc3PXTcWMW5CNt6sH0sV9NjXPjLQ=
Subject key identifier:   0F:1E:13:E6:C6:68:F6:DC:ED:84:68:60:57:0C:75:DB:B1:75:9F:13
Certificate issuer:       /CN=2102F1879CA4D61251D630CB79E650FDA70A9610
Certificate serial:       767D835C641FCB514F53ECA78D2F45BAAB00FA5E
Authority key identifier: 21:02:F1:87:9C:A4:D6:12:51:D6:30:CB:79:E6:50:FD:A7:0A:96:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2102F1879CA4D61251D630CB79E650FDA70A9610.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/323830343a383636303a3a2f33322d3332203d3e20323732363339.roa
Signing time:             Wed 04 Feb 2026 23:28:56 +0000
ROA not before:           Wed 04 Feb 2026 23:23:56 +0000
ROA not after:            Wed 03 Feb 2027 23:28:56 +0000
asID:                     272639
IP address blocks:        2804:8660::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/2102F1879CA4D61251D630CB79E650FDA70A9610.crl
                          rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/2102F1879CA4D61251D630CB79E650FDA70A9610.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2102F1879CA4D61251D630CB79E650FDA70A9610.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:7d:83:5c:64:1f:cb:51:4f:53:ec:a7:8d:2f:45:ba:ab:00:fa:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2102F1879CA4D61251D630CB79E650FDA70A9610
        Validity
            Not Before: Feb  4 23:23:56 2026 GMT
            Not After : Feb  3 23:28:56 2027 GMT
        Subject: CN=0F1E13E6C668F6DCED846860570C75DBB1759F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:51:1f:4c:9b:16:02:a2:44:6f:f2:11:77:3a:
                    fd:a9:32:93:6c:36:35:d1:20:d6:a6:28:da:c6:59:
                    38:31:39:10:48:b1:32:74:3c:e9:dc:ed:c9:a7:29:
                    cd:99:62:e1:36:42:3f:cb:c5:a6:32:05:ba:45:35:
                    93:50:9e:21:cb:19:b8:f6:0c:b7:d2:7c:28:94:9d:
                    00:6d:b8:f9:e3:74:fa:c4:7b:fe:e8:28:1d:db:ad:
                    70:cc:76:ba:0f:f4:3b:40:4c:3e:b0:50:8a:61:3e:
                    6c:a1:e3:44:62:68:7d:ec:61:f8:bf:2a:35:bb:d3:
                    60:dd:49:5d:6a:c9:f1:99:0d:6c:26:93:41:d4:d7:
                    5f:cb:29:80:93:fa:75:f1:9c:8c:1e:82:d3:d3:a8:
                    27:8f:01:32:02:91:8e:dc:a4:b7:e6:fb:08:40:7a:
                    42:8a:42:b4:1b:d1:69:33:c3:58:b0:58:2f:2e:d7:
                    f7:89:cb:30:4b:ef:a5:3f:78:45:93:87:20:77:e7:
                    72:a1:a6:b8:1e:df:db:6e:8d:bb:86:3d:c9:48:58:
                    27:bf:50:eb:44:38:84:eb:78:25:9b:56:b8:f7:c2:
                    0d:d9:fc:e1:26:4b:8f:e2:9f:78:4b:05:ef:b4:88:
                    4f:9f:dc:2f:6d:f4:dd:4b:76:90:bd:1c:f7:42:66:
                    e7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1E:13:E6:C6:68:F6:DC:ED:84:68:60:57:0C:75:DB:B1:75:9F:13
            X509v3 Authority Key Identifier:
                keyid:21:02:F1:87:9C:A4:D6:12:51:D6:30:CB:79:E6:50:FD:A7:0A:96:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/2102F1879CA4D61251D630CB79E650FDA70A9610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2102F1879CA4D61251D630CB79E650FDA70A9610.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/323830343a383636303a3a2f33322d3332203d3e20323732363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8660::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:b6:d8:cb:0a:54:d5:23:cd:55:65:b4:60:9c:a6:bb:4b:1c:
         ab:c7:29:f2:79:1d:34:0e:20:ea:c2:3d:b3:9d:f6:e5:ea:8c:
         87:c9:6a:39:0a:76:44:2c:7f:ac:ca:f3:a3:ba:80:dd:fc:60:
         eb:79:8a:95:54:e6:ba:e5:87:43:fd:e7:67:e0:1b:3d:01:96:
         ad:b2:df:45:0c:6c:a6:b4:a3:e1:e6:c1:36:29:38:aa:72:be:
         60:6c:47:a6:b7:dd:99:59:af:7c:92:c1:12:54:87:69:20:86:
         df:02:b0:1e:a8:c6:60:2f:23:8a:b8:c4:ce:b2:5a:4f:2b:a4:
         7d:33:a0:08:61:5f:08:84:71:be:f9:a9:8e:0c:17:4c:ac:8f:
         40:44:00:0d:b9:3f:50:61:9e:83:a8:62:e9:85:8a:67:2c:69:
         c9:76:19:23:c4:af:f8:82:01:f2:14:e1:06:ad:18:5c:73:4c:
         e3:5a:62:f7:01:74:02:bc:bc:52:58:a8:d4:d7:25:3f:b6:be:
         67:70:30:d7:82:bd:ec:7c:16:0b:51:1b:78:ea:9d:d2:52:d9:
         eb:aa:12:32:13:e2:02:2e:18:12:e6:8c:6e:43:f5:a8:5c:8a:
         3e:51:6c:4f:e2:57:97:46:12:ca:6c:32:52:3a:07:6f:f0:1f:
         9d:d3:29:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:36:46 2026 by rpki-client