Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFfUyifCgAi3vwqrUy6HHhYB4SsDjgCNcy8PAfyhhbaR/1/323830343a323666633a3a2f33322d3438203d3e20323633383638.roa
File:                     323830343a323666633a3a2f33322d3438203d3e20323633383638.roa (raw, json)
Hash identifier:          DoZ/F6GkriY/pu//KiFWligUtqenA+l5Dtz3Qds9law=
Subject key identifier:   E9:78:64:D3:52:49:C4:3E:AF:21:3A:D6:A9:2B:AE:E8:DF:0D:87:A4
Certificate issuer:       /CN=FD5E4E3AECD6708F17553F15E6CFE9D262231785
Certificate serial:       6ED7AED9021EB84CEC5EA9C533A7B42ED33BBFC5
Authority key identifier: FD:5E:4E:3A:EC:D6:70:8F:17:55:3F:15:E6:CF:E9:D2:62:23:17:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5E4E3AECD6708F17553F15E6CFE9D262231785.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFfUyifCgAi3vwqrUy6HHhYB4SsDjgCNcy8PAfyhhbaR/1/323830343a323666633a3a2f33322d3438203d3e20323633383638.roa
Signing time:             Thu 05 Feb 2026 04:50:46 +0000
ROA not before:           Thu 05 Feb 2026 04:45:46 +0000
ROA not after:            Thu 04 Feb 2027 04:50:46 +0000
asID:                     263868
IP address blocks:        2804:26fc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFfUyifCgAi3vwqrUy6HHhYB4SsDjgCNcy8PAfyhhbaR/1/FD5E4E3AECD6708F17553F15E6CFE9D262231785.crl
                          rsync://rpki-repo.registro.br/repo/DFfUyifCgAi3vwqrUy6HHhYB4SsDjgCNcy8PAfyhhbaR/1/FD5E4E3AECD6708F17553F15E6CFE9D262231785.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5E4E3AECD6708F17553F15E6CFE9D262231785.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d7:ae:d9:02:1e:b8:4c:ec:5e:a9:c5:33:a7:b4:2e:d3:3b:bf:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD5E4E3AECD6708F17553F15E6CFE9D262231785
        Validity
            Not Before: Feb  5 04:45:46 2026 GMT
            Not After : Feb  4 04:50:46 2027 GMT
        Subject: CN=E97864D35249C43EAF213AD6A92BAEE8DF0D87A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6e:6e:a1:d9:4e:c4:b5:3e:c3:24:20:a7:9d:
                    a6:a1:84:7d:d8:90:ff:8a:bc:c2:3d:bd:df:a7:d8:
                    9d:fd:78:e8:4a:df:66:71:de:d5:ce:02:37:3e:78:
                    00:f6:4d:b8:75:bb:a1:ec:b8:da:be:92:a9:3f:d1:
                    87:ab:74:7c:42:bd:32:c1:d6:dd:de:19:33:17:3a:
                    c5:3e:79:7a:7f:da:0a:05:f9:8a:1a:9b:e2:71:b0:
                    d1:03:7f:82:01:4f:21:d5:0d:dd:8d:df:13:4e:8a:
                    ef:67:03:b0:e9:80:98:e1:3c:7f:20:80:cf:40:7a:
                    59:26:59:78:8c:5e:02:32:c8:bb:d2:99:95:05:78:
                    d9:6e:a0:90:04:43:16:bd:1f:75:ad:00:c2:42:5e:
                    4b:44:32:08:c5:e1:5c:e6:8e:d5:ed:10:2b:90:00:
                    70:a4:17:88:6e:65:b9:e3:35:db:1d:2f:b9:7a:1b:
                    32:95:bd:3c:3b:87:3b:a4:59:57:9b:b0:60:d5:27:
                    83:00:9d:3f:6b:e3:8e:83:0a:0a:b6:22:60:4b:b7:
                    c9:5b:dc:0a:2b:69:69:e7:4e:93:0d:a9:2d:cc:08:
                    43:d5:62:19:32:cb:a7:9f:ae:6f:6e:76:94:18:6d:
                    90:91:51:68:02:c0:71:0e:f9:56:92:d5:e5:0e:e6:
                    08:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:78:64:D3:52:49:C4:3E:AF:21:3A:D6:A9:2B:AE:E8:DF:0D:87:A4
            X509v3 Authority Key Identifier:
                keyid:FD:5E:4E:3A:EC:D6:70:8F:17:55:3F:15:E6:CF:E9:D2:62:23:17:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFfUyifCgAi3vwqrUy6HHhYB4SsDjgCNcy8PAfyhhbaR/1/FD5E4E3AECD6708F17553F15E6CFE9D262231785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5E4E3AECD6708F17553F15E6CFE9D262231785.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFfUyifCgAi3vwqrUy6HHhYB4SsDjgCNcy8PAfyhhbaR/1/323830343a323666633a3a2f33322d3438203d3e20323633383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:2d:6d:26:19:78:0c:ed:e9:0a:ac:62:5c:21:58:bb:0c:87:
         dd:34:c8:0f:bd:1e:ee:d0:91:97:58:74:2d:cc:ec:6f:bd:24:
         fc:30:b3:d8:a3:ef:24:8a:34:2e:e4:30:4e:bd:19:63:c4:6b:
         d7:9e:50:c6:fe:72:e1:44:41:f3:7e:8c:f2:af:55:a6:74:43:
         63:ea:22:37:5e:00:98:24:07:ce:a7:b1:e3:5a:23:34:78:fd:
         74:2b:45:78:d0:2d:35:a5:ea:de:56:cb:56:65:f0:5f:aa:13:
         53:e5:71:59:2a:37:32:1e:a9:01:e8:3e:a5:4d:9f:8c:41:8c:
         58:ec:6c:c6:e3:04:43:04:82:77:40:d1:f8:32:ea:0c:d5:b8:
         aa:2e:5a:b9:00:03:f9:7a:2a:cf:ef:c2:85:67:67:15:0c:23:
         95:40:77:bf:82:01:24:3a:99:fe:8d:3b:32:75:75:e0:16:05:
         18:ba:22:12:62:f3:b5:d0:92:87:ff:96:a3:43:7c:2b:25:27:
         cc:4b:1d:0a:88:2b:e1:45:fa:75:6b:26:00:a4:1e:65:dc:f7:
         03:ac:68:a3:20:59:ba:9f:fb:1b:84:83:b2:6d:82:70:b6:ae:
         ed:d0:d6:20:7c:30:ad:4d:21:bb:81:c6:1d:f1:e4:54:ce:55:
         ce:a6:52:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:01:32 2026 by rpki-client