Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/1/323830343a363362633a3a2f33322d3438203d3e20323639333830.roa
File:                     323830343a363362633a3a2f33322d3438203d3e20323639333830.roa (raw, json)
Hash identifier:          T+ulS8BSLbqY1Zdf6LmhXLYxGOM9bbPa3YM05asZXkw=
Subject key identifier:   ED:E8:82:FB:3E:DB:AF:CE:E3:00:AD:CD:CA:5E:99:E3:0C:2B:85:70
Certificate issuer:       /CN=FE39F9955E8FB9AE99003D780752796F38511F36
Certificate serial:       2B79462A1DE44E83ED8A9263295E925BDDB74BA9
Authority key identifier: FE:39:F9:95:5E:8F:B9:AE:99:00:3D:78:07:52:79:6F:38:51:1F:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE39F9955E8FB9AE99003D780752796F38511F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/1/323830343a363362633a3a2f33322d3438203d3e20323639333830.roa
Signing time:             Fri 06 Feb 2026 02:05:43 +0000
ROA not before:           Fri 06 Feb 2026 02:00:43 +0000
ROA not after:            Fri 05 Feb 2027 02:05:43 +0000
asID:                     269380
IP address blocks:        2804:63bc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/1/FE39F9955E8FB9AE99003D780752796F38511F36.crl
                          rsync://rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/1/FE39F9955E8FB9AE99003D780752796F38511F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE39F9955E8FB9AE99003D780752796F38511F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:37:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:79:46:2a:1d:e4:4e:83:ed:8a:92:63:29:5e:92:5b:dd:b7:4b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE39F9955E8FB9AE99003D780752796F38511F36
        Validity
            Not Before: Feb  6 02:00:43 2026 GMT
            Not After : Feb  5 02:05:43 2027 GMT
        Subject: CN=EDE882FB3EDBAFCEE300ADCDCA5E99E30C2B8570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:51:c9:89:22:f7:31:37:38:ef:8c:26:a0:9e:
                    63:20:61:b8:c9:0a:38:7b:5f:86:c2:b9:f4:63:91:
                    87:10:16:d8:45:38:33:9a:03:13:66:5b:ab:d5:16:
                    d5:11:bf:96:2f:75:fe:a0:6c:f5:3e:e2:97:55:b0:
                    13:11:97:db:f7:c1:0c:8d:b9:44:1c:03:9c:7f:23:
                    1e:23:62:c6:7f:2f:fc:35:94:0a:2c:ae:4a:b3:31:
                    06:da:73:7a:c9:8f:7b:63:9f:e0:5d:0d:bc:46:4a:
                    80:26:fe:7c:90:30:a9:5f:15:df:28:5f:8f:25:7d:
                    34:82:a9:6a:dc:0f:be:53:47:49:a2:92:6e:7a:79:
                    18:9c:d5:98:b4:c2:bb:30:98:d6:12:3a:f4:cf:42:
                    d4:a7:76:ec:44:80:af:11:4e:b3:d8:dd:70:a1:6b:
                    81:80:6a:62:0b:51:18:35:5a:07:c4:73:f3:a8:13:
                    dd:ec:c9:f4:79:21:fe:69:88:32:0c:dd:81:94:81:
                    21:ea:1f:0a:2c:73:eb:6d:2b:e0:7d:bf:fc:53:74:
                    cf:06:b5:00:08:24:e1:ee:d2:ed:11:0c:6a:a7:38:
                    4b:33:97:f3:5e:1b:05:5d:fe:71:cd:b6:34:ab:94:
                    83:22:0c:1f:5f:75:09:9a:d9:49:04:a2:ff:c4:3a:
                    c8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E8:82:FB:3E:DB:AF:CE:E3:00:AD:CD:CA:5E:99:E3:0C:2B:85:70
            X509v3 Authority Key Identifier:
                keyid:FE:39:F9:95:5E:8F:B9:AE:99:00:3D:78:07:52:79:6F:38:51:1F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/1/FE39F9955E8FB9AE99003D780752796F38511F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE39F9955E8FB9AE99003D780752796F38511F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/1/323830343a363362633a3a2f33322d3438203d3e20323639333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:f2:62:58:37:f8:98:67:73:26:70:9d:8c:1e:df:fb:1a:9d:
         49:3a:78:73:de:ec:b1:3a:72:4c:0b:da:36:cf:a3:ab:4a:fa:
         b0:9f:95:00:a1:3d:51:a9:6c:90:42:f2:22:ea:34:93:90:4e:
         dd:b4:9b:d9:c0:76:06:c9:bb:96:58:64:b3:15:d3:77:f1:f3:
         64:87:a1:14:6c:2f:32:ff:5c:26:32:1d:f2:7a:a0:a8:92:f6:
         30:6f:e3:e8:f4:dd:6b:6d:02:0a:ea:45:76:40:c7:62:ed:41:
         e4:35:99:d4:1a:4c:af:e7:19:07:9c:59:f9:74:28:de:f7:38:
         ad:e0:fa:06:f6:04:00:4e:93:37:70:90:dd:81:06:00:05:7e:
         d4:ba:b3:19:12:97:44:5d:51:c2:66:92:1d:d5:13:29:13:d4:
         f1:cc:95:0b:0c:2e:54:79:34:5c:f2:a9:0b:1e:1f:47:5d:57:
         3f:2b:05:35:a2:a6:d2:e8:cc:e1:54:b9:d1:8d:e5:d4:18:ee:
         3d:d9:e5:a3:bd:ee:13:c4:51:a1:33:79:b5:15:4d:e9:d8:1b:
         a4:fd:f8:e2:8b:77:2a:7c:ae:2e:19:d3:fe:e5:f8:48:27:d9:
         f2:89:14:d3:30:0e:18:75:13:3f:17:c4:67:2f:73:b6:e4:4d:
         09:2d:1a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:41:52 2026 by rpki-client