Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a343030303a3a2f33342d3334203d3e20323638383739.roa
File:                     323830343a356266343a343030303a3a2f33342d3334203d3e20323638383739.roa (raw, json)
Hash identifier:          /RvlzgCeqM0xjMXwRwahy9/BFGsCoXlhY62jh2OAI3s=
Subject key identifier:   F1:50:26:EB:5A:D5:71:D7:B4:29:3B:E1:F8:68:D6:74:84:F5:3A:1C
Certificate issuer:       /CN=28C4721E667593A43DA7832F588E6B6B8F57311C
Certificate serial:       3176BFFADA7FF24507DC2FC4930B891C2F04C1F6
Authority key identifier: 28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a343030303a3a2f33342d3334203d3e20323638383739.roa
Signing time:             Thu 05 Feb 2026 07:29:24 +0000
ROA not before:           Thu 05 Feb 2026 07:24:24 +0000
ROA not after:            Thu 04 Feb 2027 07:29:24 +0000
asID:                     268879
IP address blocks:        2804:5bf4:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl
                          rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 10:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:76:bf:fa:da:7f:f2:45:07:dc:2f:c4:93:0b:89:1c:2f:04:c1:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C4721E667593A43DA7832F588E6B6B8F57311C
        Validity
            Not Before: Feb  5 07:24:24 2026 GMT
            Not After : Feb  4 07:29:24 2027 GMT
        Subject: CN=F15026EB5AD571D7B4293BE1F868D67484F53A1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ed:bc:8b:6b:90:05:92:77:e0:8e:58:49:89:
                    6e:c0:a6:c4:a5:46:5e:2d:b4:5c:bc:a6:7c:fe:ea:
                    2f:44:c3:03:33:5e:83:ec:b9:b4:12:11:10:99:f4:
                    97:3b:38:58:cb:c1:73:06:b0:27:41:30:ec:87:16:
                    22:6c:3c:57:f2:12:95:ab:f2:bf:9d:ba:52:13:16:
                    b3:34:bd:17:1f:bf:24:66:b5:0c:eb:37:29:d6:2d:
                    68:a5:81:b1:8a:34:04:76:f1:2b:16:a2:2f:41:21:
                    a6:fa:51:0e:11:92:58:55:4d:4e:17:19:0d:1b:6b:
                    29:06:04:27:12:64:77:de:0c:6f:ef:b9:27:cb:e0:
                    6c:6f:d0:0e:9b:60:91:6c:c4:cf:45:34:70:fc:92:
                    6b:b1:85:9b:9f:59:44:2b:25:97:57:84:85:33:57:
                    00:a9:18:34:52:36:6e:1c:ea:22:6d:ec:11:54:0a:
                    e4:0f:c3:1b:c0:6a:3c:40:26:d3:ba:e4:6c:d1:e1:
                    90:b0:95:d3:11:ad:88:f0:67:dc:4c:26:13:03:4f:
                    7c:ba:c3:e2:ce:3b:bb:68:6f:88:27:1f:45:7f:6b:
                    f8:d7:c3:66:64:8a:47:8c:c8:ee:44:0a:79:87:e1:
                    07:9a:3a:5b:b5:42:9c:bd:75:cb:22:f0:2b:97:d9:
                    18:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:50:26:EB:5A:D5:71:D7:B4:29:3B:E1:F8:68:D6:74:84:F5:3A:1C
            X509v3 Authority Key Identifier:
                keyid:28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a343030303a3a2f33342d3334203d3e20323638383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bf4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         13:02:dc:76:57:7a:f3:26:d8:1a:ce:03:6c:02:4c:28:77:a9:
         bf:fa:5e:da:ac:9a:26:06:d2:e0:7b:e3:99:ef:9f:a9:cc:ac:
         23:57:28:16:8d:bc:ac:2b:e6:7a:58:d6:0e:00:73:47:e8:7b:
         ef:55:4c:f4:7a:1d:ab:80:73:36:88:51:c7:3e:05:65:91:67:
         3a:54:d8:86:52:63:f9:82:de:9d:b9:49:84:64:43:2a:63:b0:
         46:cb:d4:11:c3:91:f7:c9:a2:e7:38:5f:d3:c5:90:c0:cf:ae:
         86:84:3a:fc:d3:58:a5:51:10:32:90:a1:e9:23:07:d0:d5:9f:
         b7:85:af:58:4a:a9:16:78:0f:35:25:74:16:9c:d9:34:d0:49:
         51:af:08:2c:a5:21:05:29:7b:fd:f4:61:ee:5c:82:77:49:a5:
         17:42:42:29:ef:0a:7a:ec:e1:ae:61:5b:13:27:02:fe:17:cd:
         f3:0a:a7:02:81:a7:fb:44:9c:13:c7:f6:98:f4:76:05:86:42:
         1f:94:3b:5d:e9:8c:d2:e3:57:96:03:9a:e8:83:a0:14:48:d5:
         b7:54:a6:29:89:53:24:68:a4:a7:38:0d:a6:8a:6d:a9:45:bd:
         a7:cb:34:51:ec:7b:08:4d:fc:16:26:5d:67:9b:96:8b:1c:d3:
         fa:b1:50:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:54:26 2026 by rpki-client