Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a383030303a3a2f33332d3333203d3e20323638383739.roa
File:                     323830343a356266343a383030303a3a2f33332d3333203d3e20323638383739.roa (raw, json)
Hash identifier:          3RWJHTSdTyskwfaY3z6q0kBm4cVeJ8+3lGMN78ZNBpQ=
Subject key identifier:   E8:C3:C0:78:78:51:69:00:C4:0F:16:83:67:F0:44:80:42:93:7B:8B
Certificate issuer:       /CN=28C4721E667593A43DA7832F588E6B6B8F57311C
Certificate serial:       252CA9C376F776A743FDD306AB58B6CD80F2AD36
Authority key identifier: 28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a383030303a3a2f33332d3333203d3e20323638383739.roa
Signing time:             Thu 05 Feb 2026 07:29:24 +0000
ROA not before:           Thu 05 Feb 2026 07:24:24 +0000
ROA not after:            Thu 04 Feb 2027 07:29:24 +0000
asID:                     268879
IP address blocks:        2804:5bf4:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl
                          rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:2c:a9:c3:76:f7:76:a7:43:fd:d3:06:ab:58:b6:cd:80:f2:ad:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C4721E667593A43DA7832F588E6B6B8F57311C
        Validity
            Not Before: Feb  5 07:24:24 2026 GMT
            Not After : Feb  4 07:29:24 2027 GMT
        Subject: CN=E8C3C07878516900C40F168367F0448042937B8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:37:6a:75:d1:c2:04:1f:e8:ad:70:76:09:72:
                    94:24:4b:11:e3:8d:83:15:10:38:1d:6b:93:c7:53:
                    68:6c:f7:4b:d3:ea:91:ee:10:09:74:a6:ae:ed:bd:
                    c4:ec:be:22:46:43:83:3d:13:a5:19:7f:ed:68:62:
                    db:57:c1:25:09:9e:79:72:ec:65:91:eb:29:1c:7c:
                    73:93:d5:13:30:79:fc:af:7e:f4:62:01:e1:e6:9b:
                    c8:ed:78:1d:a4:bf:8d:f8:77:10:f0:d8:68:a7:91:
                    21:e5:37:7a:a9:4a:05:43:46:3a:eb:09:3f:b0:d3:
                    db:f9:10:0f:f7:77:39:00:8e:c4:fe:b1:bf:e9:ef:
                    a3:52:67:7b:19:f4:c7:c4:63:c5:37:a7:fe:b7:0e:
                    81:44:10:20:84:85:39:18:29:6c:15:01:e2:cb:36:
                    29:91:98:15:35:7d:ea:d1:13:c3:1f:70:5e:70:8f:
                    a0:2f:d0:bc:c0:0c:7f:80:24:29:c0:a5:0f:84:c3:
                    b5:f0:1e:2b:88:ff:4b:bc:ad:20:d2:46:2d:37:91:
                    7e:d3:7f:e9:10:56:54:3e:6d:3b:3b:23:7e:79:f0:
                    b8:48:7a:67:a4:ea:e1:3b:57:f7:a6:1b:19:a4:09:
                    1f:a0:31:a3:2d:af:42:65:32:19:b6:bc:35:af:c9:
                    ac:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C3:C0:78:78:51:69:00:C4:0F:16:83:67:F0:44:80:42:93:7B:8B
            X509v3 Authority Key Identifier:
                keyid:28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a383030303a3a2f33332d3333203d3e20323638383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bf4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8d:96:a1:b8:2f:b8:0a:61:f0:af:4c:8d:0d:1a:0e:0d:37:10:
         9b:e9:2e:d4:7b:05:24:04:a8:6b:8a:f9:c6:7c:1d:6e:d8:d9:
         01:bd:fc:22:ec:5e:3d:3a:aa:e0:7f:09:76:a2:35:0b:cb:6d:
         cd:88:3d:2e:88:84:ca:29:2b:2e:df:9d:ea:14:d2:57:a1:df:
         92:57:e9:1a:4b:0f:79:60:4b:09:09:cb:5a:b8:0e:9a:75:58:
         41:99:28:d3:63:83:7d:75:4c:5e:82:6c:54:e7:83:6a:dd:9a:
         e4:0c:31:a7:0e:35:a4:07:5a:28:4c:05:9c:a6:e8:9b:0e:d5:
         cb:f2:6d:92:39:05:e9:34:fb:32:d8:aa:39:19:9e:28:67:04:
         7f:fa:0c:77:f6:2e:ba:d2:a2:84:91:04:41:0d:75:d5:78:da:
         a3:be:d9:df:c5:57:41:a8:2f:21:13:99:69:15:ac:d6:1f:b2:
         05:9d:e5:0b:ae:bf:ff:a8:81:21:2b:0c:42:cf:ab:f1:51:2a:
         b8:4a:12:84:b9:45:6a:15:eb:6f:83:1f:af:b3:81:25:aa:b8:
         7d:5f:c5:0d:fe:be:3c:19:61:77:e3:bc:28:2e:78:95:14:c7:
         67:fa:6d:45:f4:e0:9a:5b:e2:90:e0:ab:08:9b:5d:c9:c4:6a:
         7c:12:f9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:15:58 2026 by rpki-client