Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a3a2f33332d3333203d3e20323638383739.roa
File:                     323830343a356266343a3a2f33332d3333203d3e20323638383739.roa (raw, json)
Hash identifier:          sjwsC3xR5g/qcdeZEh3i0oTqLGv4roYa5hNYxJqAv8I=
Subject key identifier:   A7:5B:6D:C8:39:62:A9:70:6D:CA:48:BD:9A:AD:A4:06:95:56:4F:69
Certificate issuer:       /CN=28C4721E667593A43DA7832F588E6B6B8F57311C
Certificate serial:       3B0AEE1647D34A8B6C20D121C2A2D5E821381076
Authority key identifier: 28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a3a2f33332d3333203d3e20323638383739.roa
Signing time:             Thu 05 Feb 2026 07:29:24 +0000
ROA not before:           Thu 05 Feb 2026 07:24:24 +0000
ROA not after:            Thu 04 Feb 2027 07:29:24 +0000
asID:                     268879
IP address blocks:        2804:5bf4::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl
                          rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 10:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0a:ee:16:47:d3:4a:8b:6c:20:d1:21:c2:a2:d5:e8:21:38:10:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C4721E667593A43DA7832F588E6B6B8F57311C
        Validity
            Not Before: Feb  5 07:24:24 2026 GMT
            Not After : Feb  4 07:29:24 2027 GMT
        Subject: CN=A75B6DC83962A9706DCA48BD9AADA40695564F69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c4:0d:22:9c:1e:d2:b0:31:64:74:b0:00:2e:
                    13:2a:5c:0a:7a:05:8f:61:28:c5:7c:22:ee:6b:82:
                    41:5d:61:7d:83:7e:59:6e:1e:ab:60:2f:cf:21:17:
                    30:1a:12:b6:73:c2:63:b1:1a:06:55:65:7c:3f:41:
                    b2:12:93:d4:ed:0f:a7:77:6c:44:8a:78:15:03:a7:
                    1d:e5:99:30:ff:30:18:98:f8:b8:57:dc:29:98:16:
                    e8:18:e0:0e:93:17:60:a0:3b:37:cf:30:7e:1a:85:
                    09:fc:34:60:3b:78:2b:a3:80:de:d2:7a:24:bf:20:
                    5e:22:64:8a:66:8b:c5:bf:c2:ea:d9:bd:bf:14:94:
                    cf:f4:56:b7:42:89:b1:dd:05:13:90:09:49:81:1d:
                    58:83:a5:d7:7c:90:bb:ac:14:83:df:e3:f6:9d:29:
                    19:dd:cc:0c:1c:a7:97:d4:2a:8c:3b:21:83:54:5e:
                    24:9c:88:c9:d3:e6:be:f7:e1:62:d0:08:60:2a:52:
                    5b:5d:3e:08:f9:68:62:f9:51:6a:4a:3c:65:20:b8:
                    3a:af:5c:9d:d6:37:b9:92:37:ef:8a:b8:aa:99:20:
                    86:33:99:fc:45:8f:07:41:65:61:d6:55:78:77:bf:
                    08:9e:01:36:79:e4:be:24:d9:77:91:fc:8c:b7:c3:
                    9a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5B:6D:C8:39:62:A9:70:6D:CA:48:BD:9A:AD:A4:06:95:56:4F:69
            X509v3 Authority Key Identifier:
                keyid:28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a3a2f33332d3333203d3e20323638383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bf4::/33

    Signature Algorithm: sha256WithRSAEncryption
         43:3f:fe:ec:a8:91:60:6e:8c:71:1e:f6:01:e9:3f:50:bf:c6:
         f9:ee:7a:23:07:1c:9b:06:db:86:cb:85:c0:f6:31:58:e0:c5:
         fd:4d:8f:77:31:4f:f0:05:9f:5c:ce:0e:fe:92:d7:72:a8:74:
         d3:60:35:2b:da:98:21:01:fe:b8:9b:4b:29:7d:34:9e:42:c5:
         55:f8:f0:42:ec:09:16:1b:e6:70:bd:c1:88:93:f2:ab:d8:51:
         a2:01:9e:be:cf:8d:ed:5b:a9:c5:ce:bc:8f:ac:f8:68:85:d4:
         62:3f:51:23:78:7a:4d:5b:77:7d:0d:06:8c:91:c5:84:38:5a:
         05:84:48:c8:a7:3c:9c:ea:c8:3c:ba:1a:39:3e:e1:dc:97:3b:
         87:37:d4:84:d3:fd:8f:30:b7:4a:00:c1:17:72:91:f5:eb:92:
         40:61:3e:af:d3:d0:bb:a9:85:c4:1d:d2:1c:90:4e:e3:62:58:
         e2:78:30:27:f5:ad:e0:5b:a1:ae:af:e5:ec:9b:09:d1:b0:1b:
         87:eb:1a:16:cd:58:37:d3:2a:09:91:46:46:89:cd:be:e3:85:
         7c:b8:a4:b6:3c:5e:48:a7:af:bf:9e:ff:4c:42:92:bf:ee:9b:
         7f:cc:0a:51:88:65:61:aa:16:70:86:e0:7d:ec:8f:63:c3:fb:
         00:67:6b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:53:56 2026 by rpki-client