Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/323830343a353838343a343030303a3a2f33342d3334203d3e20323638313334.roa
File:                     323830343a353838343a343030303a3a2f33342d3334203d3e20323638313334.roa (raw, json)
Hash identifier:          gQ0lkMv0KxAkAI1IKMzdjiiCUK+8nt1ATnoZZ5dvEl4=
Subject key identifier:   85:50:03:80:43:D9:1F:AD:43:72:06:DF:2C:25:62:2A:9F:B1:35:5A
Certificate issuer:       /CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
Certificate serial:       1DA5B7E3D2F2D2E382653A9FA7B9D4EB7BDDCF32
Authority key identifier: F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/323830343a353838343a343030303a3a2f33342d3334203d3e20323638313334.roa
Signing time:             Thu 05 Feb 2026 14:48:51 +0000
ROA not before:           Thu 05 Feb 2026 14:43:51 +0000
ROA not after:            Thu 04 Feb 2027 14:48:51 +0000
asID:                     268134
IP address blocks:        2804:5884:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl
                          rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 15:21:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a5:b7:e3:d2:f2:d2:e3:82:65:3a:9f:a7:b9:d4:eb:7b:dd:cf:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
        Validity
            Not Before: Feb  5 14:43:51 2026 GMT
            Not After : Feb  4 14:48:51 2027 GMT
        Subject: CN=8550038043D91FAD437206DF2C25622A9FB1355A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5a:5d:cb:9c:e9:c9:7d:3b:1d:30:d1:30:52:
                    7a:de:26:f8:b0:5e:a8:44:0a:57:f2:c3:87:27:cd:
                    0a:c4:dd:ee:41:b2:16:92:4b:41:5d:6b:66:cd:c6:
                    59:0b:42:a5:88:c8:90:84:31:a3:9d:de:ba:40:46:
                    09:52:f3:4a:eb:96:b1:7a:07:4f:69:a1:65:22:0b:
                    3d:ee:74:2f:56:00:b6:5c:59:9e:a4:2b:26:75:61:
                    62:c9:cd:bd:b8:f3:1f:b9:12:40:a3:4d:dc:e5:3c:
                    3d:42:be:38:68:09:db:15:74:f9:20:86:f1:b4:3c:
                    59:67:40:85:09:be:e9:94:d3:49:dd:6c:23:55:36:
                    8e:8f:de:60:c3:6a:6d:87:9d:21:8c:9f:48:8f:e9:
                    3b:75:6d:bf:ea:ef:f5:4b:64:34:2d:78:00:c6:6a:
                    40:2b:c9:06:16:17:13:6c:19:83:07:f4:c1:fe:bc:
                    8e:4c:f7:d7:b4:91:1c:1f:b6:98:70:3a:ee:1a:36:
                    62:23:de:53:59:b1:27:b9:97:0b:c9:86:d4:6d:ac:
                    26:4b:2f:37:18:e6:56:d1:c5:03:19:5c:2c:8e:91:
                    a8:71:85:06:ae:43:69:ab:e7:87:85:1c:88:af:db:
                    19:34:5e:63:6b:ef:ce:58:01:ad:90:2c:51:2a:67:
                    60:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:50:03:80:43:D9:1F:AD:43:72:06:DF:2C:25:62:2A:9F:B1:35:5A
            X509v3 Authority Key Identifier:
                keyid:F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/323830343a353838343a343030303a3a2f33342d3334203d3e20323638313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5884:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0c:36:8c:73:8a:e8:b3:dc:35:8e:84:27:c3:37:63:99:3f:34:
         57:00:a5:8c:d5:0f:ec:24:74:fe:70:3a:cc:46:40:56:c2:e6:
         5e:95:53:81:3a:90:7e:d2:87:19:5b:56:66:43:30:ce:13:02:
         51:f0:86:6e:b4:56:48:9f:73:3d:38:d8:0d:e5:0b:11:ec:c2:
         41:e7:82:ea:20:c9:09:67:44:fa:1b:59:cc:f8:a4:fa:51:62:
         41:d0:3f:7c:d4:4f:41:01:b8:f2:94:7c:36:0f:6f:e8:e8:63:
         be:c0:87:57:7b:ba:23:22:ec:df:14:e6:48:35:d8:a8:48:20:
         dc:25:14:6a:6b:7a:51:5e:04:27:7a:a6:e6:80:a1:e4:4b:f8:
         e7:43:96:1b:55:33:f5:11:37:c6:92:6e:7b:dc:57:e5:75:37:
         0c:74:43:3d:bf:19:45:62:3f:78:77:10:42:1c:f0:ae:c3:91:
         99:fd:14:6a:e5:8e:40:92:54:52:e2:03:f3:ea:10:43:f7:13:
         bc:30:86:d4:b6:98:e2:fa:8f:4c:a7:9f:9a:73:6f:23:01:c6:
         6c:c4:61:91:ea:e8:f9:a1:b5:bc:82:40:ca:95:49:c2:bf:ce:
         2d:71:66:dd:2c:a3:a8:46:28:aa:dd:ab:26:85:19:aa:79:20:
         8b:ae:cd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:23:29 2026 by rpki-client