Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/323830343a376539303a3a2f33322d3332203d3e20323731363332.roa
File:                     323830343a376539303a3a2f33322d3332203d3e20323731363332.roa (raw, json)
Hash identifier:          6ndzO9TXLBYlKyQaJ9NSMgtV58vadj+h/xitsv+UAs8=
Subject key identifier:   87:50:D2:FF:1B:B9:6A:04:9C:70:4D:7F:08:FA:77:DD:62:E9:FA:7D
Certificate issuer:       /CN=450D2460BB579B573599E83A5DA3018696A0F8F6
Certificate serial:       7AA21138BDCA2AB8A8E506FDE205143C6139D37C
Authority key identifier: 45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/323830343a376539303a3a2f33322d3332203d3e20323731363332.roa
Signing time:             Thu 05 Feb 2026 18:29:44 +0000
ROA not before:           Thu 05 Feb 2026 18:24:44 +0000
ROA not after:            Thu 04 Feb 2027 18:29:44 +0000
asID:                     271632
IP address blocks:        2804:7e90::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl
                          rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 16:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a2:11:38:bd:ca:2a:b8:a8:e5:06:fd:e2:05:14:3c:61:39:d3:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450D2460BB579B573599E83A5DA3018696A0F8F6
        Validity
            Not Before: Feb  5 18:24:44 2026 GMT
            Not After : Feb  4 18:29:44 2027 GMT
        Subject: CN=8750D2FF1BB96A049C704D7F08FA77DD62E9FA7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4d:3c:c5:2a:24:f5:e0:f9:5e:fd:93:42:1f:
                    5e:69:15:bc:2a:e0:d8:26:a1:f6:8e:d4:b1:b6:6f:
                    e7:a8:c0:8d:21:ea:45:a1:c8:37:75:72:42:34:56:
                    9e:d8:1f:c5:dc:91:a7:73:7d:89:96:20:38:e4:f9:
                    de:75:ac:a1:3e:94:c1:f6:71:b0:24:c6:90:25:79:
                    03:78:8d:37:12:7b:d1:8e:34:0c:33:37:0c:23:b2:
                    54:56:43:b6:1c:5a:09:ab:ea:c3:66:b9:f6:64:41:
                    26:c0:8e:2d:69:68:fd:63:c3:e6:d0:d8:52:bb:c6:
                    ab:88:e1:ef:b8:44:ef:54:23:7d:78:5c:8c:45:53:
                    0c:1b:d1:6a:cd:ef:fc:07:29:94:f8:ca:6e:a7:cc:
                    67:0a:40:94:6f:45:ac:10:a3:1c:de:40:39:6f:49:
                    f8:48:20:41:6b:53:3b:89:57:8c:fe:6e:20:3d:d9:
                    ae:76:99:31:b3:e7:f4:08:9f:71:74:83:d9:e9:1c:
                    71:61:73:34:75:0f:c0:e8:39:d7:d8:39:41:19:c3:
                    2c:53:f1:21:b9:06:17:f4:40:3f:cf:5a:34:6a:24:
                    a2:db:e1:ac:12:e2:e9:8a:b8:de:60:eb:21:d0:0f:
                    97:6f:aa:d3:0c:7a:8e:5c:4e:40:bd:b7:28:07:e4:
                    c2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:50:D2:FF:1B:B9:6A:04:9C:70:4D:7F:08:FA:77:DD:62:E9:FA:7D
            X509v3 Authority Key Identifier:
                keyid:45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/323830343a376539303a3a2f33322d3332203d3e20323731363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e90::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:6c:b8:da:01:e3:38:61:91:6f:b8:64:e8:eb:61:36:e7:88:
         24:b9:85:fb:2e:54:73:c7:81:bf:27:5d:35:0b:48:3a:53:d9:
         3e:36:6d:05:8d:69:59:65:fa:35:87:50:f1:4b:6b:e5:76:09:
         25:d7:3d:f4:37:50:f9:7e:8a:9f:9d:45:b5:36:38:66:6f:e1:
         7c:df:8b:3e:71:fe:e3:b7:ea:c7:75:f8:f2:dd:e7:fc:b5:eb:
         03:27:ea:60:74:5f:66:03:ce:40:0a:4d:46:a4:1c:20:75:a3:
         68:b9:e5:04:80:b0:4c:68:dc:3e:b6:ad:3d:d2:a1:93:73:7f:
         3d:d9:0f:9d:c1:1c:36:2b:39:01:3f:52:62:13:5e:b7:34:0e:
         24:4a:82:c1:88:b4:85:7a:e2:27:d6:04:18:ac:3f:47:b5:df:
         cd:c3:44:4b:79:95:da:eb:bf:18:c3:78:81:5a:3c:b3:bf:cb:
         f8:2d:16:4a:c0:18:79:be:3a:b5:1b:71:08:63:f9:2e:f3:41:
         39:2b:bb:59:35:85:64:56:d3:23:04:ab:d6:c6:1c:21:e6:9c:
         f7:43:16:15:65:04:a2:f0:be:17:dc:db:53:cc:32:10:c5:15:
         35:d4:11:9d:81:53:80:90:e4:37:e0:0b:24:d6:f4:d4:e0:fb:
         29:09:d2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:23:11 2026 by rpki-client