Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a323030303a3a2f33352d3335203d3e20323733363036.roa
File:                     323830343a383937383a323030303a3a2f33352d3335203d3e20323733363036.roa (raw, json)
Hash identifier:          gRlq9w0odYTXdASi3ZgJ/0nh2fnS7LiQKeIF4pAlLFo=
Subject key identifier:   F1:F5:2F:B1:64:B5:96:C2:CD:EB:FA:6E:8F:04:4B:3C:A9:45:32:7F
Certificate issuer:       /CN=E4ED504E9F98DC971B6C70D41D971F5CE49587C8
Certificate serial:       6A3F11BB05394793659FA5DB547E8FB6DF63CC9C
Authority key identifier: E4:ED:50:4E:9F:98:DC:97:1B:6C:70:D4:1D:97:1F:5C:E4:95:87:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4ED504E9F98DC971B6C70D41D971F5CE49587C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a323030303a3a2f33352d3335203d3e20323733363036.roa
Signing time:             Mon 19 Jan 2026 23:16:34 +0000
ROA not before:           Mon 19 Jan 2026 23:11:34 +0000
ROA not after:            Mon 18 Jan 2027 23:16:34 +0000
asID:                     273606
IP address blocks:        2804:8978:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/E4ED504E9F98DC971B6C70D41D971F5CE49587C8.crl
                          rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/E4ED504E9F98DC971B6C70D41D971F5CE49587C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4ED504E9F98DC971B6C70D41D971F5CE49587C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:3f:11:bb:05:39:47:93:65:9f:a5:db:54:7e:8f:b6:df:63:cc:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4ED504E9F98DC971B6C70D41D971F5CE49587C8
        Validity
            Not Before: Jan 19 23:11:34 2026 GMT
            Not After : Jan 18 23:16:34 2027 GMT
        Subject: CN=F1F52FB164B596C2CDEBFA6E8F044B3CA945327F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:50:d4:1a:a4:c1:c0:2f:7c:6d:7f:59:d7:2b:
                    98:5e:58:14:50:a4:85:87:5e:4c:ac:a7:e8:6b:7f:
                    69:c5:9b:0b:5c:a6:11:b7:5c:66:c6:8f:fb:a4:d6:
                    f8:14:c8:55:b8:c8:53:75:88:3a:f1:f7:b1:29:ec:
                    67:53:a0:72:9f:76:0b:cd:0f:e8:d1:b4:c4:bd:79:
                    f6:c8:a5:f9:2f:9b:5f:98:3a:48:e9:c6:60:31:50:
                    92:10:af:a8:5e:e1:54:cb:0a:7e:2a:b7:49:80:cf:
                    29:4c:a2:b8:49:94:c6:a0:cd:83:65:eb:48:ad:42:
                    45:77:bf:e9:1c:29:23:c6:d1:cd:f4:cb:c0:21:2b:
                    71:ea:83:60:55:79:d4:5c:1b:0d:7a:2a:00:59:da:
                    b4:b3:4e:28:d7:04:c8:b3:47:95:c6:c4:06:f4:7f:
                    84:75:fa:9d:24:63:06:aa:c9:c8:ff:b9:f2:ed:f3:
                    2e:a9:3c:df:85:07:af:2e:70:3b:6b:d9:b3:7f:bd:
                    60:1e:75:bf:c1:0f:58:5a:0f:80:12:f2:3e:ec:50:
                    b1:16:79:38:cd:cc:68:7e:d0:67:07:48:db:e6:e1:
                    a0:00:fd:c1:51:c2:eb:fe:54:6c:9b:8c:2a:e0:df:
                    96:19:9f:87:76:f9:ec:a7:82:02:26:67:4d:4a:ba:
                    21:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F5:2F:B1:64:B5:96:C2:CD:EB:FA:6E:8F:04:4B:3C:A9:45:32:7F
            X509v3 Authority Key Identifier:
                keyid:E4:ED:50:4E:9F:98:DC:97:1B:6C:70:D4:1D:97:1F:5C:E4:95:87:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/E4ED504E9F98DC971B6C70D41D971F5CE49587C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4ED504E9F98DC971B6C70D41D971F5CE49587C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a323030303a3a2f33352d3335203d3e20323733363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8978:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         03:fc:dc:ac:16:8f:de:ca:3b:98:93:78:65:45:86:f2:4a:2b:
         61:a8:ce:cb:2e:af:77:6c:52:d4:9c:b4:97:0b:c8:48:bf:0f:
         77:21:03:65:83:9e:0b:0f:e6:c8:4f:16:1e:07:36:9f:6c:b8:
         92:1b:69:fa:ed:19:26:f9:3b:8c:7a:80:5e:43:2c:4c:28:7b:
         4e:38:7f:6f:9a:f0:0b:a3:cc:46:94:89:53:5b:ab:dd:3c:a1:
         94:1b:f9:1f:77:f2:cd:97:a9:a9:cd:61:f8:0a:0d:ef:39:f6:
         6e:0e:d9:dd:60:15:6f:7a:2e:16:f1:dd:d9:f0:24:f6:0f:61:
         b5:e0:ea:9e:fd:bb:3a:be:fe:8e:5c:a6:3d:fe:69:c7:75:39:
         d6:43:73:6d:7e:df:e0:b2:80:78:b1:3a:da:61:c8:dc:eb:8e:
         57:a0:58:bc:9c:49:93:43:15:b1:c0:99:93:5c:c9:01:9a:10:
         bb:dc:a5:2e:88:11:ff:00:58:88:f9:b8:bf:34:18:19:39:3d:
         f7:81:0d:64:85:7f:a0:5e:e3:5a:06:a6:46:b7:e1:7a:a2:80:
         ba:5a:ef:27:00:99:e4:81:b6:1d:11:3e:49:bd:f1:d5:21:77:
         6e:2e:8c:d1:68:b7:11:8f:0a:e7:e8:f5:4d:49:c5:0a:7e:b3:
         db:59:17:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:54:23 2026 by rpki-client