Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a3a2f33352d3335203d3e20323733363036.roa
File:                     323830343a383937383a3a2f33352d3335203d3e20323733363036.roa (raw, json)
Hash identifier:          v4cGiRJa6NOA1WVRAgZVabzd/bxC+qyQo6zbgP+1RXk=
Subject key identifier:   EB:79:79:FF:8A:48:C0:24:7E:FA:80:FC:A5:4A:01:3E:D3:FB:A8:AF
Certificate issuer:       /CN=E4ED504E9F98DC971B6C70D41D971F5CE49587C8
Certificate serial:       2FAD2AB9B2115C64CCAE890857DB76D8E59E5E8C
Authority key identifier: E4:ED:50:4E:9F:98:DC:97:1B:6C:70:D4:1D:97:1F:5C:E4:95:87:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4ED504E9F98DC971B6C70D41D971F5CE49587C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a3a2f33352d3335203d3e20323733363036.roa
Signing time:             Mon 19 Jan 2026 23:16:33 +0000
ROA not before:           Mon 19 Jan 2026 23:11:33 +0000
ROA not after:            Mon 18 Jan 2027 23:16:33 +0000
asID:                     273606
IP address blocks:        2804:8978::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/E4ED504E9F98DC971B6C70D41D971F5CE49587C8.crl
                          rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/E4ED504E9F98DC971B6C70D41D971F5CE49587C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4ED504E9F98DC971B6C70D41D971F5CE49587C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ad:2a:b9:b2:11:5c:64:cc:ae:89:08:57:db:76:d8:e5:9e:5e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4ED504E9F98DC971B6C70D41D971F5CE49587C8
        Validity
            Not Before: Jan 19 23:11:33 2026 GMT
            Not After : Jan 18 23:16:33 2027 GMT
        Subject: CN=EB7979FF8A48C0247EFA80FCA54A013ED3FBA8AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4e:93:37:29:d6:04:36:21:a4:f9:98:6e:e8:
                    17:d3:a8:4f:69:c1:89:4a:2b:1e:e8:8c:47:09:4b:
                    6e:91:0e:3c:8b:dc:7b:e5:6c:27:59:4c:72:23:61:
                    42:a8:e0:0b:f2:e8:29:15:9a:e1:13:6a:d0:23:cb:
                    73:6f:f3:b0:34:bc:48:c8:0c:5f:bc:28:71:7f:4b:
                    04:0a:b0:d1:83:bb:f0:c7:6a:0a:29:67:44:10:60:
                    f8:db:a5:17:6e:e8:62:12:d5:dd:49:fc:bd:f4:94:
                    c4:c9:b6:30:ea:40:6a:d4:6d:8e:c1:82:d8:a1:6d:
                    e8:b1:a5:82:84:7d:f2:f0:01:63:52:2a:d8:5d:24:
                    27:9e:69:89:91:3d:1f:60:1f:e3:0e:1d:cc:f6:2c:
                    fb:3e:21:52:4a:dd:6f:ca:b1:1a:79:e1:40:2c:6e:
                    10:4e:06:06:53:6c:95:03:b1:fe:55:0a:3b:7e:df:
                    5b:79:99:1c:80:09:f3:17:b7:a1:7e:8f:f0:b7:0e:
                    1f:b3:1a:c1:c1:8b:5a:b0:f2:fc:9f:a7:97:16:40:
                    a0:59:49:03:a6:07:e3:23:27:23:cb:cb:a3:41:b9:
                    f9:ee:19:aa:d6:48:44:bd:92:b6:16:0c:46:d0:ee:
                    75:88:1d:3e:91:a8:a9:18:86:8f:0f:9b:be:14:cd:
                    6f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:79:79:FF:8A:48:C0:24:7E:FA:80:FC:A5:4A:01:3E:D3:FB:A8:AF
            X509v3 Authority Key Identifier:
                keyid:E4:ED:50:4E:9F:98:DC:97:1B:6C:70:D4:1D:97:1F:5C:E4:95:87:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/E4ED504E9F98DC971B6C70D41D971F5CE49587C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4ED504E9F98DC971B6C70D41D971F5CE49587C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a3a2f33352d3335203d3e20323733363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8978::/35

    Signature Algorithm: sha256WithRSAEncryption
         a1:a6:dd:e4:d7:8b:c4:eb:4d:4f:c2:4f:3f:fa:26:78:ee:30:
         ba:55:9a:5a:46:40:0a:46:33:f6:c3:cb:b2:1e:20:77:72:65:
         35:f3:f0:d7:e5:2d:68:78:ef:d2:7c:f4:73:9c:f9:4b:fb:be:
         85:f5:67:bf:56:ea:1f:62:43:59:e1:20:bd:b5:5b:30:46:d7:
         18:54:6d:06:a1:1a:52:07:4d:3a:11:70:a7:70:c9:5a:4c:d9:
         22:6d:0d:ca:9d:5f:8c:0d:fd:fd:0c:4c:cb:b7:d6:78:ba:75:
         e6:e9:f1:71:85:ed:48:9d:5d:17:1a:83:43:b0:90:b3:82:f6:
         dd:bf:db:2b:6f:38:02:07:4a:90:16:b6:98:38:06:8e:2e:e2:
         a7:ff:a1:ea:36:71:32:ea:1f:be:c4:0b:a9:6c:1f:e3:69:da:
         92:14:0b:1e:5f:37:23:79:0d:d2:60:64:33:8b:99:a5:4f:a5:
         a4:f8:9a:b3:76:d6:c2:b1:ad:2c:60:59:73:43:b0:6d:f0:43:
         9d:ce:ab:3f:c7:95:3e:3a:23:b2:c4:0c:dd:a0:2d:83:ff:96:
         5d:b5:4e:b9:0f:2e:63:d8:01:30:bc:88:64:0a:13:54:bf:8a:
         8b:30:1a:7a:b1:b1:9c:2d:d2:c0:a5:3c:fb:bb:a4:f5:e2:6b:
         ca:66:b9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:42:22 2026 by rpki-client