Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/323830343a343965633a3a2f33322d3332203d3e20323637323039.roa
File:                     323830343a343965633a3a2f33322d3332203d3e20323637323039.roa (raw, json)
Hash identifier:          QirG2JYmQOZXRr3KWSOwye8Le4T/WXeY639JGakihh8=
Subject key identifier:   68:63:58:64:0D:38:58:74:48:A1:ED:4A:09:48:E5:07:5A:AE:E5:64
Certificate issuer:       /CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
Certificate serial:       37D208823B03B0EA999A75F38861061D94FD3F84
Authority key identifier: FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/323830343a343965633a3a2f33322d3332203d3e20323637323039.roa
Signing time:             Thu 05 Feb 2026 11:53:59 +0000
ROA not before:           Thu 05 Feb 2026 11:48:59 +0000
ROA not after:            Thu 04 Feb 2027 11:53:59 +0000
asID:                     267209
IP address blocks:        2804:49ec::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl
                          rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:39:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d2:08:82:3b:03:b0:ea:99:9a:75:f3:88:61:06:1d:94:fd:3f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
        Validity
            Not Before: Feb  5 11:48:59 2026 GMT
            Not After : Feb  4 11:53:59 2027 GMT
        Subject: CN=686358640D38587448A1ED4A0948E5075AAEE564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9e:73:a6:58:f8:d2:df:59:ae:eb:57:e0:57:
                    38:66:a3:09:11:21:3c:a4:80:6a:f4:99:73:34:ad:
                    18:ab:8f:22:f5:fd:a0:1e:78:f9:51:98:44:c7:97:
                    bf:7e:93:18:1f:3c:17:c0:05:03:b8:3b:29:c9:44:
                    27:5c:dc:42:2b:bc:ae:42:16:ff:f6:64:43:41:f9:
                    d0:d7:97:ec:34:61:c3:70:34:d0:6c:a0:c1:ec:98:
                    c8:88:c2:0b:02:d4:3a:76:45:ab:d2:34:24:d9:e4:
                    95:99:68:6d:31:04:4f:67:58:22:3d:48:2d:8c:0f:
                    68:86:23:b3:62:db:e8:ea:f8:ba:96:8f:d2:38:6e:
                    08:34:3b:33:76:ad:48:b2:23:7e:3d:0d:83:32:0b:
                    cc:bd:27:53:42:c9:98:08:ff:04:26:8c:e4:8e:c9:
                    da:b1:7a:29:14:fc:7b:ac:e6:bc:9e:c0:99:c1:1f:
                    07:ed:fb:73:0e:6d:4c:81:91:4a:29:0d:cc:ff:bd:
                    9f:c9:a1:05:e1:f2:01:42:10:19:de:2a:ec:42:8c:
                    8f:e9:e8:52:87:df:7e:05:86:8f:d6:19:8d:77:2f:
                    61:ca:de:45:5f:9f:52:af:63:3e:62:a0:14:6a:af:
                    e9:78:3e:e1:a5:5f:b0:d8:72:d2:2f:18:69:ce:b0:
                    b5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:63:58:64:0D:38:58:74:48:A1:ED:4A:09:48:E5:07:5A:AE:E5:64
            X509v3 Authority Key Identifier:
                keyid:FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/323830343a343965633a3a2f33322d3332203d3e20323637323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:49ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:5a:a8:2c:96:ef:ed:1d:8e:44:77:32:e4:18:a2:e1:d9:35:
         0a:0c:97:0a:9e:a9:a0:21:48:bc:11:88:69:06:6c:7c:f3:33:
         eb:e0:6a:43:bc:29:a9:f6:66:71:30:49:c5:1e:d4:44:1f:d8:
         5b:16:56:72:49:3c:1a:7a:9a:8f:19:66:4a:97:16:b9:99:1b:
         a1:b1:45:f7:ab:70:9a:e6:c1:8f:37:92:35:32:34:97:7d:21:
         61:9f:d9:ce:5d:25:75:b4:cc:68:0d:d0:5e:32:7f:9b:1a:11:
         c5:0a:a2:73:6e:30:46:0e:a0:54:13:b0:cb:2a:e8:e7:9b:c3:
         09:3c:87:bb:48:58:2f:86:22:36:94:f3:5e:dd:60:cd:a5:3a:
         05:ac:f2:77:6f:a1:0e:58:3c:0d:4e:3a:9c:49:f6:1b:83:78:
         46:cb:06:a3:b9:74:40:b0:25:d6:aa:4c:7b:1f:48:eb:60:0f:
         da:16:06:93:54:16:71:eb:62:5d:41:55:86:f7:82:59:11:6c:
         db:7b:d9:b3:4e:a0:a8:5b:5e:35:47:b5:dd:9a:7d:e4:be:47:
         e3:ec:6f:4a:0b:d2:f4:54:1d:8d:2e:4b:24:03:64:ba:ac:b8:
         be:5c:57:62:74:f7:aa:8f:bc:8f:8b:57:52:85:a7:58:76:6d:
         dd:44:4c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:20:27 2026 by rpki-client