Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/323830343a343133343a3a2f33322d3332203d3e20323636303130.roa
File:                     323830343a343133343a3a2f33322d3332203d3e20323636303130.roa (raw, json)
Hash identifier:          xQFs0VD4KFGXPzA/wISbCLnAM/sEAG8Fy3fYaEBznbQ=
Subject key identifier:   D5:5E:D4:55:B8:1F:32:D1:BD:79:78:C1:12:05:57:D7:7B:4F:9F:D7
Certificate issuer:       /CN=D27F46706288934EA75FEFCBDB933497E0E92077
Certificate serial:       3EEED0FE3F1ABBE19D810A1E902DF05F645BE9A1
Authority key identifier: D2:7F:46:70:62:88:93:4E:A7:5F:EF:CB:DB:93:34:97:E0:E9:20:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27F46706288934EA75FEFCBDB933497E0E92077.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/323830343a343133343a3a2f33322d3332203d3e20323636303130.roa
Signing time:             Wed 04 Feb 2026 21:00:08 +0000
ROA not before:           Wed 04 Feb 2026 20:55:08 +0000
ROA not after:            Wed 03 Feb 2027 21:00:08 +0000
asID:                     266010
IP address blocks:        2804:4134::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/D27F46706288934EA75FEFCBDB933497E0E92077.crl
                          rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/D27F46706288934EA75FEFCBDB933497E0E92077.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27F46706288934EA75FEFCBDB933497E0E92077.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ee:d0:fe:3f:1a:bb:e1:9d:81:0a:1e:90:2d:f0:5f:64:5b:e9:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D27F46706288934EA75FEFCBDB933497E0E92077
        Validity
            Not Before: Feb  4 20:55:08 2026 GMT
            Not After : Feb  3 21:00:08 2027 GMT
        Subject: CN=D55ED455B81F32D1BD7978C1120557D77B4F9FD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5d:91:5a:e0:f5:f2:56:ec:a5:d0:1c:56:4e:
                    09:64:63:56:56:f0:cf:1a:e7:43:82:d6:de:fe:c2:
                    f3:56:92:22:60:95:cf:ce:08:66:19:cd:56:a3:47:
                    b7:9a:1b:63:0b:b1:db:36:0b:70:79:f8:d0:1d:61:
                    e0:34:5d:ba:1e:a2:d6:00:c5:d0:6b:5e:87:b5:97:
                    98:44:71:99:e0:9d:b2:19:58:31:02:8c:5c:d8:9d:
                    24:ca:1d:6a:7d:0e:3b:5d:00:0c:b9:e4:99:fd:64:
                    4d:37:27:66:ad:56:49:ce:b4:9f:24:59:90:5c:21:
                    5e:5e:d3:50:4b:29:07:cf:82:2b:93:6c:92:ec:5c:
                    4e:60:19:83:2d:76:e1:3e:25:68:93:4e:e8:68:e6:
                    b0:50:8a:fc:31:4a:32:5b:01:e7:3e:61:2d:58:3f:
                    42:72:4b:33:b4:78:29:00:76:47:ac:d9:4d:2e:0e:
                    ff:90:7b:9f:fb:8b:38:8a:1b:be:90:34:f7:a6:e4:
                    8b:2c:3d:d2:2b:3f:f0:f4:d8:cb:ce:e2:f6:2c:4f:
                    b1:44:66:ab:c5:6b:cf:7a:44:f0:42:28:d8:52:c6:
                    7b:e9:db:45:03:2f:ed:d2:25:18:bd:52:52:68:b0:
                    42:6c:6a:54:b2:03:b0:bb:a0:66:ed:fb:84:58:d4:
                    75:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5E:D4:55:B8:1F:32:D1:BD:79:78:C1:12:05:57:D7:7B:4F:9F:D7
            X509v3 Authority Key Identifier:
                keyid:D2:7F:46:70:62:88:93:4E:A7:5F:EF:CB:DB:93:34:97:E0:E9:20:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/D27F46706288934EA75FEFCBDB933497E0E92077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27F46706288934EA75FEFCBDB933497E0E92077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/323830343a343133343a3a2f33322d3332203d3e20323636303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4134::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:7c:2e:ee:37:f4:f0:4f:dd:ed:ab:17:e7:74:c8:4c:8f:43:
         a4:62:e2:ce:73:59:d1:47:6f:5d:01:39:fa:ab:e1:98:69:40:
         8d:31:c4:a8:84:58:84:be:a4:47:30:88:1e:30:9f:4a:99:7c:
         51:72:27:bb:8a:48:2c:80:a4:75:f3:d5:fe:53:44:2c:98:14:
         9c:92:9c:7a:a5:10:6a:45:e4:e1:a5:0e:2c:75:20:cb:6c:b4:
         b0:ef:8a:32:0e:9a:23:11:e0:84:00:91:bc:83:f1:c6:a6:94:
         11:b9:67:99:15:76:46:9c:5f:b5:c9:0b:f6:db:c1:7b:c4:ab:
         85:2f:b1:e8:94:50:a3:f5:bd:de:ef:4c:f1:47:53:4b:75:11:
         84:a6:eb:2c:19:88:2e:91:99:56:ca:94:36:1e:b1:f0:6a:17:
         53:a4:3b:b4:ae:85:e0:51:29:6b:60:06:47:37:bd:65:a4:2f:
         99:40:6a:67:16:bd:69:38:35:99:92:54:7b:61:38:56:45:a3:
         ca:94:1e:ae:b0:6c:8d:c2:40:76:3d:58:3d:c1:dc:c1:fa:6e:
         85:d7:98:1c:f6:f2:0b:a4:f0:c0:c7:a8:c9:f0:6b:8f:7c:e7:
         ca:ac:a8:54:30:82:52:67:23:6f:20:7f:f0:a1:68:63:be:b4:
         5f:8d:69:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:47:58 2026 by rpki-client