Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELoHNMKJLiPaz6tr74T1JMBJ1WX96cd58MNQduwscVmZ/1/323830343a343534343a3a2f33322d3438203d3e20323636393135.roa
File:                     323830343a343534343a3a2f33322d3438203d3e20323636393135.roa (raw, json)
Hash identifier:          EE13Xm7ltjcgYRjtYQwk2sE7F0aijA1RsmEYaC+1y7E=
Subject key identifier:   2C:C2:65:CE:0B:47:2C:69:3D:E2:32:BA:FB:A3:8B:EA:BB:7C:F9:0B
Certificate issuer:       /CN=FC73A4E31D0C1C361F3F55583E97E6B1BF5684DB
Certificate serial:       3E2AB58672D29E5327599F0241E6A1237221E741
Authority key identifier: FC:73:A4:E3:1D:0C:1C:36:1F:3F:55:58:3E:97:E6:B1:BF:56:84:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC73A4E31D0C1C361F3F55583E97E6B1BF5684DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELoHNMKJLiPaz6tr74T1JMBJ1WX96cd58MNQduwscVmZ/1/323830343a343534343a3a2f33322d3438203d3e20323636393135.roa
Signing time:             Wed 04 Feb 2026 22:37:09 +0000
ROA not before:           Wed 04 Feb 2026 22:32:09 +0000
ROA not after:            Wed 03 Feb 2027 22:37:09 +0000
asID:                     266915
IP address blocks:        2804:4544::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ELoHNMKJLiPaz6tr74T1JMBJ1WX96cd58MNQduwscVmZ/1/FC73A4E31D0C1C361F3F55583E97E6B1BF5684DB.crl
                          rsync://rpki-repo.registro.br/repo/ELoHNMKJLiPaz6tr74T1JMBJ1WX96cd58MNQduwscVmZ/1/FC73A4E31D0C1C361F3F55583E97E6B1BF5684DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC73A4E31D0C1C361F3F55583E97E6B1BF5684DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 11:28:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:2a:b5:86:72:d2:9e:53:27:59:9f:02:41:e6:a1:23:72:21:e7:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC73A4E31D0C1C361F3F55583E97E6B1BF5684DB
        Validity
            Not Before: Feb  4 22:32:09 2026 GMT
            Not After : Feb  3 22:37:09 2027 GMT
        Subject: CN=2CC265CE0B472C693DE232BAFBA38BEABB7CF90B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:68:77:55:bf:1a:07:85:b3:71:49:81:f9:a1:
                    0e:4a:1d:7d:6a:0a:9b:c2:91:5e:9d:84:52:a9:5c:
                    75:86:4a:17:17:e4:bd:fa:56:99:d0:f4:4d:5c:b6:
                    b6:a5:e7:14:3b:f9:33:83:a9:ab:cc:a7:da:ed:21:
                    bb:73:9a:ad:1f:a3:d2:05:94:06:fd:e8:62:a6:5f:
                    3c:ad:0a:44:64:65:df:42:f0:fd:b7:8c:82:41:70:
                    cc:67:ff:13:5f:86:ac:37:82:ca:4e:d9:41:54:d4:
                    05:01:dc:6b:3f:c8:c6:f9:63:98:b1:8c:b1:a0:0a:
                    7f:6a:90:74:84:f5:04:8b:64:f8:00:95:4b:f1:e4:
                    9b:b2:c8:42:97:18:70:e4:e8:64:b1:2e:11:92:c7:
                    ae:bb:87:71:6e:5a:d9:ee:40:0b:bc:32:13:d7:a3:
                    76:3d:ff:9f:c5:98:5c:58:bc:8c:96:98:1e:e4:8e:
                    d8:d1:00:d5:7b:fc:ce:b1:f1:44:9a:d3:d3:51:ad:
                    74:bb:5a:ed:4b:3f:34:75:b1:83:65:52:24:ee:6f:
                    5a:0a:57:86:fb:28:c5:b0:25:00:f8:78:d5:eb:9e:
                    44:5a:f9:d2:5e:14:b6:19:1a:10:7e:3c:5c:e4:b1:
                    42:bc:5d:a8:18:64:dd:eb:f1:cf:0a:c3:cc:36:7f:
                    b4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C2:65:CE:0B:47:2C:69:3D:E2:32:BA:FB:A3:8B:EA:BB:7C:F9:0B
            X509v3 Authority Key Identifier:
                keyid:FC:73:A4:E3:1D:0C:1C:36:1F:3F:55:58:3E:97:E6:B1:BF:56:84:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELoHNMKJLiPaz6tr74T1JMBJ1WX96cd58MNQduwscVmZ/1/FC73A4E31D0C1C361F3F55583E97E6B1BF5684DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC73A4E31D0C1C361F3F55583E97E6B1BF5684DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELoHNMKJLiPaz6tr74T1JMBJ1WX96cd58MNQduwscVmZ/1/323830343a343534343a3a2f33322d3438203d3e20323636393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4544::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:29:41:e9:2c:9c:f4:85:c8:05:72:5d:f4:9b:8f:77:e2:7e:
         90:18:4f:62:cd:fa:e7:d9:be:4c:ed:8f:ae:24:ab:b6:f5:fa:
         49:79:99:31:78:17:27:0c:c6:b9:59:69:cb:94:36:5f:4f:54:
         31:fe:3a:3d:3f:bb:c9:b1:75:9a:9b:7d:c5:23:d5:a7:ae:6a:
         99:d2:da:c1:2b:ce:3b:c2:cd:c8:4f:f7:1e:eb:38:ed:fe:cf:
         ae:4c:76:bd:ef:04:47:96:40:b9:d0:cf:52:92:60:9c:46:c1:
         95:13:6b:89:ac:5e:f5:b4:2c:f5:cc:37:64:a2:6c:03:76:dc:
         2b:53:47:12:a8:ea:33:e6:79:d0:5a:8f:98:1f:0e:ba:25:20:
         18:fa:95:17:9a:f7:18:08:c1:3f:3f:2f:30:14:8a:b7:29:9d:
         19:de:77:b5:50:e5:ed:f4:4f:a9:6e:44:fb:85:e1:af:02:16:
         3c:6d:aa:a3:cc:58:8b:61:76:ea:f6:17:09:ea:58:f0:ba:e4:
         73:e9:7c:c5:d0:2e:1c:f7:07:ac:9d:0f:55:d7:1b:a1:c6:7e:
         20:75:9d:98:7e:e3:fd:65:fd:76:4e:16:d2:0d:d2:fc:62:9e:
         ea:9e:30:25:2e:ef:45:af:13:c6:08:5e:b0:8f:16:03:ca:23:
         ba:be:96:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:44:23 2026 by rpki-client