Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eabb8QM6EKiCcZUqLiMWVdkzP1xafRQVA9TNNYfoZyP4/1/323830343a346235343a3a2f33322d3438203d3e20323637323938.roa
File:                     323830343a346235343a3a2f33322d3438203d3e20323637323938.roa (raw, json)
Hash identifier:          yDmOiRGzCuvnF8SPSJj4YQpvNTuc9/NVL+5YPiyFajQ=
Subject key identifier:   27:14:38:E2:2A:10:82:78:0A:DE:77:AB:89:AC:AD:A5:5B:9E:3C:9A
Certificate issuer:       /CN=8902905780FDACAD708BC5F4FA8508B26F16146C
Certificate serial:       6D20705B4B94A1E47E2AC612B4654E426AD3A1B0
Authority key identifier: 89:02:90:57:80:FD:AC:AD:70:8B:C5:F4:FA:85:08:B2:6F:16:14:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8902905780FDACAD708BC5F4FA8508B26F16146C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eabb8QM6EKiCcZUqLiMWVdkzP1xafRQVA9TNNYfoZyP4/1/323830343a346235343a3a2f33322d3438203d3e20323637323938.roa
Signing time:             Thu 05 Feb 2026 08:08:24 +0000
ROA not before:           Thu 05 Feb 2026 08:03:24 +0000
ROA not after:            Thu 04 Feb 2027 08:08:24 +0000
asID:                     267298
IP address blocks:        2804:4b54::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eabb8QM6EKiCcZUqLiMWVdkzP1xafRQVA9TNNYfoZyP4/1/8902905780FDACAD708BC5F4FA8508B26F16146C.crl
                          rsync://rpki-repo.registro.br/repo/Eabb8QM6EKiCcZUqLiMWVdkzP1xafRQVA9TNNYfoZyP4/1/8902905780FDACAD708BC5F4FA8508B26F16146C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8902905780FDACAD708BC5F4FA8508B26F16146C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:43:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:20:70:5b:4b:94:a1:e4:7e:2a:c6:12:b4:65:4e:42:6a:d3:a1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8902905780FDACAD708BC5F4FA8508B26F16146C
        Validity
            Not Before: Feb  5 08:03:24 2026 GMT
            Not After : Feb  4 08:08:24 2027 GMT
        Subject: CN=271438E22A1082780ADE77AB89ACADA55B9E3C9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a6:d2:1c:53:ff:15:09:21:36:de:f7:76:aa:
                    90:ad:19:af:99:2e:2c:57:70:c5:77:69:3c:ff:aa:
                    12:af:6b:15:1f:17:dc:f1:1f:92:59:d6:50:8d:a4:
                    46:ae:04:a9:d4:1f:52:9c:a9:cf:e8:2e:39:93:9a:
                    18:28:c9:8d:93:92:27:be:da:53:91:a1:f5:40:6d:
                    ac:1f:a7:43:20:63:c3:59:55:c0:ca:66:50:1c:f8:
                    82:30:aa:ce:9c:9a:f8:3b:5e:db:30:d3:88:c2:83:
                    14:35:98:ec:62:7a:ff:c6:12:6b:44:cf:bd:5a:f2:
                    58:0d:c0:af:62:62:54:b2:a3:a5:a9:1a:a7:a5:2f:
                    a3:38:93:69:24:86:cb:cf:94:f7:dd:53:25:54:44:
                    96:b5:68:a9:97:68:45:55:7e:98:53:45:aa:02:92:
                    c1:70:81:da:76:c7:02:a1:20:ba:37:51:bc:6a:ba:
                    30:df:6b:17:89:3e:16:81:a6:0f:63:a7:1c:dc:db:
                    c2:57:79:29:8b:2f:68:e8:90:21:ff:39:f4:24:a4:
                    ea:ee:03:41:89:72:e3:3f:66:12:d5:b3:17:7e:c2:
                    f5:ef:e4:8a:33:0d:c8:a1:c6:c6:45:00:f0:73:83:
                    f6:cc:b8:3e:83:ee:ef:9f:c9:36:7d:0b:09:1f:68:
                    d8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:14:38:E2:2A:10:82:78:0A:DE:77:AB:89:AC:AD:A5:5B:9E:3C:9A
            X509v3 Authority Key Identifier:
                keyid:89:02:90:57:80:FD:AC:AD:70:8B:C5:F4:FA:85:08:B2:6F:16:14:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eabb8QM6EKiCcZUqLiMWVdkzP1xafRQVA9TNNYfoZyP4/1/8902905780FDACAD708BC5F4FA8508B26F16146C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8902905780FDACAD708BC5F4FA8508B26F16146C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eabb8QM6EKiCcZUqLiMWVdkzP1xafRQVA9TNNYfoZyP4/1/323830343a346235343a3a2f33322d3438203d3e20323637323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b54::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:dd:c9:30:0c:3f:21:e1:9b:8f:73:4b:4b:45:01:35:a7:5a:
         67:d6:de:07:09:5c:b5:d0:22:a7:62:05:ec:fc:4d:94:71:b0:
         17:27:d3:23:db:f5:8c:08:ed:aa:36:de:2a:96:e9:52:d0:9b:
         91:c4:1f:58:29:44:45:18:0c:e7:17:9c:5e:5e:07:cb:a0:69:
         8d:e3:97:74:4f:0d:f1:50:0a:3c:1b:40:d4:a4:d9:89:52:15:
         c8:69:a2:07:39:ed:4e:fb:64:36:81:a4:d0:ee:7e:75:69:b5:
         5c:cb:1b:c6:f4:06:e8:f4:e2:2f:e7:4e:54:c0:6f:89:45:6d:
         85:38:c2:af:a6:9b:bc:03:eb:16:61:0f:40:7a:77:e9:02:88:
         4c:59:85:e7:8e:57:5c:55:e8:8a:c0:46:4b:f0:3b:9f:67:ef:
         63:e1:5b:fc:f9:36:69:30:a8:28:0c:95:5a:15:67:c1:04:b4:
         90:43:dd:f4:ec:9c:dd:79:57:fd:47:99:ee:80:11:7b:89:0b:
         fa:51:c0:5e:44:6c:ef:a0:54:f1:cd:1a:f2:3d:31:be:36:45:
         1c:94:74:55:1d:37:11:7e:9b:42:94:b1:14:ed:0b:7b:e3:1a:
         63:7d:a5:17:74:54:1c:48:03:ac:fc:c2:30:17:d0:de:11:6e:
         09:ea:76:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:41:00 2026 by rpki-client