Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/323830343a363635303a383030303a3a2f33332d3333203d3e20323639353438.roa
File:                     323830343a363635303a383030303a3a2f33332d3333203d3e20323639353438.roa (raw, json)
Hash identifier:          DszAWh6JsyJweGOTQdydZWkWYdmu6rXeXa8GM4QJ5Fk=
Subject key identifier:   7F:3E:AE:25:33:3C:75:82:E7:14:CB:21:D8:9E:D1:1D:FA:3E:55:A1
Certificate issuer:       /CN=F467F4F197CE6B4A22E157A50E42BA83A46CF57D
Certificate serial:       1CD3192FB17A38E48AD1C36F98CFEB4F3913E617
Authority key identifier: F4:67:F4:F1:97:CE:6B:4A:22:E1:57:A5:0E:42:BA:83:A4:6C:F5:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467F4F197CE6B4A22E157A50E42BA83A46CF57D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/323830343a363635303a383030303a3a2f33332d3333203d3e20323639353438.roa
Signing time:             Fri 16 Jan 2026 09:45:23 +0000
ROA not before:           Fri 16 Jan 2026 09:40:23 +0000
ROA not after:            Fri 15 Jan 2027 09:45:23 +0000
asID:                     269548
IP address blocks:        2804:6650:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/F467F4F197CE6B4A22E157A50E42BA83A46CF57D.crl
                          rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/F467F4F197CE6B4A22E157A50E42BA83A46CF57D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467F4F197CE6B4A22E157A50E42BA83A46CF57D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:49:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d3:19:2f:b1:7a:38:e4:8a:d1:c3:6f:98:cf:eb:4f:39:13:e6:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F467F4F197CE6B4A22E157A50E42BA83A46CF57D
        Validity
            Not Before: Jan 16 09:40:23 2026 GMT
            Not After : Jan 15 09:45:23 2027 GMT
        Subject: CN=7F3EAE25333C7582E714CB21D89ED11DFA3E55A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:40:95:47:9f:34:97:5f:02:82:2a:0b:b5:d1:
                    45:d7:c2:6c:93:e0:1c:51:e8:55:4c:9e:bc:b8:e0:
                    85:be:39:b7:c5:56:3d:ac:3b:05:45:bf:c2:0b:12:
                    3c:97:ba:55:2f:5b:c9:7e:2d:ba:a6:8e:bf:e8:21:
                    4c:d9:d5:32:31:37:86:a7:2d:f4:7f:2c:cd:13:57:
                    aa:b5:71:a3:49:b6:7d:80:61:10:ee:c2:7b:99:da:
                    9a:c2:24:cd:f1:36:15:29:c6:db:59:6f:5b:9e:8e:
                    3f:a7:96:95:13:ef:34:58:ad:c2:aa:0d:71:c1:13:
                    e3:11:20:67:d6:7c:71:ce:52:61:99:2b:66:db:56:
                    e3:3a:a3:a1:ff:a3:c5:d5:70:98:82:ba:6d:e8:7c:
                    52:34:51:e8:a1:78:03:6f:0a:2f:d9:e0:db:68:9e:
                    e4:2c:f6:2e:05:3f:ef:82:ce:b6:c3:7d:c1:63:37:
                    d3:76:3e:02:f9:29:09:f6:94:4f:1a:c8:4e:8e:ae:
                    3d:c9:67:68:04:1c:af:b1:49:6b:77:35:01:c5:47:
                    1e:5d:bd:b5:b3:64:57:8b:0a:51:e1:d7:dd:6e:20:
                    35:35:63:95:c8:d1:86:42:f3:8a:a0:5e:05:59:29:
                    44:bb:ff:44:2b:b8:3f:2f:8e:6f:c8:7a:dd:38:31:
                    b0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3E:AE:25:33:3C:75:82:E7:14:CB:21:D8:9E:D1:1D:FA:3E:55:A1
            X509v3 Authority Key Identifier:
                keyid:F4:67:F4:F1:97:CE:6B:4A:22:E1:57:A5:0E:42:BA:83:A4:6C:F5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/F467F4F197CE6B4A22E157A50E42BA83A46CF57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467F4F197CE6B4A22E157A50E42BA83A46CF57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/323830343a363635303a383030303a3a2f33332d3333203d3e20323639353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6650:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         4e:6d:6d:78:c0:b9:e2:fe:62:9e:c2:36:15:fb:7b:86:86:03:
         8f:32:68:79:67:76:b6:7f:b6:57:ce:e6:7e:86:df:3f:e7:ee:
         55:3f:85:a4:1d:1c:4d:a7:a0:0c:b3:6b:94:3a:34:f0:0e:2e:
         01:04:80:6d:2b:d8:c1:c7:a5:98:6c:e1:63:2e:20:1d:a0:cd:
         8d:01:c6:82:a2:ef:80:96:25:61:0d:41:b1:f0:e4:06:87:70:
         c1:58:7f:69:aa:ca:d4:59:d8:f4:df:ef:6b:5a:af:4a:04:00:
         21:38:af:5d:7f:d3:ab:f3:0d:34:24:c5:97:2e:90:48:3e:e5:
         ca:b9:e4:e6:36:cf:7a:4a:7a:00:2c:df:6e:a8:de:54:e2:16:
         f2:68:cf:0f:9b:3f:25:53:6b:d0:79:97:e1:e0:86:7f:2f:5e:
         c2:41:48:41:70:11:ab:06:3f:fb:17:21:3e:69:23:27:03:7b:
         9e:98:68:0c:4c:57:59:2d:bd:da:3f:61:50:70:01:ec:dc:6a:
         5b:5e:b4:6f:73:ea:51:fd:56:6c:55:6e:05:a9:27:e6:eb:ad:
         29:cf:08:31:f7:1d:d4:c5:1e:55:73:ad:82:9e:42:0f:34:ff:
         49:da:64:38:c1:2c:a6:28:21:c8:66:01:f3:bb:33:5a:e8:a3:
         de:6f:ac:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:24:27 2026 by rpki-client