Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a383030303a3a2f33332d3333203d3e203533303836.roa
File:                     323830343a346665343a383030303a3a2f33332d3333203d3e203533303836.roa (raw, json)
Hash identifier:          CazgybP24fMlqz+VMY5v+URK3Jh3EAHIU4g9aj8go0c=
Subject key identifier:   A9:9E:20:F4:44:2E:E7:1E:A3:21:84:E4:58:97:84:A8:52:C3:65:B3
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       72C056C426D45D7236BD98D48DC6AB0BDD9E2267
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a383030303a3a2f33332d3333203d3e203533303836.roa
Signing time:             Thu 05 Feb 2026 09:30:01 +0000
ROA not before:           Thu 05 Feb 2026 09:25:01 +0000
ROA not after:            Thu 04 Feb 2027 09:30:01 +0000
asID:                     53086
IP address blocks:        2804:4fe4:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c0:56:c4:26:d4:5d:72:36:bd:98:d4:8d:c6:ab:0b:dd:9e:22:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Feb  5 09:25:01 2026 GMT
            Not After : Feb  4 09:30:01 2027 GMT
        Subject: CN=A99E20F4442EE71EA32184E4589784A852C365B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:00:8b:8a:11:3e:e3:2a:d9:c2:07:59:e5:b1:
                    bf:9f:82:94:1b:d2:cf:f4:08:3b:a1:70:b1:86:14:
                    3a:53:0f:96:2e:3e:df:de:bc:a8:3e:cb:5e:85:13:
                    d1:b2:2b:fd:6d:89:05:31:a9:54:6a:c7:92:61:69:
                    81:22:e3:8d:f6:84:87:36:60:4a:68:16:3a:2e:8d:
                    68:d6:04:57:99:87:c3:d4:3d:f0:5a:33:b1:3d:97:
                    94:31:f1:2b:a7:e0:c7:19:9c:a8:33:16:ee:c3:38:
                    cd:ce:0d:1a:04:f9:f3:3b:30:a7:c2:24:98:e6:af:
                    06:05:08:32:cd:34:ab:cc:91:cc:1a:03:1d:bc:ec:
                    80:1e:b1:cf:91:21:5b:86:38:04:48:d2:07:56:bd:
                    a6:8b:27:f5:8a:5e:0c:d9:55:5f:a9:99:d6:36:52:
                    77:f8:63:df:f1:b6:c0:15:7e:4f:04:bb:8b:9a:be:
                    0d:22:e1:49:1f:5e:d8:b0:3a:a2:c3:ad:a8:53:d1:
                    ee:e4:f3:97:bc:a1:b2:8f:f5:32:16:ad:59:2e:da:
                    0e:0e:ab:c0:09:c4:ba:98:4c:d9:82:31:15:00:a4:
                    5c:4d:c0:72:e6:26:05:b3:ae:e4:d1:53:b6:66:a9:
                    35:18:07:d9:af:36:5d:7e:47:4a:89:c5:50:e5:67:
                    4e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:9E:20:F4:44:2E:E7:1E:A3:21:84:E4:58:97:84:A8:52:C3:65:B3
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a383030303a3a2f33332d3333203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fe4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         97:bd:f9:a4:d4:a1:b3:02:c0:74:e9:7d:cf:dd:a3:1e:4a:cf:
         6f:3d:fc:59:9a:6d:2f:13:7b:49:b8:6d:51:0a:65:4d:68:da:
         0c:0e:af:12:54:f6:52:69:d5:43:63:91:c7:0a:fb:ab:4c:dd:
         0c:f2:ae:38:ae:95:35:41:ab:c5:2e:c2:c1:d0:e8:0c:8e:33:
         2b:14:f4:5c:bc:8d:ab:60:b8:32:2a:47:4b:c9:92:e5:c6:fd:
         f6:71:6d:18:43:34:7a:fb:3f:59:66:c8:b0:24:a1:c8:f5:d1:
         19:64:94:09:7c:f7:01:9b:34:c1:d8:fc:01:b7:83:08:39:32:
         02:f5:13:16:9a:25:3e:a4:fa:50:d2:b6:54:77:12:87:0a:0a:
         f2:67:4a:1e:42:07:06:f8:89:2e:78:dd:7d:cd:98:88:02:e7:
         e5:3d:79:ee:e2:f2:57:88:8f:d4:94:8f:fe:90:8b:e8:23:91:
         c1:b1:7a:ca:9a:8f:ab:50:e8:4c:8b:86:2f:2b:99:c4:98:50:
         f5:43:b7:5f:80:25:92:86:bf:28:c8:3a:b3:fe:85:38:5e:55:
         ee:79:ce:cd:a1:b6:bc:1d:35:b0:fa:c3:aa:53:cf:e1:33:e6:
         04:1b:aa:56:81:f4:cc:ae:6d:0e:0b:78:80:f9:bf:63:3a:68:
         43:c5:80:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:56:28 2026 by rpki-client