Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/323830343a343133303a3a2f33322d313238203d3e20323636303039.roa
File:                     323830343a343133303a3a2f33322d313238203d3e20323636303039.roa (raw, json)
Hash identifier:          grc6dwJUyfYOrlYnuCAKDSLRcNcJwlC8G14WzgPTfVU=
Subject key identifier:   28:CF:74:C2:29:02:AE:E6:D0:AF:C4:EA:49:77:4D:C9:AB:2D:27:CC
Certificate issuer:       /CN=7F26572E5BEE74A9546D5DB49A0AD8194F5BF810
Certificate serial:       2CB0CF0CD51753D9FC6122882079EFB6345A4266
Authority key identifier: 7F:26:57:2E:5B:EE:74:A9:54:6D:5D:B4:9A:0A:D8:19:4F:5B:F8:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F26572E5BEE74A9546D5DB49A0AD8194F5BF810.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/323830343a343133303a3a2f33322d313238203d3e20323636303039.roa
Signing time:             Wed 28 Jan 2026 14:29:11 +0000
ROA not before:           Wed 28 Jan 2026 14:24:11 +0000
ROA not after:            Wed 27 Jan 2027 14:29:11 +0000
asID:                     266009
IP address blocks:        2804:4130::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/7F26572E5BEE74A9546D5DB49A0AD8194F5BF810.crl
                          rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/7F26572E5BEE74A9546D5DB49A0AD8194F5BF810.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F26572E5BEE74A9546D5DB49A0AD8194F5BF810.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:27:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b0:cf:0c:d5:17:53:d9:fc:61:22:88:20:79:ef:b6:34:5a:42:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F26572E5BEE74A9546D5DB49A0AD8194F5BF810
        Validity
            Not Before: Jan 28 14:24:11 2026 GMT
            Not After : Jan 27 14:29:11 2027 GMT
        Subject: CN=28CF74C22902AEE6D0AFC4EA49774DC9AB2D27CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d1:1d:84:b3:b2:51:48:af:ac:98:69:6f:59:
                    4a:8c:71:ad:02:ae:64:0d:27:4a:2f:86:b5:76:23:
                    af:c7:25:e4:92:bb:62:7a:c5:04:c3:64:ca:7d:f9:
                    b2:ba:08:f7:7d:a7:f8:a9:8a:0e:c2:d0:5d:6c:f1:
                    db:b0:c7:f0:8b:e8:50:1b:6f:42:c7:af:d2:2f:27:
                    41:7c:cc:5e:41:f8:aa:fe:8f:cc:e3:3a:dc:42:88:
                    ba:4c:14:c1:20:2a:15:04:5c:cc:ae:b5:0f:59:26:
                    a2:c7:c3:d1:58:18:a1:45:32:2f:0d:ec:3f:cd:ed:
                    4a:61:f6:c1:fa:72:04:47:f5:87:db:bd:46:77:e2:
                    7d:6e:07:a3:ba:c9:d7:6c:9e:b9:41:43:6d:88:1e:
                    c1:49:0e:9f:2b:bb:fd:79:24:8e:4f:5d:92:80:c7:
                    bb:6a:6a:c3:c8:78:bf:9a:5a:52:6b:6e:58:7b:c2:
                    1b:be:ad:49:bb:12:e8:3a:9c:1f:84:44:e0:5f:1c:
                    37:d4:19:dc:9f:27:62:c8:a4:66:1f:b1:14:0a:35:
                    fa:62:83:20:90:8b:0b:fd:0e:ca:f3:6d:d0:b7:cf:
                    fa:58:b4:e2:5f:db:c6:24:eb:1b:2d:ce:67:b6:d9:
                    d8:1e:d9:c0:13:dd:71:e2:60:6f:cf:aa:f1:ad:4c:
                    30:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CF:74:C2:29:02:AE:E6:D0:AF:C4:EA:49:77:4D:C9:AB:2D:27:CC
            X509v3 Authority Key Identifier:
                keyid:7F:26:57:2E:5B:EE:74:A9:54:6D:5D:B4:9A:0A:D8:19:4F:5B:F8:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/7F26572E5BEE74A9546D5DB49A0AD8194F5BF810.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F26572E5BEE74A9546D5DB49A0AD8194F5BF810.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/323830343a343133303a3a2f33322d313238203d3e20323636303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4130::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:3f:12:71:88:28:02:b7:24:c6:7f:95:da:a1:ef:b2:81:bd:
         d2:30:dd:7c:39:4e:ea:dd:d3:00:da:b5:86:f8:93:00:53:38:
         f8:f2:12:85:a4:f7:59:d8:f2:8e:2a:17:f9:c1:e6:14:c6:03:
         f2:78:5a:1a:2c:97:20:46:7c:c4:7b:fa:dc:e9:23:5e:ea:f5:
         e4:e6:c4:7f:6f:75:b0:93:78:a9:c1:0c:18:5a:2a:20:f3:b6:
         2f:f2:04:86:be:31:89:e3:7f:8f:09:b2:0e:1d:41:c4:8c:b1:
         f2:74:7b:cb:f0:75:32:6b:7d:90:78:58:e5:0d:13:06:6d:27:
         fa:e5:cb:73:98:ee:0a:e8:8c:a3:0a:ba:bd:a5:df:bf:47:35:
         fd:7b:5e:40:2c:53:ae:bd:3e:ed:f3:93:c4:14:0e:cb:2b:bd:
         81:c8:e5:b6:69:c1:1d:4a:22:4f:10:f3:61:f8:a2:90:4a:82:
         15:93:ac:6e:d9:49:85:4e:5f:e2:88:1b:89:92:e4:f8:b0:3e:
         cf:4b:b3:c1:dc:de:51:52:a4:aa:83:16:7c:af:d9:a8:a6:17:
         a8:1f:8b:b6:e0:f3:ba:3a:fc:e7:6d:dd:53:b7:f3:a4:f2:6f:
         d9:21:ca:88:c5:f4:2b:bf:4a:db:9d:7e:3d:1d:fe:5f:2e:3f:
         60:51:7a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:40 2026 by rpki-client