Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/323830343a336638303a3a2f33322d3332203d3e20323635383937.roa
File:                     323830343a336638303a3a2f33322d3332203d3e20323635383937.roa (raw, json)
Hash identifier:          1KP1H1wmk0vqfIE02PxWHShx4Jujrg5XTjlNjBEKhCA=
Subject key identifier:   EF:E6:BE:C5:6F:70:86:18:5F:B0:25:13:75:3E:9F:5E:C7:36:E1:2D
Certificate issuer:       /CN=5A5E26B1B0F12ABA275375436239BFDD76E5189A
Certificate serial:       2AD91F8B6F830411F0A184B0CBD871219D0158F1
Authority key identifier: 5A:5E:26:B1:B0:F1:2A:BA:27:53:75:43:62:39:BF:DD:76:E5:18:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/323830343a336638303a3a2f33322d3332203d3e20323635383937.roa
Signing time:             Wed 04 Feb 2026 20:00:08 +0000
ROA not before:           Wed 04 Feb 2026 19:55:08 +0000
ROA not after:            Wed 03 Feb 2027 20:00:08 +0000
asID:                     265897
IP address blocks:        2804:3f80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.crl
                          rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d9:1f:8b:6f:83:04:11:f0:a1:84:b0:cb:d8:71:21:9d:01:58:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5E26B1B0F12ABA275375436239BFDD76E5189A
        Validity
            Not Before: Feb  4 19:55:08 2026 GMT
            Not After : Feb  3 20:00:08 2027 GMT
        Subject: CN=EFE6BEC56F7086185FB02513753E9F5EC736E12D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e9:2b:7d:8d:5c:2c:60:84:6e:98:c8:f8:94:
                    d9:17:5e:1c:d8:3b:6a:5b:62:38:20:1d:63:4a:3e:
                    5d:38:46:b9:7e:be:c9:ff:a1:a1:f4:aa:65:50:fd:
                    4e:f8:86:7a:63:50:65:7b:88:2f:b7:31:f2:f7:f0:
                    bc:46:86:44:a8:33:fe:e7:64:e4:f8:74:9b:ce:57:
                    05:17:67:a1:06:eb:cd:7f:de:9f:73:43:f1:bf:b1:
                    bf:63:bf:2a:e7:fa:c3:9a:c2:8d:63:cb:4d:11:86:
                    36:82:1c:51:22:79:78:8b:f1:3f:85:7c:e2:a9:03:
                    40:d6:d7:df:16:8f:1e:91:39:50:d8:66:aa:b3:9d:
                    66:d3:e1:9c:c7:bc:2f:69:a6:8e:b9:a6:2e:10:c0:
                    b4:83:b3:39:1d:41:66:fd:cd:80:c4:48:f6:ec:c1:
                    e9:5b:8e:e1:ab:fa:a4:78:4b:53:5c:2a:25:7b:67:
                    ef:a2:7b:c8:a6:76:0c:41:a5:85:12:36:48:94:ee:
                    6f:cd:a8:53:f1:32:8c:4f:8a:3d:43:23:16:5c:77:
                    b2:f9:a1:9c:57:7a:6d:0a:30:10:e5:94:ba:9a:62:
                    2f:5a:e9:07:c0:b8:d1:64:06:7b:9a:48:f2:f4:ad:
                    f8:a6:6f:93:22:c3:37:1b:2e:fd:3f:99:b1:b2:b0:
                    64:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E6:BE:C5:6F:70:86:18:5F:B0:25:13:75:3E:9F:5E:C7:36:E1:2D
            X509v3 Authority Key Identifier:
                keyid:5A:5E:26:B1:B0:F1:2A:BA:27:53:75:43:62:39:BF:DD:76:E5:18:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/323830343a336638303a3a2f33322d3332203d3e20323635383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:e0:59:1f:12:32:24:2a:20:54:1e:4f:aa:ff:d0:e2:8d:31:
         82:61:47:45:e4:99:84:22:d5:e7:ba:1c:23:e7:88:2b:3b:3f:
         aa:37:8d:7f:95:e0:15:6a:f5:9b:64:aa:5e:4c:21:6d:a0:d0:
         26:64:bd:44:4a:f7:44:9c:3d:53:b7:62:1a:7c:83:fe:9b:fe:
         6e:25:d7:be:75:98:e3:1f:86:dd:39:61:fa:d4:53:21:d1:d9:
         e3:76:d7:d7:66:5b:e5:64:3b:2c:41:bc:3b:d4:1b:14:c8:dc:
         cc:5e:8e:6e:1e:cc:65:4b:d8:fd:77:56:d4:63:3b:a5:d5:71:
         20:39:ae:cb:23:01:68:a1:ae:db:4b:df:4a:25:08:a0:f1:e6:
         a6:80:df:77:63:c9:0f:83:c5:83:17:00:64:c2:83:08:b8:62:
         57:28:84:b9:17:d3:6e:ba:d3:17:f5:e5:1f:c4:bb:97:e2:5c:
         52:f7:60:ca:19:42:b9:e1:58:85:b1:b6:ed:0e:e7:b4:53:ba:
         9f:0e:1f:af:3f:27:08:1e:ac:ed:98:83:9b:fd:d6:dc:02:7d:
         79:31:70:4b:13:1f:56:23:c6:a2:39:23:8c:86:04:bb:54:28:
         53:cc:12:81:4a:8f:86:cf:60:ac:c2:0a:5f:cf:ab:bb:fc:43:
         3c:f0:4e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:57:26 2026 by rpki-client