Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/323830343a336635343a3a2f33322d3332203d3e20323635383835.roa
File:                     323830343a336635343a3a2f33322d3332203d3e20323635383835.roa (raw, json)
Hash identifier:          q455AoJWqubHOu0DruJdCk/ajH2Sl68uhMeeZq2p3rs=
Subject key identifier:   51:98:B7:67:E4:F1:4D:24:71:23:14:B8:07:90:18:F0:B9:11:F5:3E
Certificate issuer:       /CN=94C381CC9333C07A86D3A11282068476C5196FE6
Certificate serial:       41054BD534039C8E17F1ACEB6F8F17CFF2938D34
Authority key identifier: 94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/323830343a336635343a3a2f33322d3332203d3e20323635383835.roa
Signing time:             Thu 05 Feb 2026 18:42:31 +0000
ROA not before:           Thu 05 Feb 2026 18:37:31 +0000
ROA not after:            Thu 04 Feb 2027 18:42:31 +0000
asID:                     265885
IP address blocks:        2804:3f54::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl
                          rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:58:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:05:4b:d5:34:03:9c:8e:17:f1:ac:eb:6f:8f:17:cf:f2:93:8d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C381CC9333C07A86D3A11282068476C5196FE6
        Validity
            Not Before: Feb  5 18:37:31 2026 GMT
            Not After : Feb  4 18:42:31 2027 GMT
        Subject: CN=5198B767E4F14D24712314B8079018F0B911F53E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b8:a4:97:aa:78:07:6d:6b:75:86:1f:72:42:
                    0e:7a:97:42:a9:32:9b:99:60:b7:76:6d:77:6e:88:
                    ed:cb:74:fb:5e:ec:81:ab:45:c6:f5:5d:66:e9:a0:
                    d6:78:cd:bf:82:af:14:c6:91:18:1e:e8:d3:c5:c3:
                    a1:c3:50:e9:bf:e9:65:26:04:2f:da:c6:56:a8:b6:
                    3e:c3:62:78:e2:83:6d:8e:f6:f7:b4:52:79:4b:1f:
                    ff:ca:4e:45:36:2a:ac:02:c6:d0:b8:86:7b:8b:06:
                    f9:cc:ff:6a:1a:6a:d5:da:c3:47:65:19:2a:1a:b9:
                    cd:f8:6a:fd:7f:71:1e:86:8c:92:d3:2f:bb:da:45:
                    a0:b8:1a:97:03:61:d0:46:0d:b1:7f:42:0e:8e:b1:
                    90:a0:a7:04:5e:1c:08:56:e3:a2:03:45:98:9f:a9:
                    3f:35:d5:75:0a:b8:42:74:64:24:62:f5:0b:71:5c:
                    6b:2b:c9:f1:c2:bc:72:97:04:f9:a0:1b:38:f9:c9:
                    c4:95:c8:c7:66:93:69:e6:08:bb:ce:9b:2f:48:28:
                    3c:63:35:79:f8:68:d1:3c:7e:89:05:43:94:4f:6f:
                    c1:b5:64:c2:7b:c6:ca:61:ec:c9:cd:ba:3b:2e:16:
                    54:60:fe:3c:97:d1:87:7d:29:b4:42:d0:53:4a:bf:
                    b1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:98:B7:67:E4:F1:4D:24:71:23:14:B8:07:90:18:F0:B9:11:F5:3E
            X509v3 Authority Key Identifier:
                keyid:94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/323830343a336635343a3a2f33322d3332203d3e20323635383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f54::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:f4:34:0f:f9:ee:3b:16:a5:20:1a:7d:03:a3:6e:5e:e9:52:
         41:3c:4c:58:23:4b:29:bc:f8:66:5d:b0:07:5e:d3:1b:fa:1f:
         d6:2b:82:1d:b8:0c:2f:03:cd:74:0f:ab:d4:90:c1:24:92:9d:
         07:0d:b5:c9:fa:2a:d0:ce:d7:98:d8:4c:af:f7:b4:14:f0:bf:
         04:ae:e7:c0:7a:15:77:d2:b2:12:14:3f:0c:1a:f4:be:bc:27:
         f2:c4:24:22:1c:eb:f3:97:97:42:94:03:f7:4d:ec:01:e3:92:
         b3:ac:31:2c:c7:84:39:aa:9a:36:6b:f5:fd:f7:71:da:e5:d4:
         f9:92:2e:ce:ac:a0:18:1c:bc:9b:6d:e3:e7:ba:58:80:68:fc:
         9a:b3:37:fc:eb:e7:7e:fa:54:fb:67:12:b2:06:99:bc:80:64:
         3c:8d:7f:31:91:63:c5:3b:a3:46:c6:c1:f2:4b:ff:0a:d3:d4:
         22:ad:97:46:04:ba:ee:90:ee:2b:ef:b7:23:aa:3e:6a:49:52:
         1b:73:df:5f:56:9a:8a:f0:74:f4:e1:e5:fc:60:f5:db:18:4f:
         ef:ed:f3:61:dd:da:f1:b4:37:b5:97:d0:2a:2a:af:bd:0d:0b:
         d3:04:f9:bc:01:e7:83:a1:d3:ff:9a:8b:bf:6e:62:bf:d4:0e:
         5d:1b:62:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:58:33 2026 by rpki-client