Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/323830343a323736633a343030303a3a2f33342d3334203d3e20323633393030.roa
File:                     323830343a323736633a343030303a3a2f33342d3334203d3e20323633393030.roa (raw, json)
Hash identifier:          kcYyvBNUpYklcFyLBq1gp5/8Cb1F0qrv9/QI+k1yj1w=
Subject key identifier:   1F:92:2A:39:FE:0B:63:29:0B:5E:FF:5B:65:2F:A5:77:C5:D0:C4:88
Certificate issuer:       /CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
Certificate serial:       677119EF1D75B44B3801AAF0ED84BF2EBEF31A1A
Authority key identifier: D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/323830343a323736633a343030303a3a2f33342d3334203d3e20323633393030.roa
Signing time:             Wed 04 Feb 2026 21:00:07 +0000
ROA not before:           Wed 04 Feb 2026 20:55:07 +0000
ROA not after:            Wed 03 Feb 2027 21:00:07 +0000
asID:                     263900
IP address blocks:        2804:276c:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl
                          rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:71:19:ef:1d:75:b4:4b:38:01:aa:f0:ed:84:bf:2e:be:f3:1a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
        Validity
            Not Before: Feb  4 20:55:07 2026 GMT
            Not After : Feb  3 21:00:07 2027 GMT
        Subject: CN=1F922A39FE0B63290B5EFF5B652FA577C5D0C488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:41:e8:da:b2:cb:7b:03:97:02:b9:84:cc:06:
                    73:ce:a0:ac:f2:b7:ec:83:91:a8:ad:8d:f3:ad:8a:
                    31:b0:1e:7f:2d:38:96:4f:94:06:aa:2c:1b:60:e1:
                    11:7d:c0:c5:b2:d2:2b:b7:46:b8:dc:34:36:53:a8:
                    f6:05:b5:75:b3:9c:bc:72:b4:03:c5:82:fd:09:32:
                    54:bb:01:49:cd:a5:ab:6b:0b:57:95:03:e9:48:95:
                    44:32:d5:5a:4f:29:7e:0d:cb:05:20:b9:be:62:f1:
                    0c:18:52:7e:58:1c:2c:5d:20:1d:b0:77:00:2a:b8:
                    ca:be:53:52:fc:ac:ad:59:d3:5c:50:37:a0:a9:66:
                    83:8a:3c:24:58:cd:1f:bb:3d:ce:bf:b1:ea:d8:1a:
                    5b:0f:51:9e:f1:8b:ff:3e:f5:22:8b:75:8d:11:5e:
                    0b:e5:6b:39:c0:36:9b:30:23:e4:79:b2:46:70:ac:
                    a8:ef:fb:56:41:9d:0d:13:e2:f0:bb:d4:68:e5:22:
                    9a:cf:27:ab:c0:ca:62:96:a7:f9:bd:3c:51:74:77:
                    51:e2:03:91:ff:64:a2:56:df:fd:6b:4d:5b:f3:32:
                    ea:87:bc:c9:91:b7:0c:87:2b:28:4d:66:0a:02:ba:
                    cf:08:f8:02:ec:1a:da:92:e8:0d:25:5c:ad:db:a3:
                    96:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:92:2A:39:FE:0B:63:29:0B:5E:FF:5B:65:2F:A5:77:C5:D0:C4:88
            X509v3 Authority Key Identifier:
                keyid:D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/323830343a323736633a343030303a3a2f33342d3334203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:276c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         13:b7:d8:f1:01:36:1d:90:24:46:77:16:fd:69:95:20:36:9d:
         c2:2a:72:91:43:4c:69:74:39:a5:e0:2b:c8:e7:dd:0d:3a:ff:
         1b:82:3c:79:e4:8b:63:7d:bc:ba:c7:5a:68:d5:65:54:3a:bc:
         ad:73:4a:ea:38:97:01:fc:f8:ae:a8:0f:8b:24:df:db:ad:bc:
         05:81:fb:83:fa:e7:97:16:6e:10:79:fc:59:4f:51:ed:f9:5c:
         ab:01:b3:00:b1:c9:ce:16:ca:cd:60:ae:d7:c2:fa:6a:7c:82:
         af:10:c8:1c:c9:74:54:78:8d:ec:d1:5e:58:84:32:81:95:68:
         52:58:ef:d0:1f:c9:74:95:ed:26:b9:69:63:98:53:3c:18:a2:
         f0:d6:1b:b3:5a:ac:5d:d7:5e:b8:e5:df:83:59:93:9a:53:e0:
         a2:d5:96:e2:04:57:e1:07:95:a4:2c:3a:20:ab:9f:5a:ac:7a:
         47:29:39:94:f0:a3:35:7e:c6:ae:2c:a7:ec:d3:69:b4:a8:cc:
         b1:57:e9:70:a1:b0:1c:ee:92:ff:c3:dc:c5:ec:77:6b:51:e2:
         16:08:04:1b:5e:e5:a2:24:35:be:18:22:86:8b:87:85:b2:92:
         b4:93:09:b9:51:eb:8f:dc:55:f5:fb:21:c7:4c:48:f9:5d:be:
         d0:04:78:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:41:37 2026 by rpki-client