Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/323830343a323736633a3a2f33322d3332203d3e20323633393030.roa
File:                     323830343a323736633a3a2f33322d3332203d3e20323633393030.roa (raw, json)
Hash identifier:          fPfObtuEK9bIx/ehW1NrWCQz9S2s+7JGbbaFqAKjnLA=
Subject key identifier:   73:FB:21:BF:64:45:67:41:6F:0E:71:B9:55:AA:C6:16:1B:BE:4E:F2
Certificate issuer:       /CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
Certificate serial:       4A1EBD46AB5F27AB0DBBF524C7FD7E3C56CD5A8C
Authority key identifier: D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/323830343a323736633a3a2f33322d3332203d3e20323633393030.roa
Signing time:             Wed 04 Feb 2026 21:00:06 +0000
ROA not before:           Wed 04 Feb 2026 20:55:06 +0000
ROA not after:            Wed 03 Feb 2027 21:00:06 +0000
asID:                     263900
IP address blocks:        2804:276c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl
                          rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1e:bd:46:ab:5f:27:ab:0d:bb:f5:24:c7:fd:7e:3c:56:cd:5a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
        Validity
            Not Before: Feb  4 20:55:06 2026 GMT
            Not After : Feb  3 21:00:06 2027 GMT
        Subject: CN=73FB21BF644567416F0E71B955AAC6161BBE4EF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b8:0b:76:02:65:71:36:81:6b:69:06:42:14:
                    cc:c4:72:d9:1f:74:17:eb:98:64:81:89:6e:b3:28:
                    09:68:e7:bf:58:7a:d8:56:20:19:0f:6b:77:19:18:
                    97:da:6c:f7:f6:e7:26:4d:2a:ff:30:9d:9d:4e:98:
                    ea:e5:ac:1f:42:8d:e7:99:63:85:b7:ef:ec:d2:6f:
                    e4:c4:70:85:cc:2c:0f:c9:e7:57:75:a6:1a:53:e9:
                    0c:e8:fa:61:2e:79:86:d2:54:e8:1b:e3:de:89:e9:
                    5f:f9:b5:c0:cd:53:03:a9:ba:95:80:45:44:a1:d2:
                    a7:5d:eb:aa:55:97:5b:22:bd:9e:b8:8b:9d:fa:0e:
                    45:bb:1a:aa:20:08:d0:45:23:3f:45:57:49:5c:f2:
                    0f:96:e9:08:c6:bc:bd:a1:63:c1:8f:bf:e0:78:29:
                    d4:db:3d:78:81:8b:91:e2:ac:b2:fd:24:e8:86:61:
                    fd:62:e4:d4:83:25:62:4f:4a:93:5b:16:76:a8:cc:
                    b0:07:23:a5:24:d7:63:b4:12:9e:cc:01:20:b8:64:
                    c0:1e:d7:7b:20:d6:3e:d6:51:0c:4f:4a:72:12:7b:
                    a5:7b:86:fc:64:de:44:6d:3f:b6:ec:d5:cd:37:f1:
                    7e:63:57:c8:17:c0:a3:fa:b8:22:64:98:24:ff:3f:
                    cc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FB:21:BF:64:45:67:41:6F:0E:71:B9:55:AA:C6:16:1B:BE:4E:F2
            X509v3 Authority Key Identifier:
                keyid:D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/323830343a323736633a3a2f33322d3332203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:276c::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:7f:50:5b:29:18:f8:1b:32:31:90:ae:05:e4:ea:26:19:ae:
         5c:87:68:84:42:b8:1e:56:5b:8b:91:be:4f:d4:b3:2a:1d:36:
         6d:e3:93:0e:eb:14:fb:6d:6c:3c:61:bb:54:7e:13:cf:b1:8c:
         a0:6d:79:b4:7c:1c:98:68:3f:db:6b:a8:e3:4c:b7:8d:58:af:
         44:e5:f6:7a:1f:d3:a6:fa:86:ed:fc:8d:e3:6f:5f:02:a7:ca:
         36:22:31:a1:2d:62:0f:b0:f0:bf:e9:28:6e:c0:5e:a8:b4:50:
         2d:9f:83:2c:27:9a:4d:ad:e1:f5:38:bf:a9:2c:64:46:99:8c:
         79:b7:9b:b4:d8:55:14:02:50:23:02:3d:7e:db:87:65:14:03:
         00:3f:55:0a:96:6e:56:e3:ed:0a:7d:87:88:56:f0:85:72:e0:
         09:c3:a3:f5:14:b7:66:e2:34:78:5d:a2:8a:dd:6e:2d:68:9a:
         e4:5e:9d:9f:28:ad:a1:b3:c1:44:32:a8:ad:80:3c:3d:1a:65:
         48:90:5b:9e:33:4d:aa:2f:5c:e3:ef:20:b7:07:d5:0a:08:7d:
         0c:1b:6a:b6:43:e7:05:00:86:c9:70:45:f8:88:29:d5:1e:de:
         1a:71:1a:b0:25:88:9e:24:51:73:36:eb:35:7d:a8:62:63:d9:
         22:47:84:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:39:01 2026 by rpki-client