Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/323830343a343965383a3a2f33322d3438203d3e20323637323038.roa
File:                     323830343a343965383a3a2f33322d3438203d3e20323637323038.roa (raw, json)
Hash identifier:          GB8CUV7v3At09/nS55hl0UuOBak2IfKD209F0V02LXk=
Subject key identifier:   3A:99:77:C3:A8:0C:B4:44:ED:4E:7C:46:AA:3B:89:8A:9A:F0:46:4E
Certificate issuer:       /CN=01491D8C95E86A0BBB53759D44C7888616D20029
Certificate serial:       6B7B4A5537BD2F5B550FAF8279DAD1C1DE9C1B18
Authority key identifier: 01:49:1D:8C:95:E8:6A:0B:BB:53:75:9D:44:C7:88:86:16:D2:00:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01491D8C95E86A0BBB53759D44C7888616D20029.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/323830343a343965383a3a2f33322d3438203d3e20323637323038.roa
Signing time:             Tue 17 Feb 2026 18:19:25 +0000
ROA not before:           Tue 17 Feb 2026 18:14:25 +0000
ROA not after:            Tue 16 Feb 2027 18:19:25 +0000
asID:                     267208
IP address blocks:        2804:49e8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/01491D8C95E86A0BBB53759D44C7888616D20029.crl
                          rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/01491D8C95E86A0BBB53759D44C7888616D20029.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01491D8C95E86A0BBB53759D44C7888616D20029.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 16:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7b:4a:55:37:bd:2f:5b:55:0f:af:82:79:da:d1:c1:de:9c:1b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01491D8C95E86A0BBB53759D44C7888616D20029
        Validity
            Not Before: Feb 17 18:14:25 2026 GMT
            Not After : Feb 16 18:19:25 2027 GMT
        Subject: CN=3A9977C3A80CB444ED4E7C46AA3B898A9AF0464E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fa:0e:e5:81:45:78:e7:bc:18:1d:f1:57:e4:
                    f4:1a:4b:2d:7b:35:03:e2:b3:ce:0b:71:cf:be:36:
                    b5:89:f5:20:56:26:6f:d7:77:8d:05:25:33:c7:53:
                    fc:91:a9:d1:91:09:5b:78:ed:dd:a5:46:0a:7c:c8:
                    a0:a6:ef:6b:43:1a:36:73:17:dd:a5:c6:98:00:cf:
                    8b:3d:c1:84:ae:8b:81:8b:0f:d1:f8:26:8c:92:3d:
                    bf:54:66:15:85:41:d7:06:cd:39:9f:c6:d9:68:84:
                    96:da:f8:cc:e6:b0:d7:97:26:1e:bd:fa:f2:d5:31:
                    65:c0:e5:a6:1b:2b:a4:df:3f:58:e7:99:6f:01:03:
                    01:8c:b9:1d:aa:01:01:0f:81:2c:61:2b:82:b0:c3:
                    fd:2f:8e:a1:5f:c7:71:95:df:11:54:3e:d5:dc:72:
                    4d:0f:78:cf:5c:86:66:9e:53:1d:27:d7:6f:e0:2d:
                    06:d4:bc:e9:a1:f8:5b:b2:34:a9:64:9d:6d:df:28:
                    53:ed:22:61:6d:3c:b4:73:61:47:11:68:51:09:53:
                    d8:74:7d:cb:55:ab:f1:87:67:29:a7:0b:49:7b:af:
                    dc:57:aa:ae:08:28:3f:2b:b1:5f:ca:e3:9a:93:30:
                    2f:fc:9d:43:2d:f4:cb:2e:d5:46:38:ab:4b:7b:b3:
                    eb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:99:77:C3:A8:0C:B4:44:ED:4E:7C:46:AA:3B:89:8A:9A:F0:46:4E
            X509v3 Authority Key Identifier:
                keyid:01:49:1D:8C:95:E8:6A:0B:BB:53:75:9D:44:C7:88:86:16:D2:00:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/01491D8C95E86A0BBB53759D44C7888616D20029.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01491D8C95E86A0BBB53759D44C7888616D20029.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/323830343a343965383a3a2f33322d3438203d3e20323637323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:49e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:6a:ea:07:fb:65:a9:ae:6d:3f:0f:0b:4f:c1:2f:c8:e0:cb:
         38:a4:9c:a5:84:b6:9f:b5:11:cd:2c:ca:d5:05:50:ce:b6:fd:
         9d:db:48:57:ed:8d:5b:30:30:bc:02:25:0b:e4:8f:97:29:ac:
         82:73:74:2b:69:6e:d0:60:3c:e6:89:be:15:59:5f:6e:8b:59:
         7b:ed:7d:1f:d0:a1:ce:85:b9:db:56:f9:c4:bf:23:fe:3f:f3:
         55:8b:a2:f0:7f:17:a4:0e:2e:f8:4d:e2:18:b4:26:60:b6:13:
         d2:86:85:5f:1d:bc:95:fa:7e:7d:73:b7:75:89:5b:5d:3c:2d:
         bc:ac:18:a7:4e:29:9e:49:b9:5e:55:9a:09:a7:bc:d3:37:44:
         d6:72:e3:e3:bb:4c:9b:cf:99:81:2e:e3:b0:11:7e:97:76:7e:
         4f:50:cd:0f:70:4d:b5:cc:f1:15:3c:0a:5a:58:8e:ec:18:8a:
         76:e3:a5:d7:05:13:dd:8c:2f:b6:d0:6e:16:b8:85:3e:e8:b1:
         be:be:ad:67:d7:c7:ae:12:25:65:23:da:89:98:d2:03:d6:5a:
         f5:e1:0a:85:cc:80:d2:b8:bd:eb:be:7e:07:75:ad:98:a7:09:
         fb:16:57:f9:8a:e3:16:43:59:a9:89:58:38:e2:2e:52:04:09:
         83:c7:4a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:10:10 2026 by rpki-client