Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3136373a3a2f3438203d3e20323730373635.roa
File:                     323830343a373131343a3136373a3a2f3438203d3e20323730373635.roa (raw, json)
Hash identifier:          bHpzkUuJnTidZyBccoPDKLkjQS285RdrwYtVRQYSwNg=
Subject key identifier:   B1:F0:EA:5B:C2:BB:2C:D5:C5:54:1B:DC:CF:94:93:48:9C:5B:E9:EF
Certificate issuer:       /CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
Certificate serial:       5A85EDA381E273073ED5AADFBFCA5B9F3BF717AB
Authority key identifier: 4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3136373a3a2f3438203d3e20323730373635.roa
Signing time:             Fri 06 Feb 2026 20:00:01 +0000
ROA not before:           Fri 06 Feb 2026 19:55:01 +0000
ROA not after:            Sat 06 Feb 2027 20:00:01 +0000
asID:                     270765
IP address blocks:        2804:7114:167::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl
                          rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:85:ed:a3:81:e2:73:07:3e:d5:aa:df:bf:ca:5b:9f:3b:f7:17:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
        Validity
            Not Before: Feb  6 19:55:01 2026 GMT
            Not After : Feb  6 20:00:01 2027 GMT
        Subject: CN=3082010A02820101009ACE847D6D75B16BA257B29E79253D5C81CFA6EEBD5D4354750E3FE0DD719EA8C218D56BD4E12390101797AD1098D4B1DB66F19EE6FC8C751A5CC6914FDCDD0FC02B7823E3E1B57292561509FCFA049733536A0C63C59C692F0704A0AC99CAA2425125D6EAD07850E6F6A473DBFBCB927322334CF771DF16293159C4A3E229253330DF0FC71E10999C628D31BCF6EBD8E648526E6950FC4DE23B608412C693834DE745562EF25943263A0490014504338BF62BA0AA93B967BBDF581A6ACED305ED5D2B0B564D01D541C82E363AE6C8ED9D475EAE7DA9DFD86A1BC17AEB55C4A588773E207053938A249E2C641A0186FC1DB735B37D0E50B1E4B1626C797DAB230203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ce:84:7d:6d:75:b1:6b:a2:57:b2:9e:79:25:
                    3d:5c:81:cf:a6:ee:bd:5d:43:54:75:0e:3f:e0:dd:
                    71:9e:a8:c2:18:d5:6b:d4:e1:23:90:10:17:97:ad:
                    10:98:d4:b1:db:66:f1:9e:e6:fc:8c:75:1a:5c:c6:
                    91:4f:dc:dd:0f:c0:2b:78:23:e3:e1:b5:72:92:56:
                    15:09:fc:fa:04:97:33:53:6a:0c:63:c5:9c:69:2f:
                    07:04:a0:ac:99:ca:a2:42:51:25:d6:ea:d0:78:50:
                    e6:f6:a4:73:db:fb:cb:92:73:22:33:4c:f7:71:df:
                    16:29:31:59:c4:a3:e2:29:25:33:30:df:0f:c7:1e:
                    10:99:9c:62:8d:31:bc:f6:eb:d8:e6:48:52:6e:69:
                    50:fc:4d:e2:3b:60:84:12:c6:93:83:4d:e7:45:56:
                    2e:f2:59:43:26:3a:04:90:01:45:04:33:8b:f6:2b:
                    a0:aa:93:b9:67:bb:df:58:1a:6a:ce:d3:05:ed:5d:
                    2b:0b:56:4d:01:d5:41:c8:2e:36:3a:e6:c8:ed:9d:
                    47:5e:ae:7d:a9:df:d8:6a:1b:c1:7a:eb:55:c4:a5:
                    88:77:3e:20:70:53:93:8a:24:9e:2c:64:1a:01:86:
                    fc:1d:b7:35:b3:7d:0e:50:b1:e4:b1:62:6c:79:7d:
                    ab:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F0:EA:5B:C2:BB:2C:D5:C5:54:1B:DC:CF:94:93:48:9C:5B:E9:EF
            X509v3 Authority Key Identifier:
                keyid:4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3136373a3a2f3438203d3e20323730373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7114:167::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:c2:d0:64:09:7b:3e:5e:47:53:37:9a:30:ec:6a:e2:c2:29:
         92:77:b3:0e:47:0e:34:e0:6b:9f:7b:15:68:d4:84:12:05:72:
         b0:41:8a:7b:2c:75:0e:c2:67:f9:af:cb:a1:e0:7e:30:38:76:
         83:8e:84:15:0a:c1:f9:ce:42:60:a6:10:00:b2:62:8d:29:23:
         1b:57:ef:d3:a4:1d:e5:b9:7c:46:33:9f:84:96:05:ba:c5:ce:
         d9:6e:65:11:3d:b1:1a:62:4c:75:f3:7c:d5:24:5c:fa:ce:bd:
         6b:0d:62:85:70:a4:17:d5:52:82:ae:6f:44:e2:a7:61:ff:0f:
         8e:30:a9:bc:63:7c:07:88:28:73:1c:d2:59:d3:29:f2:d4:b3:
         77:9f:ca:ec:71:4e:95:25:b9:ab:2b:8a:d1:0b:8c:a1:f1:1a:
         15:1b:b0:c7:5b:55:47:f3:ba:99:27:cd:33:e5:fd:57:b5:c7:
         07:ee:56:0b:69:8b:34:2f:67:ce:8e:3e:c5:30:a8:7a:4a:3d:
         b5:59:bb:1b:f1:95:eb:2b:e5:6e:ab:3d:06:27:d2:96:21:bc:
         69:f0:2c:ca:54:38:d7:8f:09:fd:56:b2:c6:df:da:43:98:1e:
         87:c0:61:6e:18:38:5e:c6:de:cf:8e:b3:7f:53:fa:18:b3:7a:
         e6:c2:ad:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:52 2026 by rpki-client