Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/323830343a343030383a3a2f33322d3438203d3e20323635393239.roa
File:                     323830343a343030383a3a2f33322d3438203d3e20323635393239.roa (raw, json)
Hash identifier:          GAJ8WpJ1DAdh2yYjSNAaICIyXwqnfBAQyIaFmVftJOI=
Subject key identifier:   67:A9:69:22:18:50:13:85:ED:81:F4:6C:CD:8E:7F:7D:E2:09:2B:0F
Certificate issuer:       /CN=1A3ED1628CA42B3B4C8213417B61162F196BD434
Certificate serial:       405D2F7E5C4BD1C944D1391A45BFEAD32D2447E2
Authority key identifier: 1A:3E:D1:62:8C:A4:2B:3B:4C:82:13:41:7B:61:16:2F:19:6B:D4:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/323830343a343030383a3a2f33322d3438203d3e20323635393239.roa
Signing time:             Thu 05 Feb 2026 02:07:20 +0000
ROA not before:           Thu 05 Feb 2026 02:02:20 +0000
ROA not after:            Thu 04 Feb 2027 02:07:20 +0000
asID:                     265929
IP address blocks:        2804:4008::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.crl
                          rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:5d:2f:7e:5c:4b:d1:c9:44:d1:39:1a:45:bf:ea:d3:2d:24:47:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A3ED1628CA42B3B4C8213417B61162F196BD434
        Validity
            Not Before: Feb  5 02:02:20 2026 GMT
            Not After : Feb  4 02:07:20 2027 GMT
        Subject: CN=67A9692218501385ED81F46CCD8E7F7DE2092B0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:08:39:68:7a:6f:44:d4:bb:de:6f:77:9b:fe:
                    bf:b5:53:f3:ae:e4:39:7c:1d:17:f6:2f:7b:10:f8:
                    c7:63:5b:af:f3:31:9d:13:8e:ba:24:a2:4a:d8:e0:
                    e3:77:20:70:c7:0d:1e:80:08:bc:bf:3c:a6:3f:f9:
                    d6:e5:ce:a8:7f:69:36:62:75:c6:cf:0a:75:59:7a:
                    20:cb:c8:52:89:fa:88:cf:68:1b:81:2f:0f:37:99:
                    7c:65:05:00:33:b3:91:d4:65:6e:4f:f0:8b:b0:59:
                    9a:e6:c9:71:82:f4:85:ba:99:13:fa:88:22:8b:8d:
                    b2:87:76:b8:af:42:3c:56:65:64:f8:f0:47:c8:0e:
                    18:23:f0:07:4b:49:18:f7:3f:6b:f0:8f:94:9e:d5:
                    e4:68:24:33:31:81:23:7f:b7:04:58:f4:5f:d0:30:
                    e3:50:b3:85:d3:1a:6b:1b:51:ee:3d:48:71:1d:c5:
                    f3:b3:b5:85:a6:8b:59:af:f3:a6:9d:9b:5e:c8:49:
                    d9:34:58:99:10:f1:d3:46:6b:4c:93:d1:d2:88:5a:
                    9e:1f:fd:f5:ff:3b:39:ba:84:f1:aa:8d:6c:e1:3f:
                    61:8b:1d:b8:5c:9a:e0:c9:3e:9c:8f:43:20:85:0c:
                    70:0a:bc:ef:9c:40:12:61:f0:0c:13:fe:ca:bc:dd:
                    36:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A9:69:22:18:50:13:85:ED:81:F4:6C:CD:8E:7F:7D:E2:09:2B:0F
            X509v3 Authority Key Identifier:
                keyid:1A:3E:D1:62:8C:A4:2B:3B:4C:82:13:41:7B:61:16:2F:19:6B:D4:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/323830343a343030383a3a2f33322d3438203d3e20323635393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4008::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:eb:1f:d4:92:f4:3d:60:b8:3e:c5:79:02:18:66:bc:a0:cf:
         36:6c:2f:62:e8:09:eb:5b:8f:91:cf:12:0d:1c:7d:67:a7:44:
         3a:72:da:c8:eb:19:f0:4e:80:19:15:98:fd:81:47:dc:c1:d1:
         b7:d3:59:95:88:f9:70:42:4f:67:f2:1f:d4:82:7e:3f:5b:df:
         1f:1b:c7:51:66:2b:34:d9:37:ff:5d:e2:1a:ac:12:17:8d:7c:
         09:d9:ea:cd:3d:af:94:0e:99:89:68:6c:ab:2f:de:19:37:c4:
         33:b0:48:d0:51:d0:14:07:93:3f:59:c8:3b:cc:fc:71:d0:d5:
         f0:ca:c9:14:fd:e3:f2:2a:92:0b:f8:22:88:e0:fd:88:b4:c5:
         b6:7e:6e:42:0b:8f:9f:d8:30:d3:e2:59:5d:54:3c:01:87:3a:
         22:2b:18:13:5f:04:91:9d:6f:e6:1d:df:58:ad:b5:42:b1:c6:
         cf:d7:8c:c8:cf:39:9e:3e:54:fb:88:56:41:a9:44:33:5b:2e:
         1a:49:d1:e0:62:6c:c6:3e:00:6a:85:44:39:a0:6e:3c:5b:ee:
         e0:7a:85:5c:ac:9d:a0:c3:bf:72:fc:f9:d6:eb:4f:64:a7:1f:
         9e:0b:66:de:8c:56:ec:66:24:2d:6a:fa:42:5d:f5:ae:4e:29:
         d0:69:8b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:59 2026 by rpki-client