Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/323830343a323633343a3a2f33322d3438203d3e20323634333332.roa
File:                     323830343a323633343a3a2f33322d3438203d3e20323634333332.roa (raw, json)
Hash identifier:          aM6n6LxePrreI7fzZ1QEFaarrtUwigzRl0yF7ieliBE=
Subject key identifier:   99:5D:C5:70:EE:4E:49:AC:E6:10:3A:FA:4A:A4:5C:E9:06:33:A9:84
Certificate issuer:       /CN=7A509BA48E79904F69690722D65AADB9AD3A47AB
Certificate serial:       69ED37F7B4EDDFD853934B17D32F086B55D06376
Authority key identifier: 7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/323830343a323633343a3a2f33322d3438203d3e20323634333332.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     264332
IP address blocks:        2804:2634::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl
                          rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 10:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ed:37:f7:b4:ed:df:d8:53:93:4b:17:d3:2f:08:6b:55:d0:63:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A509BA48E79904F69690722D65AADB9AD3A47AB
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=995DC570EE4E49ACE6103AFA4AA45CE90633A984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:4c:ef:25:ba:3b:40:a0:9f:79:8e:e1:f5:
                    d2:dd:49:0b:0c:b8:28:4f:f2:f6:50:97:2f:da:eb:
                    3a:f7:e7:90:93:7e:d1:4f:b1:0e:79:e8:5f:92:3a:
                    f1:f2:a0:c1:2e:b8:a5:fb:2a:26:23:b2:03:2d:c1:
                    4d:81:cf:f4:87:e8:43:a0:a3:62:4b:4a:87:57:f4:
                    11:2a:ee:48:3b:fa:0d:4f:96:16:53:43:88:a8:42:
                    bd:33:79:b5:e1:cb:79:39:d8:8c:5f:89:db:4b:38:
                    84:48:43:1d:38:c5:e0:9b:7e:bd:c9:f8:ff:ca:b2:
                    9e:1c:2e:82:c1:69:a9:5a:49:db:64:6c:ab:1b:14:
                    66:b0:e7:32:dc:7d:7d:a1:45:04:ae:ca:d2:a7:79:
                    bb:6d:23:ee:32:35:8a:d7:1f:6a:3d:5c:31:54:59:
                    ac:86:ac:ff:87:f4:0d:9d:70:53:50:58:fb:0d:61:
                    2a:b1:b1:12:42:30:5f:3a:10:a0:6a:bc:6e:9d:b8:
                    ec:10:9f:01:de:be:28:47:c6:b2:91:63:d9:2d:f9:
                    0e:06:bd:75:3a:0b:c0:c1:6b:04:b4:9f:6c:d2:36:
                    46:37:ef:67:53:91:f8:aa:2f:be:8d:96:ac:4b:2b:
                    94:cf:49:de:58:8a:2b:e8:a8:84:b3:88:d9:80:1f:
                    55:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5D:C5:70:EE:4E:49:AC:E6:10:3A:FA:4A:A4:5C:E9:06:33:A9:84
            X509v3 Authority Key Identifier:
                keyid:7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/323830343a323633343a3a2f33322d3438203d3e20323634333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2634::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:b7:26:65:49:a1:7a:0b:f1:50:28:81:ca:ba:21:f5:b4:ef:
         28:2b:5f:06:2f:03:4f:b8:6b:48:0b:a4:5c:a0:00:46:9a:a6:
         b9:78:5a:3a:cd:c8:cc:3a:a6:83:e8:fc:61:7d:61:c6:2f:08:
         8b:44:e9:39:97:0c:1f:25:57:79:67:45:ce:aa:b3:03:28:5f:
         af:25:c6:25:9c:17:c4:61:9d:bb:3e:96:93:ea:fe:ef:55:c8:
         b6:9b:5c:2a:7b:d9:62:f1:6e:45:67:73:09:8d:00:20:a6:76:
         59:33:0b:64:fd:fc:af:b1:b0:21:a9:04:19:2c:4d:eb:d2:51:
         44:44:13:9b:f9:e6:a8:7e:ec:67:40:84:24:d0:ec:d4:ad:35:
         56:b4:60:e4:83:5d:90:2c:04:b7:2d:65:1a:b1:21:57:09:99:
         f1:e5:1c:a6:2b:80:b4:22:66:a7:3a:b4:6b:f9:16:0e:96:f1:
         82:5d:73:3b:0f:86:0f:0c:2b:be:f6:0d:14:68:89:d8:25:d9:
         a4:35:40:09:5b:10:0f:84:c0:cf:af:fe:08:d6:d9:ca:d2:ba:
         28:89:c0:72:4f:25:d8:e3:5e:ba:76:58:1a:bd:b1:15:8b:e5:
         7b:4e:aa:d9:f2:80:fa:19:bf:0b:85:58:e4:58:e6:df:97:29:
         4b:fd:e3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:01:37 2026 by rpki-client