Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/323830343a3732303a3a2f33322d3438203d3e20323632363231.roa
File:                     323830343a3732303a3a2f33322d3438203d3e20323632363231.roa (raw, json)
Hash identifier:          387xzk9amVofYO5ZMB/wMAqJKQSe9wFogKsEwXMaigY=
Subject key identifier:   47:04:04:31:C2:50:8C:46:DF:8A:51:8C:6C:49:F1:BA:5B:92:F1:05
Certificate issuer:       /CN=8C6FD73B7E24E707712EC0060471D46EDDC1D0A5
Certificate serial:       2780CDAE6AD15BC815AF793809BE8519887EFC87
Authority key identifier: 8C:6F:D7:3B:7E:24:E7:07:71:2E:C0:06:04:71:D4:6E:DD:C1:D0:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/323830343a3732303a3a2f33322d3438203d3e20323632363231.roa
Signing time:             Thu 05 Feb 2026 06:26:06 +0000
ROA not before:           Thu 05 Feb 2026 06:21:06 +0000
ROA not after:            Thu 04 Feb 2027 06:26:06 +0000
asID:                     262621
IP address blocks:        2804:720::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl
                          rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:80:cd:ae:6a:d1:5b:c8:15:af:79:38:09:be:85:19:88:7e:fc:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C6FD73B7E24E707712EC0060471D46EDDC1D0A5
        Validity
            Not Before: Feb  5 06:21:06 2026 GMT
            Not After : Feb  4 06:26:06 2027 GMT
        Subject: CN=47040431C2508C46DF8A518C6C49F1BA5B92F105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d6:23:62:1e:1c:07:9f:8f:04:1a:d2:fd:41:
                    be:7e:eb:08:34:8e:5d:a6:67:79:dc:80:28:dd:2d:
                    55:9b:a6:1e:14:2d:ac:95:f8:72:b9:15:98:da:f0:
                    de:33:ff:9d:12:bf:49:b9:eb:bb:2b:ac:32:36:0b:
                    86:76:51:9d:ce:74:db:b2:4a:22:45:95:20:ad:9c:
                    ee:65:58:fa:34:09:cd:5b:c9:41:e3:43:84:32:fc:
                    4d:5a:f4:28:4b:24:3f:39:fb:ff:54:f3:88:c5:3b:
                    01:22:2c:f4:24:15:8e:3a:61:74:fd:f2:3d:22:11:
                    be:4c:f5:86:e3:9b:d4:f0:26:00:c6:a3:95:ae:9a:
                    16:34:b2:d5:31:91:70:3b:4c:2b:69:c7:33:2e:22:
                    79:69:2e:28:77:d2:89:f5:79:10:fa:68:18:e0:2f:
                    50:6f:2e:fc:3e:10:51:b0:10:ac:b7:8b:f1:dc:43:
                    8a:1e:e9:5c:cc:5a:93:a1:c8:21:ae:ca:da:e0:f0:
                    f2:76:3e:36:98:e2:43:9e:06:0c:55:cb:98:bd:a2:
                    e8:a9:cf:93:9c:be:ce:1f:f4:32:b0:db:d0:54:3f:
                    83:1b:ac:b8:e4:5f:7b:9d:0d:7c:95:c8:94:92:95:
                    5c:f8:de:f8:08:22:d5:79:59:c8:7c:5a:0b:35:5f:
                    3c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:04:04:31:C2:50:8C:46:DF:8A:51:8C:6C:49:F1:BA:5B:92:F1:05
            X509v3 Authority Key Identifier:
                keyid:8C:6F:D7:3B:7E:24:E7:07:71:2E:C0:06:04:71:D4:6E:DD:C1:D0:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/323830343a3732303a3a2f33322d3438203d3e20323632363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:720::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:9f:ce:a2:8a:df:16:6d:ca:b8:f8:09:5f:d6:91:ae:d3:76:
         de:0b:b3:71:08:17:d6:c9:82:a6:5a:1a:8e:0d:a8:90:92:fb:
         85:6b:08:c2:80:41:b2:a4:15:14:18:51:2b:ba:6e:8b:35:e9:
         61:4c:d0:8f:1b:70:a9:f6:55:0b:f8:ae:d5:66:bb:4d:8c:98:
         74:06:5c:39:e2:cc:f9:21:45:72:e2:ab:88:24:71:59:75:a9:
         5c:8a:bc:f8:83:1f:4b:80:cb:45:d0:8d:0d:c4:1d:fc:75:57:
         09:3e:37:ec:2f:f5:b8:fd:77:ed:d9:38:e8:ec:bf:34:9a:a1:
         49:77:82:db:ce:3c:23:d5:32:0b:46:42:18:f7:e4:af:27:c7:
         a1:66:c1:ab:4d:1b:79:1e:25:01:39:a8:4c:6d:73:b6:e8:01:
         6b:05:d2:db:ae:30:69:50:4d:92:db:fb:1e:30:7e:99:13:a1:
         15:d3:6b:a4:88:f6:f8:fd:22:e4:b7:de:7a:92:fb:ca:50:f0:
         7e:f0:12:31:6c:0e:e5:0e:49:5b:2a:a6:ad:7d:7b:ed:fb:32:
         f0:50:9e:0b:89:47:50:62:d0:8a:a5:08:4c:c5:1d:e5:be:93:
         c7:5a:5b:90:32:12:d2:52:09:57:1b:2e:ec:51:0c:f0:89:1f:
         8b:32:3e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:04:40 2026 by rpki-client