Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/1/323830343a363039633a3a2f33322d3438203d3e20323639313830.roa
File:                     323830343a363039633a3a2f33322d3438203d3e20323639313830.roa (raw, json)
Hash identifier:          KuFfpPvxpmMBmw5wVjW6XaJ4WvGndTSd01ktbmo1yFU=
Subject key identifier:   8F:A5:1F:61:E9:D9:93:68:7B:96:9C:06:F8:B0:34:74:9D:CD:26:C8
Certificate issuer:       /CN=695731EDFF54F578E90830237184310A6E30F74C
Certificate serial:       1EBBEBF85E44D7B5074D5097F5D665590385D6
Authority key identifier: 69:57:31:ED:FF:54:F5:78:E9:08:30:23:71:84:31:0A:6E:30:F7:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695731EDFF54F578E90830237184310A6E30F74C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/1/323830343a363039633a3a2f33322d3438203d3e20323639313830.roa
Signing time:             Thu 05 Feb 2026 18:26:22 +0000
ROA not before:           Thu 05 Feb 2026 18:21:22 +0000
ROA not after:            Thu 04 Feb 2027 18:26:22 +0000
asID:                     269180
IP address blocks:        2804:609c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/1/695731EDFF54F578E90830237184310A6E30F74C.crl
                          rsync://rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/1/695731EDFF54F578E90830237184310A6E30F74C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695731EDFF54F578E90830237184310A6E30F74C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:53:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:bb:eb:f8:5e:44:d7:b5:07:4d:50:97:f5:d6:65:59:03:85:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695731EDFF54F578E90830237184310A6E30F74C
        Validity
            Not Before: Feb  5 18:21:22 2026 GMT
            Not After : Feb  4 18:26:22 2027 GMT
        Subject: CN=8FA51F61E9D993687B969C06F8B034749DCD26C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4d:e6:48:9c:68:75:ef:3e:89:de:5d:ba:44:
                    c2:c8:fe:8a:ea:ae:e6:25:92:c5:b7:d6:f3:57:03:
                    69:87:bb:8b:bf:0f:a9:39:16:1e:59:f1:fa:fa:99:
                    64:20:74:06:39:59:23:c8:6f:7e:08:fc:d7:90:4f:
                    66:3c:f6:78:07:6c:06:61:4d:d2:e2:d7:67:00:ab:
                    05:33:3f:db:51:3e:3a:5b:1f:f9:77:08:ed:35:2f:
                    c2:74:8d:e1:b8:c7:2b:f5:c9:d3:a1:4c:67:db:6c:
                    38:14:4e:04:84:e8:77:df:05:1a:3d:00:4c:7b:84:
                    58:78:da:5d:a7:69:43:82:b7:76:78:25:c9:64:9c:
                    a3:93:de:f5:6c:db:73:f9:6b:ad:08:6e:44:da:a9:
                    2e:53:c6:ef:f9:8c:00:b5:44:49:8f:e4:15:27:a9:
                    d5:c7:40:cd:18:fb:4e:9f:56:53:70:84:6a:a6:ad:
                    34:dd:0b:a2:f9:02:c2:0e:ea:6c:a0:33:e2:c3:b6:
                    fb:b0:c5:72:a1:33:99:af:99:9e:4a:8b:ec:70:b5:
                    48:c7:de:04:78:53:22:09:d1:84:97:b3:4a:40:45:
                    82:f6:f3:18:42:e5:6c:c5:e2:44:43:ad:2f:df:18:
                    8a:59:f5:0e:8f:dd:85:53:9c:1f:29:dc:75:aa:cf:
                    3e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A5:1F:61:E9:D9:93:68:7B:96:9C:06:F8:B0:34:74:9D:CD:26:C8
            X509v3 Authority Key Identifier:
                keyid:69:57:31:ED:FF:54:F5:78:E9:08:30:23:71:84:31:0A:6E:30:F7:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/1/695731EDFF54F578E90830237184310A6E30F74C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695731EDFF54F578E90830237184310A6E30F74C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/1/323830343a363039633a3a2f33322d3438203d3e20323639313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:609c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:fb:cf:e0:74:f5:61:42:58:8a:c5:65:e9:79:66:3d:6e:64:
         55:ee:c3:6c:97:02:90:f8:df:80:d4:cd:c9:ac:53:85:5f:75:
         46:d7:f1:2c:eb:b8:9b:b6:5a:8c:6d:1a:54:08:d0:e8:77:2d:
         ba:e0:04:02:12:d7:b4:a8:cb:8b:7a:cd:9a:24:56:63:60:4f:
         ba:02:02:d2:72:73:b6:22:c0:2a:a7:58:61:67:e7:c4:c1:ef:
         2b:7a:69:ce:c4:b3:f3:ae:6a:bc:ea:8b:1a:86:2a:cf:30:ab:
         da:43:86:c6:74:a0:67:c2:4a:44:6d:ac:15:e1:90:ed:13:71:
         a7:60:65:3e:e6:59:09:03:4d:ad:d1:0f:08:03:2d:8c:71:c0:
         f3:74:b3:08:25:09:02:3c:8e:6d:dd:88:30:b0:89:d1:38:4b:
         70:02:c7:0c:58:55:8d:04:58:bb:ef:19:80:70:2d:95:4c:e4:
         51:20:ec:73:71:19:d4:72:0c:08:77:ad:31:e0:07:d5:c9:59:
         a0:23:5e:47:fa:3e:fa:da:db:2c:cc:2b:dc:8c:22:70:b5:7f:
         61:62:37:f1:0e:3f:f9:94:a1:13:86:55:b9:c0:31:b0:47:3b:
         c6:ab:ed:01:17:80:6c:93:7d:d1:af:5e:6a:a5:dc:69:50:88:
         db:39:20:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:44 2026 by rpki-client