Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/1/323830343a333339343a3a2f33322d3438203d3e20323635343035.roa
File:                     323830343a333339343a3a2f33322d3438203d3e20323635343035.roa (raw, json)
Hash identifier:          tfaA7CWm9tMLr0S/IIX/xwv0x6gInnB4MftBM0XlcaI=
Subject key identifier:   53:B5:F6:C1:60:28:95:1B:8C:20:A3:29:70:78:06:32:96:78:CF:8B
Certificate issuer:       /CN=4522BB89648AA114F962AB6359DA8F28C7B660C2
Certificate serial:       684325A8EF69BA8B4769AB83FB116593AD76E6E9
Authority key identifier: 45:22:BB:89:64:8A:A1:14:F9:62:AB:63:59:DA:8F:28:C7:B6:60:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4522BB89648AA114F962AB6359DA8F28C7B660C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/1/323830343a333339343a3a2f33322d3438203d3e20323635343035.roa
Signing time:             Thu 05 Feb 2026 07:04:21 +0000
ROA not before:           Thu 05 Feb 2026 06:59:21 +0000
ROA not after:            Thu 04 Feb 2027 07:04:21 +0000
asID:                     265405
IP address blocks:        2804:3394::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/1/4522BB89648AA114F962AB6359DA8F28C7B660C2.crl
                          rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/1/4522BB89648AA114F962AB6359DA8F28C7B660C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4522BB89648AA114F962AB6359DA8F28C7B660C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:21:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:43:25:a8:ef:69:ba:8b:47:69:ab:83:fb:11:65:93:ad:76:e6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4522BB89648AA114F962AB6359DA8F28C7B660C2
        Validity
            Not Before: Feb  5 06:59:21 2026 GMT
            Not After : Feb  4 07:04:21 2027 GMT
        Subject: CN=53B5F6C16028951B8C20A329707806329678CF8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:90:ec:34:ee:b4:b9:a3:52:38:f0:86:b1:2b:
                    98:c5:3e:5c:33:e4:79:64:5a:d4:c3:7e:a6:21:fe:
                    82:af:e5:a4:91:6a:9f:36:e3:95:e1:09:9c:d2:d5:
                    6f:82:a3:a0:9f:bf:01:ab:2b:c7:25:8c:e5:2f:39:
                    1f:ee:52:04:21:16:fa:87:22:97:14:21:9f:1a:7f:
                    b3:91:fd:ac:7b:7a:12:66:71:c1:61:7f:76:fd:68:
                    fa:e5:02:96:bd:13:9d:86:57:e7:2a:50:f0:c4:a5:
                    11:4e:ee:7d:a3:41:23:5b:a0:56:b8:56:2e:56:58:
                    43:4f:42:87:61:e1:7b:ed:8d:cf:21:c8:ec:dd:43:
                    fa:83:dc:ea:ea:a1:e2:1b:ab:5d:56:a5:65:1d:18:
                    f1:d8:62:76:a7:e0:d8:c9:bb:96:f3:6a:ed:35:cb:
                    26:97:62:d2:42:ab:1f:1e:f4:ee:04:72:3f:37:1e:
                    75:f8:1b:cf:be:b2:f7:8a:7d:34:8e:49:be:67:f8:
                    33:b6:32:10:e8:3d:63:4b:89:48:c4:6f:99:6b:77:
                    ca:3f:df:6b:03:37:f6:a7:99:cc:3f:fd:a6:dd:0d:
                    fb:95:86:90:da:be:1a:a3:1e:c9:90:14:cf:11:15:
                    23:26:e3:23:0d:62:cf:46:ea:59:58:ca:0e:4d:ea:
                    14:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B5:F6:C1:60:28:95:1B:8C:20:A3:29:70:78:06:32:96:78:CF:8B
            X509v3 Authority Key Identifier:
                keyid:45:22:BB:89:64:8A:A1:14:F9:62:AB:63:59:DA:8F:28:C7:B6:60:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/1/4522BB89648AA114F962AB6359DA8F28C7B660C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4522BB89648AA114F962AB6359DA8F28C7B660C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/1/323830343a333339343a3a2f33322d3438203d3e20323635343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3394::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:03:ca:02:8a:df:50:4b:99:7e:0b:9b:c0:2e:2c:21:4f:16:
         38:cf:fc:bd:0e:66:e0:59:43:7f:f2:f3:d2:7b:31:d5:f3:de:
         5e:18:25:f5:df:86:00:00:08:b8:f4:b1:1e:f4:03:f5:80:4d:
         a0:47:be:15:7b:02:ad:e7:1c:0e:46:7f:cc:eb:9d:a0:4a:bf:
         55:4f:84:1c:18:62:cd:db:e4:96:ca:0a:19:1c:93:e2:65:7e:
         88:74:73:cd:b0:72:8b:22:dc:89:4d:12:91:4a:c9:f2:33:22:
         22:27:b7:2e:83:36:7f:4a:7f:5f:e6:a8:01:65:fe:f4:f8:a1:
         fb:7f:00:9f:53:5a:17:d0:0a:7a:8f:09:09:dd:d3:cb:3a:ea:
         1b:28:e6:6b:cb:41:65:d9:ba:e7:50:08:13:76:41:36:da:c8:
         9b:f0:00:cd:3a:d3:aa:03:73:fc:95:43:8a:34:04:ae:73:d9:
         b2:ea:76:48:45:a4:e2:ba:1c:90:f9:b1:24:97:ea:93:8f:ba:
         d3:04:39:3d:2f:b0:55:3c:de:e2:5d:28:d7:1e:00:12:9d:5f:
         20:59:56:08:a5:ea:dd:b5:d2:00:3f:34:4c:2b:a6:0d:47:c1:
         d5:d0:73:dc:6e:32:e3:4c:6a:5d:fe:28:b7:fd:b5:23:f0:77:
         28:14:e4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:18:03 2026 by rpki-client