Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/323830343a373434343a3a2f33322d3334203d3e20323730393730.roa
File:                     323830343a373434343a3a2f33322d3334203d3e20323730393730.roa (raw, json)
Hash identifier:          zpVNEvEgcDXZI/zg8NtxaTjv0uZOQn3lsY5/eFE/6Ac=
Subject key identifier:   7A:C3:BE:00:8B:C0:7A:5E:E9:2E:76:A8:97:CC:86:3F:DD:8F:2A:30
Certificate issuer:       /CN=2E5712C9CCD0E705FECAA05DA82ADF1C847CA831
Certificate serial:       0DA8FDA5AB7F36BBBFDA5ADFDFFAA61DB015996B
Authority key identifier: 2E:57:12:C9:CC:D0:E7:05:FE:CA:A0:5D:A8:2A:DF:1C:84:7C:A8:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/323830343a373434343a3a2f33322d3334203d3e20323730393730.roa
Signing time:             Thu 05 Feb 2026 10:56:30 +0000
ROA not before:           Thu 05 Feb 2026 10:51:30 +0000
ROA not after:            Thu 04 Feb 2027 10:56:30 +0000
asID:                     270970
IP address blocks:        2804:7444::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.crl
                          rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a8:fd:a5:ab:7f:36:bb:bf:da:5a:df:df:fa:a6:1d:b0:15:99:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E5712C9CCD0E705FECAA05DA82ADF1C847CA831
        Validity
            Not Before: Feb  5 10:51:30 2026 GMT
            Not After : Feb  4 10:56:30 2027 GMT
        Subject: CN=7AC3BE008BC07A5EE92E76A897CC863FDD8F2A30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f2:83:25:7c:ec:a4:dc:0a:d0:f6:de:4d:5d:
                    f7:f8:08:7d:55:5d:5f:ea:b6:ec:41:47:26:08:f0:
                    3b:62:72:17:9f:e8:b7:32:d9:35:b1:5b:8e:41:85:
                    df:c6:e4:26:aa:24:c7:bc:2b:52:3c:da:95:4e:15:
                    d1:f8:e1:ac:af:ae:27:72:15:8a:83:10:17:00:71:
                    6d:62:27:50:d9:e6:f0:86:12:f5:8e:fe:4a:ef:3b:
                    38:35:b5:d2:94:c2:0d:62:a2:08:17:f3:fe:13:e3:
                    88:7e:5f:98:73:6f:f3:6a:89:2f:7a:8a:53:f7:86:
                    90:4c:bd:48:d5:b7:e6:54:22:03:13:49:64:48:12:
                    5a:ea:2d:a5:e1:76:b6:a2:0c:80:ec:dc:9f:99:52:
                    3b:fd:4d:7b:ae:d7:ed:1d:7b:f5:67:53:48:c8:fb:
                    26:b0:2a:50:4d:fc:79:d8:c6:ac:02:c6:16:f2:48:
                    c1:7a:81:68:ca:8d:3f:b4:b9:a9:5a:78:1b:97:51:
                    dd:72:ae:a2:8d:2d:e0:dd:ab:18:fb:d0:a0:3d:50:
                    dc:fb:3b:32:81:f8:68:f8:97:7b:0a:89:51:11:85:
                    db:85:6f:6f:c2:a5:31:e9:d2:b6:c7:3a:6e:18:a5:
                    fd:1f:c1:fb:eb:f1:63:df:2f:17:c4:5d:2d:26:af:
                    60:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C3:BE:00:8B:C0:7A:5E:E9:2E:76:A8:97:CC:86:3F:DD:8F:2A:30
            X509v3 Authority Key Identifier:
                keyid:2E:57:12:C9:CC:D0:E7:05:FE:CA:A0:5D:A8:2A:DF:1C:84:7C:A8:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/323830343a373434343a3a2f33322d3334203d3e20323730393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7444::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:79:fe:2d:2b:74:80:8b:dc:67:19:b2:4a:de:7d:5d:f5:6d:
         0d:4b:67:c2:24:69:b7:61:77:1f:fd:4a:42:46:21:4c:27:cb:
         84:5c:2c:ee:f6:d2:c9:40:6c:a2:66:28:d7:c4:ca:ac:5a:96:
         85:a6:89:0b:b2:d4:62:58:e8:d0:51:a3:ac:5e:ac:e7:0b:ff:
         6a:ee:91:06:45:36:fa:5c:ac:a0:bd:e8:70:31:f0:b4:e0:81:
         af:85:18:6b:c8:bf:c5:29:d7:b1:a2:01:72:9a:37:5d:e5:73:
         40:7a:53:62:bc:74:0d:7b:4a:21:c4:28:bc:ea:cf:8a:d4:22:
         e4:91:a7:12:42:11:8a:b6:55:7b:c7:24:9e:fb:7c:32:f4:b5:
         26:e7:21:d6:c2:f8:7d:d6:61:f7:4b:f4:97:89:9f:3b:93:02:
         6c:10:ba:f8:f1:e6:b5:95:ee:e3:73:13:e7:b5:d1:62:6d:c7:
         56:26:a4:73:51:15:2a:ca:84:0d:62:54:76:3c:b1:85:f4:54:
         8d:4a:f2:2d:d1:86:d6:2e:1b:cf:22:a5:58:eb:5a:c5:f0:93:
         05:1b:e6:ed:96:ae:1d:c7:42:33:ee:29:a4:f4:ff:91:8b:c3:
         b6:20:56:ee:f6:29:04:81:79:a8:79:fa:e9:59:88:89:f6:ad:
         1a:d1:60:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:44:48 2026 by rpki-client