Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/323830343a313364633a3a2f33322d3334203d3e20323632343238.roa
File:                     323830343a313364633a3a2f33322d3334203d3e20323632343238.roa (raw, json)
Hash identifier:          Y45lMV0tTF7QfMr+YAIoDwLoagTo5lPrSAhYU9BwivE=
Subject key identifier:   1C:BB:79:33:CC:55:1A:A1:C1:A2:E2:FE:BF:13:9B:2A:5F:E4:A7:8D
Certificate issuer:       /CN=938F45B39DC45B48A1C4185FBA8AF194B821EFA1
Certificate serial:       14B62A0807A71FDC0E010BE0EEBE131534D52210
Authority key identifier: 93:8F:45:B3:9D:C4:5B:48:A1:C4:18:5F:BA:8A:F1:94:B8:21:EF:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/323830343a313364633a3a2f33322d3334203d3e20323632343238.roa
Signing time:             Wed 04 Feb 2026 21:03:09 +0000
ROA not before:           Wed 04 Feb 2026 20:58:09 +0000
ROA not after:            Wed 03 Feb 2027 21:03:09 +0000
asID:                     262428
IP address blocks:        2804:13dc::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.crl
                          rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:37:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b6:2a:08:07:a7:1f:dc:0e:01:0b:e0:ee:be:13:15:34:d5:22:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938F45B39DC45B48A1C4185FBA8AF194B821EFA1
        Validity
            Not Before: Feb  4 20:58:09 2026 GMT
            Not After : Feb  3 21:03:09 2027 GMT
        Subject: CN=1CBB7933CC551AA1C1A2E2FEBF139B2A5FE4A78D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4a:84:d0:de:3b:ab:d2:4f:da:a6:6a:86:b8:
                    6b:49:42:2f:44:06:cb:5d:ac:6f:db:ea:53:b0:17:
                    dc:43:ee:77:1d:fa:b2:af:ba:3c:2a:08:97:7d:6c:
                    a1:93:77:b4:f6:5e:3d:81:15:de:9e:07:7c:ab:06:
                    3d:65:36:e5:64:0c:90:29:a4:2e:4f:55:4f:5e:06:
                    96:12:da:6e:59:26:62:7b:9c:04:50:87:13:4f:23:
                    7f:f1:11:5a:52:62:cc:6d:75:bf:97:19:26:01:f7:
                    93:bf:40:71:e1:08:29:6f:9e:69:64:9e:3d:6c:71:
                    03:03:f5:c2:d3:c8:79:e9:4f:33:85:12:a4:24:7a:
                    47:79:64:71:53:3f:cf:fc:f2:98:0b:8a:f6:55:39:
                    b2:28:8d:54:2e:eb:bd:e5:2d:b2:4e:0a:ff:e6:ee:
                    8b:29:81:0f:5f:4c:69:9d:18:ce:7f:5e:39:87:f2:
                    b4:4c:a2:e8:21:cb:ad:c8:5f:b6:38:ff:3c:c9:c1:
                    25:7c:2c:33:3d:68:00:1d:b0:19:a3:e3:cb:34:22:
                    aa:1c:a8:8b:f8:b7:4a:ea:9e:d0:ef:46:b6:a4:99:
                    ed:af:25:46:26:25:af:60:13:53:67:d6:fd:d3:a7:
                    3c:bc:ae:b3:1b:62:a3:95:2a:a2:43:4b:e7:e2:9e:
                    92:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BB:79:33:CC:55:1A:A1:C1:A2:E2:FE:BF:13:9B:2A:5F:E4:A7:8D
            X509v3 Authority Key Identifier:
                keyid:93:8F:45:B3:9D:C4:5B:48:A1:C4:18:5F:BA:8A:F1:94:B8:21:EF:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/323830343a313364633a3a2f33322d3334203d3e20323632343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:13dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:4a:1d:e4:97:35:6a:db:68:02:e7:49:7d:2b:56:97:9a:af:
         d4:92:5d:d5:6b:4a:4f:94:a4:5f:8f:4c:22:ca:0e:84:80:96:
         42:a5:d2:0c:db:92:ea:79:50:c5:ba:2a:c0:70:8a:fe:1b:2d:
         c2:49:c3:5f:cc:83:51:e5:e5:cd:67:59:10:82:26:d8:ea:04:
         c7:2e:68:bf:d8:43:68:cc:bf:4f:df:14:90:82:34:20:d5:2c:
         03:5c:d2:86:f3:b3:07:f7:75:e3:3e:4f:ad:e2:39:f1:46:e9:
         95:2f:50:33:f1:41:2f:26:78:d5:e1:ba:94:90:45:56:1d:42:
         95:89:52:1b:59:44:ce:80:59:2c:4b:82:a0:9a:f0:06:06:06:
         65:cf:8c:5a:29:5d:9e:3d:ed:01:8b:e3:58:11:cd:4a:29:e9:
         14:7c:f9:f3:14:9d:f5:81:2f:50:76:f5:38:65:08:a9:cc:9b:
         71:82:f6:47:bb:05:f2:26:86:e3:aa:1d:d0:1a:7d:c3:2d:b3:
         5e:28:cb:5f:12:2d:b7:28:d7:37:a7:6f:dd:0c:93:05:4c:1a:
         15:23:ed:7b:36:77:f3:bf:33:aa:2a:cb:6f:d2:94:32:9c:0d:
         0e:25:c3:cc:50:c1:5c:59:0c:50:37:a6:ee:dc:34:ac:62:74:
         a5:e2:a8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:22:06 2026 by rpki-client