Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/323830343a3338383a3a2f33302d3438203d3e203232303835.roa
File:                     323830343a3338383a3a2f33302d3438203d3e203232303835.roa (raw, json)
Hash identifier:          QX0lp3kEhKWBLR0gz1flhphIY1S+5hSwuC+kdewoYkY=
Subject key identifier:   25:01:DA:34:5C:1F:50:AD:AA:BD:8C:C6:92:5A:BC:BF:89:36:8B:B6
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       38C93070B07F4D2E762695D94206ABCC5BD7F802
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/323830343a3338383a3a2f33302d3438203d3e203232303835.roa
Signing time:             Wed 04 Feb 2026 20:00:19 +0000
ROA not before:           Wed 04 Feb 2026 19:55:19 +0000
ROA not after:            Wed 03 Feb 2027 20:00:19 +0000
asID:                     22085
IP address blocks:        2804:388::/30 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
                          rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c9:30:70:b0:7f:4d:2e:76:26:95:d9:42:06:ab:cc:5b:d7:f8:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Feb  4 19:55:19 2026 GMT
            Not After : Feb  3 20:00:19 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e6:b6:2e:8b:79:fe:74:31:bc:a2:20:6b:21:
                    d9:14:7d:be:9e:2b:fe:f5:79:9b:3a:6c:41:5a:1e:
                    61:40:21:d0:88:2d:75:0f:15:f9:b6:4b:b1:71:7c:
                    8e:f0:5e:39:5d:7a:39:d2:c1:b7:aa:a9:a4:e0:d4:
                    ea:76:72:ef:2a:5f:31:3a:b7:14:03:9c:a8:e9:a5:
                    d1:ea:8d:18:33:58:ea:0d:94:0d:2a:31:54:be:3f:
                    a5:23:da:3f:28:c1:6c:1e:50:c3:1f:1e:92:92:a2:
                    fc:a9:50:ae:65:30:53:a6:22:bc:04:9d:a8:e8:b2:
                    9a:91:35:bd:a9:b6:f5:df:dd:af:58:ba:17:f4:5a:
                    37:13:28:c1:3e:25:79:1c:7c:ef:63:36:1e:11:d9:
                    ac:d3:d9:74:54:16:34:74:2e:b9:06:b5:0f:20:a5:
                    c8:83:58:ae:6f:0c:eb:23:91:26:fe:51:83:d1:11:
                    5e:a3:6c:b4:d0:43:88:49:c2:01:9a:ed:8e:2b:34:
                    ac:30:3a:ac:92:a1:93:67:be:b5:ad:10:16:e7:4a:
                    f9:bd:93:e8:3b:c7:fd:d8:25:86:f2:c0:4b:36:be:
                    72:bd:75:38:34:ab:dc:c6:27:6e:22:3b:00:1e:4c:
                    bf:01:dd:0b:36:59:3b:08:a6:21:b1:51:78:00:8e:
                    35:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:01:DA:34:5C:1F:50:AD:AA:BD:8C:C6:92:5A:BC:BF:89:36:8B:B6
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/323830343a3338383a3a2f33302d3438203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:388::/30

    Signature Algorithm: sha256WithRSAEncryption
         24:62:2b:a4:cd:10:a7:6b:2e:0e:9e:f7:53:c8:8b:7e:a7:a1:
         28:8c:68:15:91:ec:82:fa:3a:85:67:f3:60:fe:ad:80:31:26:
         65:d6:ce:9f:bd:47:41:4b:ff:92:5e:34:48:29:c4:62:f6:71:
         44:45:f8:a2:e7:f9:4b:8d:60:c7:fc:2b:27:76:01:1c:b4:8c:
         89:43:aa:fc:1b:9a:b1:03:bd:32:de:62:b6:58:03:52:6f:5f:
         ac:b8:d1:32:bb:7e:d7:28:de:86:cc:a9:c6:82:be:8b:ab:ce:
         43:9a:ce:c7:9a:22:ac:46:b2:a5:af:c1:13:df:41:85:33:86:
         d8:00:61:94:45:49:98:fe:e1:a8:7e:a3:c0:a6:5e:65:0f:43:
         8c:ed:ca:66:1b:54:e1:04:19:9c:8e:4f:e0:23:1c:3d:02:51:
         6c:7b:2b:32:ba:27:1b:ec:5c:c3:6e:64:98:f7:de:b0:e4:12:
         94:ff:24:de:92:05:07:3b:b3:92:9c:9b:78:cf:5c:40:a2:69:
         02:0f:4d:9a:e5:60:d1:61:69:a1:c1:fe:75:eb:8b:01:0b:c0:
         c8:07:07:30:55:bc:9b:57:ac:e0:be:fc:74:eb:97:38:12:f7:
         e8:3d:41:a5:51:a3:80:2b:85:94:9c:4b:c0:6f:63:14:0d:38:
         4a:41:58:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:20:52 2026 by rpki-client