Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/323830343a346537303a3a2f33332d3333203d3e20323638323631.roa
File:                     323830343a346537303a3a2f33332d3333203d3e20323638323631.roa (raw, json)
Hash identifier:          6gB7nDMAVpvfAEnyEMcThuBwMIFUeluj0Y0GrPYQI28=
Subject key identifier:   A9:4C:0F:C0:B5:7F:2A:88:63:65:C2:11:42:8B:75:A0:51:5D:9C:EE
Certificate issuer:       /CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
Certificate serial:       0584752A7B8BF91A74C2D606E733D684E82EE476
Authority key identifier: 48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/323830343a346537303a3a2f33332d3333203d3e20323638323631.roa
Signing time:             Thu 05 Feb 2026 16:54:07 +0000
ROA not before:           Thu 05 Feb 2026 16:49:07 +0000
ROA not after:            Thu 04 Feb 2027 16:54:07 +0000
asID:                     268261
IP address blocks:        2804:4e70::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl
                          rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:84:75:2a:7b:8b:f9:1a:74:c2:d6:06:e7:33:d6:84:e8:2e:e4:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
        Validity
            Not Before: Feb  5 16:49:07 2026 GMT
            Not After : Feb  4 16:54:07 2027 GMT
        Subject: CN=A94C0FC0B57F2A886365C211428B75A0515D9CEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:98:52:8d:26:a1:5f:7f:61:88:7b:e4:74:ef:
                    c6:82:c1:f2:b9:fd:2c:76:6e:88:a4:d8:af:2c:82:
                    f6:83:05:d2:2d:92:8f:3e:4d:98:c5:cb:2e:8e:fc:
                    94:9e:c1:85:b5:e1:5f:8b:3a:c3:57:5f:bb:79:64:
                    c1:11:86:92:43:d6:d4:e5:85:2a:4f:e2:2c:f3:af:
                    b1:6a:4a:69:a8:68:e9:70:f9:61:92:43:87:60:7c:
                    12:e2:3f:dd:b6:95:69:8b:eb:7d:d7:4e:1e:8c:87:
                    36:60:02:a9:e3:7d:79:28:ae:f9:89:2e:d5:32:a7:
                    f8:75:00:d4:ec:4a:09:0e:3e:59:fe:78:b1:3e:b2:
                    05:cb:4e:a5:99:7b:11:2d:37:93:68:13:5c:26:2d:
                    ff:06:83:8b:d3:cb:41:44:95:14:e7:74:bf:27:ce:
                    f0:08:ed:00:f9:ce:bd:18:fb:7b:14:a9:7b:46:32:
                    28:fe:fe:9e:98:ac:47:f9:5c:d0:87:0d:87:76:4f:
                    8b:ec:5e:3e:1c:a6:85:e5:6f:47:ba:38:f8:01:a1:
                    37:4c:65:50:bb:62:47:07:d5:22:61:80:1b:ba:83:
                    03:bd:54:53:77:26:ce:62:cf:a7:e2:71:8b:14:cd:
                    b2:11:5f:bd:75:f5:d0:fd:a3:f4:2d:62:09:45:b4:
                    9b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4C:0F:C0:B5:7F:2A:88:63:65:C2:11:42:8B:75:A0:51:5D:9C:EE
            X509v3 Authority Key Identifier:
                keyid:48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/323830343a346537303a3a2f33332d3333203d3e20323638323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e70::/33

    Signature Algorithm: sha256WithRSAEncryption
         90:c0:82:89:26:cd:be:61:62:c0:74:25:de:2b:bd:9d:be:eb:
         90:c7:09:5a:a0:ae:93:4c:1f:f1:a4:d9:d9:9f:cc:1a:7d:ea:
         5d:d8:20:29:bf:5e:39:6a:bd:77:d9:81:f0:81:08:fd:28:a6:
         75:0c:7b:23:4b:54:d8:56:7c:da:04:1e:d5:01:29:6b:ff:1c:
         23:a0:03:2b:6c:de:8c:31:1a:cd:30:63:05:c1:4a:16:d0:a8:
         76:9c:96:5b:82:48:f4:13:94:27:63:c5:da:1e:0c:05:0a:17:
         2c:ae:8b:e0:53:b0:3a:65:72:e3:38:ca:74:d6:7b:9e:2c:40:
         75:a7:8c:47:a6:03:90:55:4c:31:11:9d:38:80:d6:92:2a:9f:
         12:da:55:fd:03:ac:2d:bd:47:b9:60:cf:16:d2:fc:35:21:1d:
         2e:d6:48:43:bb:c8:9d:fd:a9:26:c8:aa:6d:e7:2f:6d:09:45:
         a9:9e:4a:82:2b:dd:2e:a9:1d:87:46:6c:8e:fd:cc:52:b7:de:
         32:1f:ca:87:9a:42:dd:4e:6d:d3:2e:92:de:c2:04:da:97:a8:
         89:32:57:52:95:ff:43:8e:d5:72:17:d4:63:da:b4:6c:d7:b5:
         f0:88:c7:a9:84:0c:bb:74:1f:e5:15:32:09:14:7f:7c:8e:a5:
         9d:81:eb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:27:50 2026 by rpki-client