Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/323830343a333332343a633030303a3a2f33342d3334203d3e20323635333737.roa
File:                     323830343a333332343a633030303a3a2f33342d3334203d3e20323635333737.roa (raw, json)
Hash identifier:          mRNluWEg1V6LzvIXjgkg4/FK8UwlnU/D1MacQZOvMAA=
Subject key identifier:   7B:2A:33:21:D4:79:43:F0:93:9C:79:47:15:19:50:77:4F:1D:B4:E5
Certificate issuer:       /CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
Certificate serial:       5A90DF63C85F39DD8357AE8C68961C662149B388
Authority key identifier: A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/323830343a333332343a633030303a3a2f33342d3334203d3e20323635333737.roa
Signing time:             Thu 05 Feb 2026 23:00:13 +0000
ROA not before:           Thu 05 Feb 2026 22:55:13 +0000
ROA not after:            Thu 04 Feb 2027 23:00:13 +0000
asID:                     265377
IP address blocks:        2804:3324:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl
                          rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:27:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:90:df:63:c8:5f:39:dd:83:57:ae:8c:68:96:1c:66:21:49:b3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
        Validity
            Not Before: Feb  5 22:55:13 2026 GMT
            Not After : Feb  4 23:00:13 2027 GMT
        Subject: CN=7B2A3321D47943F0939C7947151950774F1DB4E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6f:0b:e1:3e:cf:8d:d0:e9:09:e7:8f:9b:ab:
                    c7:75:ac:dc:6b:6c:8e:d9:3c:94:b7:a9:e4:6b:22:
                    48:e8:ff:87:78:a6:84:00:b4:24:17:27:f1:32:a4:
                    43:64:f7:d0:92:5e:d5:43:7c:c9:a1:57:46:24:4f:
                    f0:d6:91:76:c4:85:3d:c3:55:f6:cd:1a:30:66:a4:
                    40:07:f5:d7:ad:c4:73:8f:06:4e:53:4a:a2:a4:b6:
                    d9:65:e2:88:a9:65:b7:34:ea:9a:0d:ef:18:2c:e8:
                    51:b7:1e:ab:82:f3:97:9b:62:e0:c5:67:65:e1:0f:
                    8c:60:5c:55:26:31:09:be:a4:54:59:ba:ea:f7:67:
                    62:07:71:17:d4:94:f9:5f:de:9a:f7:53:51:2a:59:
                    da:cb:ca:ea:06:97:29:38:65:bd:0d:0c:d2:b0:24:
                    05:2c:96:7a:61:5e:30:51:1b:b3:3f:69:af:ad:f0:
                    b9:98:0c:1b:c1:86:f1:26:4d:b6:47:9e:a9:a8:42:
                    3b:da:45:54:66:38:02:99:38:ef:3d:55:49:9b:0c:
                    2c:60:d9:3c:34:de:b5:c4:8b:fc:a5:fc:ba:49:13:
                    43:ef:9c:cd:68:10:78:82:27:94:3e:93:52:82:20:
                    9d:bb:80:0c:70:2b:65:40:b1:c5:67:86:ff:f9:d3:
                    68:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2A:33:21:D4:79:43:F0:93:9C:79:47:15:19:50:77:4F:1D:B4:E5
            X509v3 Authority Key Identifier:
                keyid:A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/323830343a333332343a633030303a3a2f33342d3334203d3e20323635333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3324:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0c:e0:e4:45:c5:47:23:1f:0b:6b:79:17:20:b2:cc:e5:01:00:
         d7:af:58:73:fa:5d:95:73:e8:80:69:ba:65:7e:d6:b0:f0:42:
         3a:11:b5:11:99:f1:f7:aa:d2:70:58:02:68:43:ff:37:e4:0d:
         ef:da:f6:f4:5e:d5:38:6b:0f:ca:2d:1d:6f:c4:e8:f3:f2:69:
         2d:5b:bc:83:a0:1f:c2:5a:0f:36:a7:4d:16:30:0f:15:85:2a:
         94:c5:43:c3:85:6e:80:53:cf:a0:9e:e5:97:00:dd:3e:ef:f2:
         fb:d0:d6:01:13:be:9f:b2:63:25:88:f6:2e:b4:21:81:ed:40:
         47:bf:47:05:ff:73:03:ca:7c:94:77:89:09:98:c4:ce:57:77:
         97:24:f4:1f:eb:83:df:79:83:6b:1e:fb:d9:84:12:80:68:d3:
         1e:51:52:d9:00:24:d3:0d:7e:af:e5:27:70:c1:4e:45:1a:0f:
         15:7d:fb:1a:42:52:d4:22:7d:d6:b1:42:76:91:69:fb:81:ae:
         3f:c6:75:0f:97:ef:e8:1b:27:25:1e:b4:ef:b9:87:8e:d4:51:
         1b:c0:29:15:ad:95:f9:7f:76:ad:f5:26:b8:b9:d0:b0:78:68:
         7c:2f:78:88:aa:96:ff:bf:5d:3d:47:b9:f9:7b:b9:55:4b:e4:
         25:b4:92:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:55:32 2026 by rpki-client