Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/1/323830343a3962343a3a2f33322d3438203d3e20323632383732.roa
File:                     323830343a3962343a3a2f33322d3438203d3e20323632383732.roa (raw, json)
Hash identifier:          KpyNPU7L2qnbE/uopGUe0Y00enxahVSkF/Y5+u+jJJI=
Subject key identifier:   FC:14:F8:0C:FB:4F:66:43:E2:62:46:91:76:2C:9F:5D:1A:DD:E6:97
Certificate issuer:       /CN=87B55EA11CC3C5018472A7EF4105A798D366CC11
Certificate serial:       60D298027F26B911E5EDC7700CB026CA3DAF12DE
Authority key identifier: 87:B5:5E:A1:1C:C3:C5:01:84:72:A7:EF:41:05:A7:98:D3:66:CC:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B55EA11CC3C5018472A7EF4105A798D366CC11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/1/323830343a3962343a3a2f33322d3438203d3e20323632383732.roa
Signing time:             Thu 05 Feb 2026 16:08:35 +0000
ROA not before:           Thu 05 Feb 2026 16:03:35 +0000
ROA not after:            Thu 04 Feb 2027 16:08:35 +0000
asID:                     262872
IP address blocks:        2804:9b4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/1/87B55EA11CC3C5018472A7EF4105A798D366CC11.crl
                          rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/1/87B55EA11CC3C5018472A7EF4105A798D366CC11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B55EA11CC3C5018472A7EF4105A798D366CC11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d2:98:02:7f:26:b9:11:e5:ed:c7:70:0c:b0:26:ca:3d:af:12:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87B55EA11CC3C5018472A7EF4105A798D366CC11
        Validity
            Not Before: Feb  5 16:03:35 2026 GMT
            Not After : Feb  4 16:08:35 2027 GMT
        Subject: CN=FC14F80CFB4F6643E2624691762C9F5D1ADDE697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:07:0d:80:c0:e7:74:27:2d:75:53:5b:e1:eb:
                    36:30:4f:5a:83:ec:83:41:99:29:86:7e:12:96:5b:
                    50:44:e8:07:d8:e9:f0:36:15:b4:c6:56:f1:87:00:
                    4b:b0:ea:28:c3:8d:aa:b4:8d:64:6d:f2:1b:66:20:
                    f0:19:12:df:63:d4:4c:37:e9:10:71:20:88:94:38:
                    c4:c2:e5:92:09:d5:69:d8:ee:8f:ad:69:28:10:8c:
                    45:4b:19:0c:14:54:08:46:6e:0b:26:f0:fb:33:b3:
                    f7:c3:f7:0d:3b:6e:7f:93:65:92:d5:c5:9f:3c:c4:
                    e1:33:2a:f4:75:e5:76:f3:95:8e:ae:62:f9:e0:5f:
                    4a:c7:32:cc:0c:aa:be:e8:ef:2f:ca:57:2d:76:cb:
                    d1:5f:f3:55:c8:16:52:92:eb:a7:14:70:07:fd:c4:
                    62:cd:d3:49:4a:cc:c0:d0:31:b8:5b:1b:27:40:26:
                    d6:c8:75:4f:4b:cb:3e:88:32:c7:e5:66:80:a7:e2:
                    a4:90:0b:87:6b:5b:9c:7a:4b:e1:85:46:66:7c:c2:
                    46:f6:98:ed:ab:f3:e4:12:b7:9a:38:29:d2:d9:3b:
                    4d:b5:9f:4f:57:aa:79:66:0d:72:fb:c3:40:e1:07:
                    e9:2e:32:91:85:56:ce:fd:5d:e7:e2:d2:a6:61:57:
                    4b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:14:F8:0C:FB:4F:66:43:E2:62:46:91:76:2C:9F:5D:1A:DD:E6:97
            X509v3 Authority Key Identifier:
                keyid:87:B5:5E:A1:1C:C3:C5:01:84:72:A7:EF:41:05:A7:98:D3:66:CC:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/1/87B55EA11CC3C5018472A7EF4105A798D366CC11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B55EA11CC3C5018472A7EF4105A798D366CC11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/1/323830343a3962343a3a2f33322d3438203d3e20323632383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:34:ff:6b:25:ef:f7:5c:16:21:a2:cc:00:b8:b7:64:f0:f3:
         96:27:c9:76:95:79:91:91:a7:6d:fb:be:fd:0a:3b:ce:ae:58:
         c8:c1:a2:a5:25:16:10:67:97:2f:bd:11:ba:cb:1b:87:a4:e4:
         7d:80:cd:61:8b:d6:7f:0b:92:83:bc:5a:fb:76:02:e0:a9:37:
         57:3d:06:a5:4f:ba:ba:12:a8:a9:c1:f1:d4:c6:f4:40:ac:66:
         0d:28:8b:cd:18:56:6d:d7:8b:5b:ce:7e:8a:da:31:54:82:9f:
         fb:b9:28:35:cc:87:b3:3d:72:90:0d:9a:90:dc:97:db:5a:16:
         a8:15:e6:e5:79:a0:26:b9:e3:1c:62:19:62:ff:f6:3b:e8:2a:
         51:d5:68:84:76:f2:f2:45:78:20:38:a9:ca:a0:54:e3:85:94:
         cb:fd:ac:77:46:46:a2:49:b2:7f:ad:4a:f2:e8:a6:9d:66:b9:
         bb:be:d1:3c:01:ad:3c:6f:8f:ba:0a:02:c9:8f:11:04:d3:e6:
         a8:72:e9:fb:09:93:df:46:06:55:8f:ab:92:a7:5e:03:76:93:
         c9:af:c4:c9:9c:5f:db:90:8f:e3:af:83:5f:c2:38:31:70:99:
         ea:0e:17:87:23:9f:ff:1f:7f:92:3f:02:57:6d:4d:6a:85:50:
         ca:cf:15:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:30 2026 by rpki-client