Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/323830343a373366383a3a2f33322d3332203d3e20323730393439.roa
File:                     323830343a373366383a3a2f33322d3332203d3e20323730393439.roa (raw, json)
Hash identifier:          JQ5SVQoYS1TJdeiD3c7cXwL9TNeI4YdTtRuu8ewxifc=
Subject key identifier:   BA:78:D2:F2:B0:68:EA:28:F7:1B:9D:C1:B5:E0:2D:5C:85:90:94:3C
Certificate issuer:       /CN=95B2CF7C5635CD912BBD7A8DED184CC398CBE307
Certificate serial:       2FC5062B93BE503D6554705017FEB19999A6DC7C
Authority key identifier: 95:B2:CF:7C:56:35:CD:91:2B:BD:7A:8D:ED:18:4C:C3:98:CB:E3:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/323830343a373366383a3a2f33322d3332203d3e20323730393439.roa
Signing time:             Thu 05 Feb 2026 03:28:49 +0000
ROA not before:           Thu 05 Feb 2026 03:23:49 +0000
ROA not after:            Thu 04 Feb 2027 03:28:49 +0000
asID:                     270949
IP address blocks:        2804:73f8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl
                          rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:18:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c5:06:2b:93:be:50:3d:65:54:70:50:17:fe:b1:99:99:a6:dc:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95B2CF7C5635CD912BBD7A8DED184CC398CBE307
        Validity
            Not Before: Feb  5 03:23:49 2026 GMT
            Not After : Feb  4 03:28:49 2027 GMT
        Subject: CN=BA78D2F2B068EA28F71B9DC1B5E02D5C8590943C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a0:f8:36:cf:62:3a:a9:91:f4:4e:f2:3d:6b:
                    d5:8e:31:e1:64:c9:8a:c1:1f:30:25:89:86:75:3e:
                    98:8b:a7:2a:e8:42:1c:c5:dc:f0:51:13:44:52:c4:
                    59:a0:6d:3d:22:fb:f1:e9:32:10:22:51:41:e2:69:
                    1b:c7:d7:56:3b:f8:f1:fb:88:69:e6:61:be:c5:47:
                    27:ee:22:88:71:da:4c:df:f0:9b:fb:a5:9f:69:d8:
                    03:36:9c:56:d3:3c:78:6a:7b:0c:11:f0:eb:2b:f3:
                    a2:c1:ef:7b:f0:37:d3:32:95:60:59:22:8b:43:2a:
                    ff:49:92:46:d7:db:51:03:1d:e0:11:99:26:34:2c:
                    81:0b:fb:5f:91:57:ff:b9:fd:2c:0b:92:a6:0e:95:
                    da:09:d1:fe:ce:90:94:09:e3:ae:c1:5e:7d:0a:e3:
                    05:86:6f:23:56:2d:d5:0e:7d:e3:61:ae:64:c0:8c:
                    80:b5:2b:c4:51:60:aa:8f:d4:28:8f:65:76:17:fa:
                    05:5b:61:6a:67:15:17:90:6e:65:31:4c:d6:71:75:
                    a5:b0:2a:a8:a6:a6:d8:fd:8d:3c:83:d3:79:e0:ee:
                    ad:62:e1:1b:fb:1c:ac:ac:b4:c0:0b:27:9f:49:65:
                    ab:c1:49:de:5b:fc:50:13:da:ac:35:41:c0:49:5c:
                    fd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:78:D2:F2:B0:68:EA:28:F7:1B:9D:C1:B5:E0:2D:5C:85:90:94:3C
            X509v3 Authority Key Identifier:
                keyid:95:B2:CF:7C:56:35:CD:91:2B:BD:7A:8D:ED:18:4C:C3:98:CB:E3:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/323830343a373366383a3a2f33322d3332203d3e20323730393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:61:9d:d4:48:95:44:e4:13:59:47:53:c1:5f:17:b2:0c:a4:
         49:c6:3c:e2:03:2c:56:ff:2f:97:3e:3d:fd:e6:ec:6c:56:78:
         87:92:d6:ab:6b:70:33:6d:a6:c6:0e:30:fd:5f:66:cb:66:b7:
         ab:80:af:a7:a0:8c:46:00:63:6b:9e:c5:f1:ac:57:c6:72:04:
         51:c5:98:3f:8f:0a:a9:8d:bf:8d:09:7e:99:27:a9:59:00:c3:
         2b:10:b7:86:09:81:ad:d2:5f:fe:12:1b:24:e9:92:6e:bc:9f:
         b5:f7:ba:23:3a:d6:64:73:4a:e7:96:73:6a:cf:ae:ed:74:a7:
         97:fe:62:3f:59:d0:b8:c1:29:fa:4e:cb:1d:25:b6:73:d3:48:
         68:35:29:e0:2e:1c:b2:6f:e9:61:df:4c:11:19:c7:26:79:ce:
         13:9a:1b:25:bc:e2:74:8f:a0:5e:e1:fa:81:26:22:27:c2:47:
         15:47:97:45:fb:05:c6:87:19:2f:fe:71:ef:ef:51:0d:7a:9f:
         69:49:61:27:8a:84:97:11:ab:73:37:54:c6:6a:04:05:ce:86:
         43:67:88:13:58:9b:e9:c5:05:9c:b1:bc:72:87:15:3c:2d:7b:
         4a:a2:00:f8:82:36:c2:ab:0e:4a:79:88:ca:94:0c:e4:c5:a1:
         74:87:89:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:14:01 2026 by rpki-client