Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/1/323830343a3465303a3a2f33322d3438203d3e20323632343735.roa
File:                     323830343a3465303a3a2f33322d3438203d3e20323632343735.roa (raw, json)
Hash identifier:          L56RZibipzNhuohR3RgioLXVOifCMfiCCE+Yj9z+V1A=
Subject key identifier:   BE:E2:C5:C5:B3:D1:31:31:E3:D5:0D:3C:20:FC:62:E7:01:BE:F8:7D
Certificate issuer:       /CN=251F42E9CF35EC723B5F3367208AE269F803C9D8
Certificate serial:       20D1846F46F675157022105B1F87997CC337CA7D
Authority key identifier: 25:1F:42:E9:CF:35:EC:72:3B:5F:33:67:20:8A:E2:69:F8:03:C9:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/251F42E9CF35EC723B5F3367208AE269F803C9D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/1/323830343a3465303a3a2f33322d3438203d3e20323632343735.roa
Signing time:             Wed 04 Feb 2026 20:57:06 +0000
ROA not before:           Wed 04 Feb 2026 20:52:06 +0000
ROA not after:            Wed 03 Feb 2027 20:57:06 +0000
asID:                     262475
IP address blocks:        2804:4e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/1/251F42E9CF35EC723B5F3367208AE269F803C9D8.crl
                          rsync://rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/1/251F42E9CF35EC723B5F3367208AE269F803C9D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/251F42E9CF35EC723B5F3367208AE269F803C9D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 14:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d1:84:6f:46:f6:75:15:70:22:10:5b:1f:87:99:7c:c3:37:ca:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=251F42E9CF35EC723B5F3367208AE269F803C9D8
        Validity
            Not Before: Feb  4 20:52:06 2026 GMT
            Not After : Feb  3 20:57:06 2027 GMT
        Subject: CN=BEE2C5C5B3D13131E3D50D3C20FC62E701BEF87D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:59:df:db:29:f4:24:d6:03:c9:a5:01:69:f5:
                    56:9c:c6:99:2f:13:74:1c:7f:d6:88:47:37:99:c2:
                    b7:34:3c:dc:3e:53:b3:81:57:32:6c:a2:82:aa:37:
                    fa:21:aa:e0:8d:80:43:be:86:6c:d6:52:02:f5:e7:
                    a3:65:56:d9:91:67:9a:20:d4:35:af:27:81:95:7d:
                    90:88:4c:f4:a0:84:21:51:36:ae:65:97:13:00:93:
                    f5:04:cd:fc:d8:08:da:e5:21:73:f1:28:63:89:f9:
                    3a:14:72:65:a9:31:65:d0:9a:a4:9c:0f:5c:f6:e2:
                    10:c2:f0:c3:d3:67:77:86:d6:cc:6b:06:76:cd:dc:
                    f1:f3:f6:00:28:13:98:79:0f:79:bb:80:2e:3e:12:
                    16:ea:76:9b:3e:5b:1f:0c:f4:75:c7:49:d0:85:9e:
                    d2:04:ac:3e:f3:1e:08:94:72:31:28:f7:c2:d8:ab:
                    43:a7:0f:ef:0c:9c:d7:db:62:de:b8:ef:bc:e8:f8:
                    18:a7:5c:84:c9:8c:4c:7c:69:72:a2:88:bb:df:3b:
                    e3:84:74:ae:97:e6:98:9a:2b:84:ef:0f:71:e2:af:
                    98:bd:38:53:99:6f:d6:f2:f9:6f:fa:70:90:3f:96:
                    75:a4:8e:e5:a1:ac:0b:47:68:ed:38:ce:13:9c:34:
                    21:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E2:C5:C5:B3:D1:31:31:E3:D5:0D:3C:20:FC:62:E7:01:BE:F8:7D
            X509v3 Authority Key Identifier:
                keyid:25:1F:42:E9:CF:35:EC:72:3B:5F:33:67:20:8A:E2:69:F8:03:C9:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/1/251F42E9CF35EC723B5F3367208AE269F803C9D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/251F42E9CF35EC723B5F3367208AE269F803C9D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/1/323830343a3465303a3a2f33322d3438203d3e20323632343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:b0:d4:c7:6c:e1:39:5c:33:f0:da:55:d5:08:39:db:80:57:
         56:0c:fb:55:10:7c:23:5c:1a:e1:69:e4:fe:bd:03:cb:f9:4c:
         9a:c4:8b:01:02:95:51:28:55:a4:f7:01:31:4c:38:f2:c5:e2:
         44:f7:7a:ab:72:62:d7:90:ad:f6:f0:71:ef:bc:2a:f3:89:e3:
         60:9b:1f:c8:de:9d:00:0f:96:68:7d:ec:0c:e6:9c:48:92:73:
         77:dd:6a:0b:10:ae:25:3c:1a:e3:8d:79:cb:81:0d:b6:2a:3a:
         d7:d1:5d:ac:0f:31:52:66:ad:25:19:d0:32:f5:69:46:01:c0:
         d7:a1:b3:63:b6:2f:be:91:99:4d:a4:79:07:4a:ad:b0:1d:41:
         1f:62:47:63:ff:2b:ca:ba:74:4c:e5:7f:32:66:00:2b:ad:3a:
         f3:f8:ee:9f:8c:72:2b:3e:d5:ff:6e:f9:0a:cc:44:32:22:a9:
         ff:ee:3d:bb:46:e0:de:d7:fb:de:4e:a2:f7:ef:43:67:11:51:
         60:a7:a1:97:e8:e8:77:3e:01:d6:25:cc:e8:96:d5:e5:a9:7c:
         10:d7:2a:b2:23:ac:81:c0:b7:9c:e1:21:46:f3:f2:ec:20:3c:
         27:cd:19:23:23:28:23:a1:f2:04:da:2a:c9:20:dc:11:64:89:
         45:de:95:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:44:21 2026 by rpki-client