Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PypEYBc3g5VuMHQ1onwrkUacgo8MFvFF9xeznZxb3Ps/1/323830343a346433383a3a2f33322d3438203d3e20323637343139.roa
File:                     323830343a346433383a3a2f33322d3438203d3e20323637343139.roa (raw, json)
Hash identifier:          RTfjoTwagU8nWXhtT50acYFE8ZKERNm+/MNkeO/VCDg=
Subject key identifier:   4A:D6:69:66:07:51:4F:35:F1:90:50:A8:72:A4:67:EC:07:48:1F:6F
Certificate issuer:       /CN=FF84FC3D85F0914743832D0A76268570ECB7043C
Certificate serial:       25347FFBE986F822AE65076D271C64156643832D
Authority key identifier: FF:84:FC:3D:85:F0:91:47:43:83:2D:0A:76:26:85:70:EC:B7:04:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF84FC3D85F0914743832D0A76268570ECB7043C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PypEYBc3g5VuMHQ1onwrkUacgo8MFvFF9xeznZxb3Ps/1/323830343a346433383a3a2f33322d3438203d3e20323637343139.roa
Signing time:             Thu 05 Feb 2026 00:23:02 +0000
ROA not before:           Thu 05 Feb 2026 00:18:02 +0000
ROA not after:            Thu 04 Feb 2027 00:23:02 +0000
asID:                     267419
IP address blocks:        2804:4d38::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/PypEYBc3g5VuMHQ1onwrkUacgo8MFvFF9xeznZxb3Ps/1/FF84FC3D85F0914743832D0A76268570ECB7043C.crl
                          rsync://rpki-repo.registro.br/repo/PypEYBc3g5VuMHQ1onwrkUacgo8MFvFF9xeznZxb3Ps/1/FF84FC3D85F0914743832D0A76268570ECB7043C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF84FC3D85F0914743832D0A76268570ECB7043C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:53:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:34:7f:fb:e9:86:f8:22:ae:65:07:6d:27:1c:64:15:66:43:83:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF84FC3D85F0914743832D0A76268570ECB7043C
        Validity
            Not Before: Feb  5 00:18:02 2026 GMT
            Not After : Feb  4 00:23:02 2027 GMT
        Subject: CN=4AD6696607514F35F19050A872A467EC07481F6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7a:15:3a:8f:2c:09:78:61:80:0a:23:3d:f9:
                    2d:45:95:a4:b2:8c:3d:de:e0:73:db:ab:4a:d0:32:
                    98:95:6b:96:40:86:25:3a:9f:19:f8:af:4f:43:dc:
                    72:3e:32:85:45:e2:33:28:56:f8:32:bf:d0:90:56:
                    74:3a:97:4c:aa:14:c7:e2:7e:f0:a7:9d:c4:94:57:
                    03:b0:b4:5c:10:27:71:3a:ed:93:e0:00:aa:6a:d4:
                    36:16:06:94:58:04:38:6c:b4:e4:f7:61:e0:43:98:
                    80:b7:79:33:37:c9:6a:75:08:7f:39:8e:42:65:89:
                    18:31:7c:bd:80:55:01:1c:1f:7d:74:da:14:92:84:
                    ec:b3:38:89:a7:a0:88:65:1d:6d:2b:8f:7b:ce:51:
                    c2:f1:d8:56:f9:90:6b:81:7a:38:4e:ac:4b:a0:bf:
                    fa:55:3d:36:85:80:37:13:d6:9e:3e:e1:ec:3f:89:
                    f9:39:bf:66:9c:e2:6a:e8:ee:ed:75:57:ad:0c:03:
                    84:fe:61:29:c9:de:94:d8:92:3d:2f:24:00:c0:e8:
                    c6:bd:27:83:c8:8b:6c:71:2d:fa:ce:77:10:ec:52:
                    4e:3d:49:97:5e:a5:32:a2:9e:e1:4d:19:43:82:82:
                    6e:e8:75:4e:04:56:cb:80:b0:84:21:c2:0f:f7:c1:
                    54:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D6:69:66:07:51:4F:35:F1:90:50:A8:72:A4:67:EC:07:48:1F:6F
            X509v3 Authority Key Identifier:
                keyid:FF:84:FC:3D:85:F0:91:47:43:83:2D:0A:76:26:85:70:EC:B7:04:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PypEYBc3g5VuMHQ1onwrkUacgo8MFvFF9xeznZxb3Ps/1/FF84FC3D85F0914743832D0A76268570ECB7043C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF84FC3D85F0914743832D0A76268570ECB7043C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PypEYBc3g5VuMHQ1onwrkUacgo8MFvFF9xeznZxb3Ps/1/323830343a346433383a3a2f33322d3438203d3e20323637343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d38::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:b6:5b:1b:64:4e:b6:54:42:fa:a3:72:87:74:fa:dd:3b:61:
         86:83:99:8e:81:ac:29:c3:93:5e:12:18:88:ff:db:32:d7:eb:
         60:b4:35:93:24:8c:f9:44:6c:d0:9b:93:17:b6:36:b5:03:7e:
         82:bc:87:13:76:33:dc:40:3f:5d:4f:28:2b:de:be:c8:bd:17:
         9e:f0:2e:fe:8b:ff:b6:60:96:20:1d:e5:5b:9a:13:e6:34:eb:
         e1:3b:20:61:5f:25:c5:03:a7:5e:96:0b:26:25:64:4c:36:53:
         72:65:d9:c9:46:1a:48:7d:f1:ec:4f:22:9c:33:44:ad:cb:f9:
         17:db:3e:88:7d:9f:51:fb:5a:ed:8c:37:e8:9d:0d:80:ed:e5:
         8b:e9:4a:88:13:b3:0a:d0:49:61:cf:c6:c5:b1:ff:23:65:51:
         12:47:b0:7b:43:f9:0e:98:cb:39:ea:f5:8b:27:98:54:fc:da:
         67:dc:83:24:17:7f:3a:fc:1f:a6:38:5d:97:56:47:11:8f:b0:
         22:a5:3d:85:29:c3:4e:34:ef:6b:35:42:33:1b:fc:b7:bc:02:
         ee:d4:4a:48:bd:6a:9a:95:fa:1d:f4:e5:71:2a:f7:98:39:3c:
         be:8f:ca:6d:cf:9d:08:68:8e:f1:34:42:d7:4b:57:8b:02:a1:
         11:31:97:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:11:39 2026 by rpki-client