Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/323830343a323962383a3a2f33322d3438203d3e203238313236.roa
File:                     323830343a323962383a3a2f33322d3438203d3e203238313236.roa (raw, json)
Hash identifier:          jCKLv7/vfH+g8dQcJ3SK8LQImbkwqYH/UsGjCD+eSio=
Subject key identifier:   28:20:AC:EA:2F:E8:95:59:F0:82:F7:3E:F9:1D:E7:D1:03:71:9B:96
Certificate issuer:       /CN=E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0
Certificate serial:       3CEB618BCC3929F9BB3BA3A4ED3DA128ED718F50
Authority key identifier: E4:30:D5:4D:16:16:18:B6:A1:98:E8:A4:E5:3F:BF:6D:3C:7C:F0:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/323830343a323962383a3a2f33322d3438203d3e203238313236.roa
Signing time:             Tue 13 Jan 2026 20:02:27 +0000
ROA not before:           Tue 13 Jan 2026 19:57:27 +0000
ROA not after:            Tue 12 Jan 2027 20:02:27 +0000
asID:                     28126
IP address blocks:        2804:29b8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.crl
                          rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:24:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:eb:61:8b:cc:39:29:f9:bb:3b:a3:a4:ed:3d:a1:28:ed:71:8f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0
        Validity
            Not Before: Jan 13 19:57:27 2026 GMT
            Not After : Jan 12 20:02:27 2027 GMT
        Subject: CN=2820ACEA2FE89559F082F73EF91DE7D103719B96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a1:41:0a:1b:24:51:f2:d7:f1:e5:72:2c:f8:
                    e2:28:37:08:95:3e:2b:fc:96:d2:58:30:c8:d1:fb:
                    a7:af:70:12:fe:f9:f0:29:32:a5:ca:2c:30:bb:56:
                    63:20:c2:72:97:4a:04:22:48:76:f4:d4:ac:01:67:
                    c0:1c:a5:be:d5:39:28:ea:3d:a4:04:08:de:d5:75:
                    15:63:47:19:e5:17:52:7a:10:93:36:37:c3:4e:03:
                    95:de:c9:ef:12:99:9e:94:0d:3b:b6:7c:d3:62:d7:
                    e9:51:0c:e1:a4:19:2d:2a:8b:a4:a4:2e:f2:48:f9:
                    fd:60:f6:a4:a3:b6:e2:b5:1e:0d:52:11:e6:cd:dc:
                    9b:32:99:90:7a:4b:5c:c6:a8:0e:55:4c:fd:68:42:
                    e7:71:84:e6:ba:aa:3e:3a:b3:e3:ab:d7:56:51:45:
                    ba:25:f0:9f:37:f7:fe:0d:06:ca:7e:9e:89:81:8a:
                    de:48:b3:bf:ca:8a:75:25:2e:c9:93:ec:ed:fe:46:
                    4d:fd:e4:f1:1a:3a:f0:7d:04:00:80:ca:c9:9b:4b:
                    eb:d2:e2:14:e3:53:2e:bf:b7:ac:95:42:09:5e:98:
                    d8:f9:3b:b0:a3:c3:e6:28:85:3b:65:6b:f7:f3:24:
                    ed:09:ae:89:78:1a:7f:b4:5f:73:a3:8a:3e:0c:d8:
                    14:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:20:AC:EA:2F:E8:95:59:F0:82:F7:3E:F9:1D:E7:D1:03:71:9B:96
            X509v3 Authority Key Identifier:
                keyid:E4:30:D5:4D:16:16:18:B6:A1:98:E8:A4:E5:3F:BF:6D:3C:7C:F0:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/323830343a323962383a3a2f33322d3438203d3e203238313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:29b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:21:c6:64:6f:01:b6:43:33:0a:aa:b4:71:89:b0:e6:2c:95:
         72:cb:c7:ca:e2:6d:0b:29:51:e9:41:99:52:c1:bd:2c:3e:dd:
         a8:b6:06:db:a8:67:2d:96:87:04:c4:24:85:eb:b0:0e:df:fb:
         3c:54:f2:71:7b:50:b1:67:e6:c2:cf:dc:5a:a0:83:ac:78:bd:
         96:81:58:36:95:4f:56:f7:cc:4c:e2:ce:a1:38:e9:94:20:5f:
         ac:c2:e5:0a:81:12:f4:4d:c8:54:41:59:b6:33:cb:81:61:9a:
         25:50:26:ec:57:ea:d7:2e:c3:f0:05:a4:94:f8:d2:96:27:7f:
         8c:e8:db:28:1f:d1:ce:c0:81:e5:83:18:fb:ab:02:2b:b3:0e:
         db:42:98:be:fc:64:6f:ad:93:3d:e5:cb:5c:c4:e9:95:0e:4d:
         f5:62:eb:07:96:c3:bd:b4:cf:0c:2d:79:3b:fe:d6:1f:76:63:
         01:25:a6:3e:05:02:a9:e5:1e:e9:e5:9a:f1:a2:3d:6a:47:b6:
         28:21:96:08:84:bd:41:57:8e:9b:b5:a6:d5:95:95:ff:6e:72:
         fb:9a:db:73:26:61:fe:33:b0:df:40:98:dd:ab:1a:65:3e:89:
         45:c6:f8:1c:74:44:ff:d0:45:67:ab:bb:1b:76:fb:66:09:fd:
         50:77:f6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:23:29 2026 by rpki-client