Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/323830343a313563633a3a2f33322d313238203d3e20323633343131.roa
File:                     323830343a313563633a3a2f33322d313238203d3e20323633343131.roa (raw, json)
Hash identifier:          H4Jvs+cPVT9rrM+hO4h7CEsXzcxaq/6kvI896hctL3k=
Subject key identifier:   E2:ED:D1:BD:51:EB:E4:F9:18:0B:05:59:33:3D:63:2F:ED:2D:96:95
Certificate issuer:       /CN=51760385E21EC82EED2FB24820888A3C2AA49452
Certificate serial:       1A58AC7903C6B02CEC45253A273533E8C42EA939
Authority key identifier: 51:76:03:85:E2:1E:C8:2E:ED:2F:B2:48:20:88:8A:3C:2A:A4:94:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51760385E21EC82EED2FB24820888A3C2AA49452.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/323830343a313563633a3a2f33322d313238203d3e20323633343131.roa
Signing time:             Tue 03 Feb 2026 03:58:43 +0000
ROA not before:           Tue 03 Feb 2026 03:53:43 +0000
ROA not after:            Tue 02 Feb 2027 03:58:43 +0000
asID:                     263411
IP address blocks:        2804:15cc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/51760385E21EC82EED2FB24820888A3C2AA49452.crl
                          rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/51760385E21EC82EED2FB24820888A3C2AA49452.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51760385E21EC82EED2FB24820888A3C2AA49452.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:53:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:58:ac:79:03:c6:b0:2c:ec:45:25:3a:27:35:33:e8:c4:2e:a9:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51760385E21EC82EED2FB24820888A3C2AA49452
        Validity
            Not Before: Feb  3 03:53:43 2026 GMT
            Not After : Feb  2 03:58:43 2027 GMT
        Subject: CN=E2EDD1BD51EBE4F9180B0559333D632FED2D9695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:79:ab:6d:b8:1a:c8:1f:b1:7b:5d:c2:42:33:
                    df:9b:fe:f0:e3:a6:2f:cd:57:90:91:5f:ca:cf:11:
                    81:33:22:6f:d4:0e:a2:56:c6:5d:82:62:8a:da:ce:
                    4e:90:cd:2a:f6:07:ee:ca:cc:ea:39:6c:ae:8d:20:
                    6b:d3:9f:05:42:d4:15:bf:30:cc:ff:11:95:96:dd:
                    ed:a9:61:3c:2b:d4:6b:45:09:32:67:11:6d:58:ff:
                    e9:f8:ef:c0:bd:80:04:bd:4c:4b:d7:12:84:d0:b6:
                    3c:6c:3e:ba:52:05:6d:d0:40:9d:bf:b6:86:88:88:
                    86:d1:b7:2a:26:7d:49:7c:32:08:21:71:4e:74:9b:
                    cb:88:0d:64:23:72:cb:a7:34:3e:bb:ad:9f:31:19:
                    8f:93:a1:ef:e4:04:5c:62:34:a6:02:93:6c:f6:39:
                    ce:36:2d:ce:6b:33:a1:42:84:83:f7:ba:db:1e:f7:
                    ef:cf:fb:46:11:7c:29:f7:3d:13:1a:c8:9a:06:8c:
                    e2:bc:14:57:78:33:9a:4e:b6:6f:25:1e:d0:c6:dc:
                    a3:93:0d:6f:19:70:4e:ae:1c:0f:5e:cf:db:60:6f:
                    c4:45:89:3a:16:01:4b:aa:6b:26:e6:c0:0b:09:3c:
                    ff:b9:54:eb:be:38:96:28:b3:08:da:54:8c:c7:49:
                    1b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:ED:D1:BD:51:EB:E4:F9:18:0B:05:59:33:3D:63:2F:ED:2D:96:95
            X509v3 Authority Key Identifier:
                keyid:51:76:03:85:E2:1E:C8:2E:ED:2F:B2:48:20:88:8A:3C:2A:A4:94:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/51760385E21EC82EED2FB24820888A3C2AA49452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51760385E21EC82EED2FB24820888A3C2AA49452.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/323830343a313563633a3a2f33322d313238203d3e20323633343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:15cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:ef:b5:0b:4c:87:ff:3a:96:25:4d:cc:1c:b8:eb:f3:57:98:
         88:92:38:92:93:ef:e4:73:88:19:c0:af:53:c8:c1:4d:bc:11:
         eb:12:61:1e:6b:b2:33:df:de:79:91:24:61:e7:66:98:83:fa:
         dc:98:ca:63:bc:17:a4:09:83:55:0a:51:df:7b:f1:8e:06:a1:
         37:39:6a:20:73:cb:3d:54:9c:d9:7f:74:c8:90:1e:c8:98:72:
         ab:89:cb:ee:88:a9:72:35:03:48:c1:84:11:de:a9:c6:85:e9:
         bd:a7:1e:9a:56:d1:49:11:40:f8:67:0c:b8:df:08:ab:c6:cf:
         d5:d7:7f:e2:fc:d8:b4:14:16:10:29:4d:dd:36:56:0a:bc:40:
         0e:db:0d:55:da:5c:83:ab:a8:f4:6b:c7:86:5d:45:ce:d8:a2:
         5c:2a:48:ca:2f:8d:4e:84:43:1c:a7:fe:e0:17:1b:8d:54:0f:
         1e:a5:97:b1:8a:90:bb:ae:7e:f2:6b:90:57:bd:62:b4:ea:1e:
         8a:b7:28:79:44:84:78:2a:f3:e8:9e:79:5c:82:eb:09:49:0c:
         1b:93:3d:9d:c3:df:32:8d:f2:a7:48:2a:86:cf:64:66:74:0c:
         ac:d1:bf:8e:c8:07:be:54:e2:e0:58:ea:69:71:a6:e5:2d:cc:
         9b:06:d3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:29:55 2026 by rpki-client