Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/323830343a336135383a3a2f33322d3332203d3e20323636303834.roa
File:                     323830343a336135383a3a2f33322d3332203d3e20323636303834.roa (raw, json)
Hash identifier:          6gpCSdjLQ7wjZtRORlH6qNiQgozBKjMkRDB69zKGyws=
Subject key identifier:   3C:FD:1C:16:71:00:59:7E:88:A5:18:28:35:5E:10:E2:0A:8E:8B:BA
Certificate issuer:       /CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629
Certificate serial:       225DB7DEC54E578C110CC57854C5F1CC4F56F51F
Authority key identifier: 89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/323830343a336135383a3a2f33322d3332203d3e20323636303834.roa
Signing time:             Thu 05 Feb 2026 11:00:12 +0000
ROA not before:           Thu 05 Feb 2026 10:55:12 +0000
ROA not after:            Thu 04 Feb 2027 11:00:12 +0000
asID:                     266084
IP address blocks:        2804:3a58::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl
                          rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:5d:b7:de:c5:4e:57:8c:11:0c:c5:78:54:c5:f1:cc:4f:56:f5:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629
        Validity
            Not Before: Feb  5 10:55:12 2026 GMT
            Not After : Feb  4 11:00:12 2027 GMT
        Subject: CN=3CFD1C167100597E88A51828355E10E20A8E8BBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fe:77:43:56:fd:68:b1:32:17:10:03:54:40:
                    a4:65:13:b2:3c:15:ac:98:cd:48:58:50:2d:5f:57:
                    6e:d7:e1:e1:4c:73:fe:c8:14:36:3c:ff:d3:1a:f8:
                    64:05:bf:36:73:a4:cc:00:7c:8e:48:b7:bc:30:cb:
                    3d:63:65:a9:ea:51:0c:56:9b:16:cc:b2:80:a8:15:
                    eb:5e:c1:13:73:0c:fd:d0:79:b8:a1:5a:e5:80:e9:
                    58:15:83:4a:d3:e4:93:26:40:73:e5:8c:ae:d6:18:
                    03:97:fb:65:83:63:34:e4:89:6d:24:7e:dd:6c:9f:
                    00:e1:98:1e:55:37:2a:af:22:8f:b1:01:d3:26:ea:
                    04:0b:ec:f8:37:66:c3:39:ed:b8:d3:2e:be:0c:44:
                    b8:cd:ac:44:e2:8d:41:75:22:83:e6:07:fc:f1:f3:
                    61:87:24:dd:43:38:27:22:3f:c8:fa:f3:50:ff:52:
                    0a:a1:f1:27:fe:51:d7:f4:5a:76:cc:1d:9d:a8:03:
                    40:4f:45:3e:8f:e7:55:25:c4:0a:bf:15:bc:d0:b4:
                    74:77:8e:cc:74:62:26:ce:0f:b2:70:74:83:db:24:
                    c4:60:ad:85:e1:53:dc:67:b1:b5:c2:30:eb:c7:f1:
                    92:95:0f:71:6c:5f:e4:0b:41:15:e4:17:e7:fe:bd:
                    a7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FD:1C:16:71:00:59:7E:88:A5:18:28:35:5E:10:E2:0A:8E:8B:BA
            X509v3 Authority Key Identifier:
                keyid:89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/323830343a336135383a3a2f33322d3332203d3e20323636303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a58::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:42:b6:8c:a7:e2:71:0b:45:66:4b:dc:2a:4d:45:3d:78:aa:
         0d:af:44:10:5a:03:9a:9d:e5:b8:f3:b5:59:aa:a5:f6:2b:f9:
         40:1d:3c:24:3d:0f:e5:76:2d:81:46:ce:d1:39:e4:51:78:31:
         0c:1e:71:6a:b6:88:0a:57:bd:2e:4e:27:89:bc:fd:4d:6f:25:
         c9:11:bc:32:f6:ae:a2:3b:23:79:92:fd:6b:b7:77:c4:c7:ff:
         3f:35:cc:ce:96:e3:d6:98:bc:fa:e6:44:35:3a:df:dc:79:9e:
         e5:70:94:fe:0f:aa:a4:8f:19:11:88:8d:ea:ec:47:1a:c2:49:
         fb:e9:e7:d0:d1:31:c2:46:65:a0:10:02:7f:9c:75:9b:23:3d:
         67:4c:21:f7:8b:a9:16:02:d6:91:43:61:e2:b6:62:18:41:8b:
         17:b0:9d:3b:ed:e7:88:b4:cc:32:62:43:1f:51:fc:b8:cf:22:
         93:4f:62:8a:39:3a:85:66:12:70:b3:b3:6f:63:2b:90:52:17:
         1e:91:45:f1:a5:9f:04:b7:27:1b:c0:e5:5e:3c:ac:89:8f:30:
         ff:56:e3:6d:a2:8a:0d:dc:c9:2d:d1:59:23:99:c0:f6:06:1e:
         bd:20:15:99:1a:f5:e1:a2:77:44:f9:cd:01:bf:fb:c5:85:3c:
         eb:28:87:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:51 2026 by rpki-client