Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/1/323830343a346262343a3130303a3a2f34302d3434203d3e20323637333235.roa
File:                     323830343a346262343a3130303a3a2f34302d3434203d3e20323637333235.roa (raw, json)
Hash identifier:          gCqTH+DROrFkd+GA3yIqTm2j7YWdYpeMm0aye49IZB0=
Subject key identifier:   28:8B:D8:C8:D4:09:68:FF:41:68:67:E3:B6:EE:B0:0F:50:41:D3:E3
Certificate issuer:       /CN=C0AF97A488EE7A27D1DDA7B6D5982708540FAD67
Certificate serial:       3C29E8F5A46BABAB23AD7E94974FD9700B9184A8
Authority key identifier: C0:AF:97:A4:88:EE:7A:27:D1:DD:A7:B6:D5:98:27:08:54:0F:AD:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/1/323830343a346262343a3130303a3a2f34302d3434203d3e20323637333235.roa
Signing time:             Thu 05 Feb 2026 14:46:22 +0000
ROA not before:           Thu 05 Feb 2026 14:41:22 +0000
ROA not after:            Thu 04 Feb 2027 14:46:22 +0000
asID:                     267325
IP address blocks:        2804:4bb4:100::/40 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.crl
                          rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 10:51:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:29:e8:f5:a4:6b:ab:ab:23:ad:7e:94:97:4f:d9:70:0b:91:84:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0AF97A488EE7A27D1DDA7B6D5982708540FAD67
        Validity
            Not Before: Feb  5 14:41:22 2026 GMT
            Not After : Feb  4 14:46:22 2027 GMT
        Subject: CN=288BD8C8D40968FF416867E3B6EEB00F5041D3E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4d:3b:53:71:6a:83:af:6d:f3:18:18:dd:bc:
                    d5:f0:80:f1:f5:bb:7c:c6:95:17:e8:8a:af:30:55:
                    05:fd:53:5d:92:cc:ef:04:27:fd:9e:6c:fe:0b:ab:
                    f9:cf:58:1f:f7:67:a4:12:63:bd:21:42:d0:5b:8b:
                    14:37:d7:8f:6b:b7:1d:f0:3c:4c:49:5c:b3:54:9b:
                    47:0a:76:1e:fd:8b:c2:b3:7d:b2:b4:8a:29:b8:fe:
                    d0:4c:1f:38:84:58:89:99:f5:0f:6c:65:62:9e:35:
                    83:86:ff:aa:95:11:d3:25:9f:6d:0e:e1:74:a7:74:
                    64:11:44:8c:b7:01:51:2f:c0:1b:fc:c8:6e:43:48:
                    32:ca:fb:2a:b2:77:b2:7c:0b:30:0b:d9:cb:de:52:
                    ed:a4:f8:23:58:83:bb:17:6e:5f:9c:b6:9d:db:2e:
                    4a:9a:fd:cb:1d:0c:2a:b3:ee:93:f0:ad:e1:12:be:
                    9a:90:5b:e2:f5:a1:61:cb:1a:53:67:f4:f3:71:12:
                    e2:7f:c0:7a:ab:25:3f:bf:4c:5c:9c:50:a2:09:8b:
                    11:e5:d1:63:02:f8:ab:1a:22:ae:1b:b7:e6:88:fb:
                    cb:2c:95:6f:1d:53:37:30:ba:f8:c6:17:27:59:00:
                    f9:6c:82:04:2f:a0:57:99:0c:4a:5a:e1:cd:d9:57:
                    bc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8B:D8:C8:D4:09:68:FF:41:68:67:E3:B6:EE:B0:0F:50:41:D3:E3
            X509v3 Authority Key Identifier:
                keyid:C0:AF:97:A4:88:EE:7A:27:D1:DD:A7:B6:D5:98:27:08:54:0F:AD:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/1/323830343a346262343a3130303a3a2f34302d3434203d3e20323637333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bb4:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:6e:fc:3e:bc:61:44:b4:f8:d2:6c:a1:61:70:da:f2:a1:f5:
         82:98:77:47:db:1c:1f:95:74:9c:e5:99:12:e5:b7:78:c1:a1:
         84:f4:33:57:2e:50:e7:33:f5:40:8b:74:38:e0:02:e1:52:e7:
         00:0f:43:a0:b7:57:bb:84:51:3f:e7:ca:bb:92:3b:5a:7e:62:
         d3:72:21:54:22:63:0f:22:cc:80:cd:13:e9:87:7d:d6:1b:59:
         4b:e8:df:2b:c2:10:4e:67:59:b1:ba:bc:fd:fc:3a:9d:a0:61:
         9a:ba:5a:91:7d:ae:5c:10:6d:ae:a2:de:d2:79:ab:e9:e5:d8:
         be:a8:d3:2f:b0:33:2c:01:4a:ad:13:85:5d:56:82:02:9e:d1:
         d0:83:57:ac:a6:72:85:63:46:51:b0:01:a3:a3:80:66:bd:6c:
         1a:52:60:07:94:6e:a5:65:0f:78:d9:8f:77:89:c2:0f:c0:11:
         fe:59:7b:f0:06:aa:b5:df:3f:4b:59:32:f8:5f:5f:dc:15:12:
         f4:90:a8:0e:e8:73:cf:98:63:04:69:f8:7f:15:fb:e6:ac:2c:
         29:96:02:f7:08:b6:ae:0b:46:2d:a5:b4:f0:b3:b4:48:a6:de:
         cd:3c:06:62:80:22:12:bf:09:59:44:6c:99:20:fc:b3:b6:e0:
         25:1f:e7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:51:16 2026 by rpki-client