Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/1/323830343a346262343a3a2f33322d3334203d3e20323637333235.roa
File:                     323830343a346262343a3a2f33322d3334203d3e20323637333235.roa (raw, json)
Hash identifier:          LlfdshQfFiC7Xt6Ul/hrSDgSdiacZVB24el5mUXaSEM=
Subject key identifier:   85:53:9C:E5:EC:99:29:D4:55:F2:6A:66:5D:B2:01:57:C8:87:76:F3
Certificate issuer:       /CN=C0AF97A488EE7A27D1DDA7B6D5982708540FAD67
Certificate serial:       63AB27EFCDA5A198C72D45AFAC9EBE42FD0CA696
Authority key identifier: C0:AF:97:A4:88:EE:7A:27:D1:DD:A7:B6:D5:98:27:08:54:0F:AD:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/1/323830343a346262343a3a2f33322d3334203d3e20323637333235.roa
Signing time:             Thu 05 Feb 2026 14:46:22 +0000
ROA not before:           Thu 05 Feb 2026 14:41:22 +0000
ROA not after:            Thu 04 Feb 2027 14:46:22 +0000
asID:                     267325
IP address blocks:        2804:4bb4::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.crl
                          rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 10:51:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ab:27:ef:cd:a5:a1:98:c7:2d:45:af:ac:9e:be:42:fd:0c:a6:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0AF97A488EE7A27D1DDA7B6D5982708540FAD67
        Validity
            Not Before: Feb  5 14:41:22 2026 GMT
            Not After : Feb  4 14:46:22 2027 GMT
        Subject: CN=85539CE5EC9929D455F26A665DB20157C88776F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1d:d1:e9:03:10:bf:07:95:68:76:f4:30:b1:
                    75:c6:b9:99:0c:1c:e0:e0:49:a7:c9:7c:33:38:e5:
                    f7:a4:61:7d:cf:55:6d:46:79:5e:f1:ea:34:19:1a:
                    2f:a9:c6:63:6f:68:59:73:a0:23:2b:39:33:00:39:
                    af:c8:0b:f5:af:2a:1f:f9:be:bf:f6:8b:38:aa:2c:
                    d7:08:98:f7:2b:d7:a0:f2:f1:48:39:99:7a:9b:1f:
                    81:56:02:0b:ac:03:95:8b:8c:90:8e:2a:80:1a:d6:
                    eb:cf:92:aa:ad:47:11:5e:62:7b:63:19:d6:63:dd:
                    ef:95:a0:7d:2e:02:cd:6c:29:b3:3b:4d:eb:ee:cf:
                    ea:76:41:1e:87:d2:52:eb:7e:94:38:e6:78:3a:a6:
                    8b:ad:b9:4d:ea:4a:c7:4a:cc:d5:b6:bc:d7:c0:8f:
                    0a:54:33:8e:b3:07:dd:5e:30:72:84:7e:52:b8:ef:
                    c5:f0:ed:05:dd:29:fe:b6:0c:0f:49:1c:41:a6:31:
                    7d:f5:11:69:12:0a:be:b6:15:1f:5f:a0:3a:01:ff:
                    99:38:8d:90:39:11:8b:7a:40:da:2a:42:02:54:eb:
                    3c:b7:7c:1b:02:7d:51:83:f1:c9:de:fe:88:ef:e1:
                    9d:c1:26:4f:7b:73:21:88:35:aa:b3:f2:f1:a8:6a:
                    34:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:53:9C:E5:EC:99:29:D4:55:F2:6A:66:5D:B2:01:57:C8:87:76:F3
            X509v3 Authority Key Identifier:
                keyid:C0:AF:97:A4:88:EE:7A:27:D1:DD:A7:B6:D5:98:27:08:54:0F:AD:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/1/323830343a346262343a3a2f33322d3334203d3e20323637333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:e6:d7:43:3f:88:0d:6b:31:45:a0:ab:db:9d:a5:fc:fc:50:
         c5:fd:72:e3:67:a4:fe:55:d2:7d:3e:c6:d1:d0:f0:50:1c:5c:
         2a:dd:5d:67:0c:5c:fd:66:8a:c7:3c:1d:a6:5f:05:09:6f:15:
         fa:2a:dd:96:43:86:04:f3:db:1b:74:8e:c0:a8:bb:d9:e3:1c:
         05:d6:61:4a:0d:32:b0:4d:d1:fe:d3:d8:ef:6b:98:e7:88:b8:
         cc:f1:6d:63:3d:0e:5b:79:b5:3a:68:05:fe:a6:31:55:01:2e:
         b3:96:f0:e6:52:27:59:c9:70:10:a0:e3:05:b1:96:87:b1:3a:
         4f:f7:c0:ac:c6:d6:9c:4e:3d:ad:3d:e8:d4:e2:10:bb:d1:d2:
         87:98:94:3f:46:eb:d7:7e:77:94:a4:85:c4:44:3d:aa:10:8a:
         9d:4f:ce:00:ed:7e:d2:ae:a8:11:9e:8c:5e:29:1b:71:0e:5d:
         05:1b:09:fa:0e:ab:00:92:cf:d1:71:e5:7a:6f:fa:17:72:e2:
         78:ce:86:26:bf:47:2b:21:d0:55:b8:bb:0c:e7:76:93:e1:0b:
         4c:31:dd:ba:1e:ab:49:e5:60:49:03:0b:e2:dd:11:b7:5f:f8:
         6b:f8:1c:80:71:29:5d:c0:31:b2:04:4d:0d:56:c1:3b:b9:09:
         49:df:87:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:50:46 2026 by rpki-client