Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/323830343a373439383a3a2f33322d3434203d3e20323730393931.roa
File:                     323830343a373439383a3a2f33322d3434203d3e20323730393931.roa (raw, json)
Hash identifier:          5P8NDUEhIYpBNEBBBb91cedxwOLwfvGOhc1dm8i4mKM=
Subject key identifier:   DD:AF:60:B4:E8:DF:7F:56:88:4C:9A:0A:87:DC:35:95:0A:79:9C:60
Certificate issuer:       /CN=2A0183D32B891D785CDF1CC86CFD0AE9460250B1
Certificate serial:       67F4509910476C79509A89CCEF4F5F901264DFEB
Authority key identifier: 2A:01:83:D3:2B:89:1D:78:5C:DF:1C:C8:6C:FD:0A:E9:46:02:50:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/323830343a373439383a3a2f33322d3434203d3e20323730393931.roa
Signing time:             Thu 05 Feb 2026 09:47:45 +0000
ROA not before:           Thu 05 Feb 2026 09:42:45 +0000
ROA not after:            Thu 04 Feb 2027 09:47:45 +0000
asID:                     270991
IP address blocks:        2804:7498::/32 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.crl
                          rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f4:50:99:10:47:6c:79:50:9a:89:cc:ef:4f:5f:90:12:64:df:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A0183D32B891D785CDF1CC86CFD0AE9460250B1
        Validity
            Not Before: Feb  5 09:42:45 2026 GMT
            Not After : Feb  4 09:47:45 2027 GMT
        Subject: CN=DDAF60B4E8DF7F56884C9A0A87DC35950A799C60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2e:c8:d9:53:23:bb:37:3f:37:49:a9:a1:c2:
                    64:78:95:7c:f0:8b:7f:47:30:7d:ce:ae:f2:60:0a:
                    89:9a:e7:67:ae:db:e3:ea:de:a6:9b:b7:21:c6:5a:
                    71:07:e4:76:b8:73:f1:f8:04:56:38:97:82:9b:3e:
                    96:c5:c7:95:f3:30:ef:4d:7a:0b:f5:d4:b5:64:f4:
                    ca:ac:7a:ff:40:34:7e:04:bb:00:dd:b7:b8:e0:3a:
                    15:80:91:54:d3:79:89:ac:55:8f:db:b8:5c:8e:1a:
                    fd:66:7b:d9:44:4a:77:d8:3a:33:1c:b9:be:99:68:
                    e2:b0:a8:38:61:7d:7b:ea:57:f3:e7:0c:c4:c0:9f:
                    e7:96:a8:e4:15:d4:01:c1:95:ce:82:21:a0:57:1d:
                    dd:67:45:6e:bc:59:c9:6a:cf:c1:3b:5a:44:e2:cf:
                    b0:8e:b4:11:21:01:39:1d:66:3f:15:c1:d9:61:de:
                    b9:2c:0c:f8:3d:8b:96:4d:1c:30:66:e5:d5:b7:a4:
                    76:88:79:13:48:d5:4f:8d:a2:ba:6a:d8:c4:e4:06:
                    2c:d8:96:b5:e5:f0:62:b5:56:01:61:64:38:f7:95:
                    5a:04:22:b9:23:78:52:72:12:0b:4f:1d:ec:ac:62:
                    38:66:51:a3:d7:17:ec:05:fa:4f:10:7a:73:56:6e:
                    e2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AF:60:B4:E8:DF:7F:56:88:4C:9A:0A:87:DC:35:95:0A:79:9C:60
            X509v3 Authority Key Identifier:
                keyid:2A:01:83:D3:2B:89:1D:78:5C:DF:1C:C8:6C:FD:0A:E9:46:02:50:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/323830343a373439383a3a2f33322d3434203d3e20323730393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7498::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:df:5e:a9:00:d1:56:f0:78:05:2c:14:01:58:b0:f4:2e:af:
         97:48:76:90:27:a3:84:b6:a0:75:a7:cb:78:01:68:69:a9:48:
         12:2f:cd:d5:de:db:c8:e9:d4:d4:55:b4:c5:f6:f7:ea:72:af:
         83:5f:34:52:b1:0f:ad:6d:d7:af:e6:0a:ef:db:4b:32:4d:43:
         36:f2:b1:09:b1:2f:b0:94:21:f1:23:0b:cc:5f:6c:03:b8:df:
         91:f4:51:48:f3:20:00:2a:69:c1:82:c4:4e:93:98:4b:86:57:
         cb:2c:75:4c:3d:5a:ff:4a:2c:57:cf:52:2d:7d:48:f7:38:2a:
         52:f4:99:8a:c7:81:90:9c:f2:52:c6:90:d6:67:b8:f1:d2:b2:
         dd:62:8e:d6:ba:f3:b8:37:57:e3:df:09:29:42:7a:2f:74:cb:
         2e:1e:6a:02:45:77:b6:c7:68:f7:c3:27:6b:2e:c5:37:a3:e5:
         06:e6:71:08:7e:59:a7:7a:e9:21:0a:f5:c2:72:dd:a7:5e:68:
         89:56:77:7e:01:0c:ef:63:3a:d3:be:79:b2:8d:ab:e0:a9:80:
         1a:da:9e:a5:6a:c4:a0:fc:d5:e9:20:9c:db:c9:d2:75:64:b5:
         6c:2a:b5:8a:79:0b:1b:45:f8:63:96:d9:de:fe:b4:d0:f7:ac:
         36:1e:8b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:45:52 2026 by rpki-client