Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/323830343a376536633a3a2f33322d313238203d3e20323731363233.roa
File:                     323830343a376536633a3a2f33322d313238203d3e20323731363233.roa (raw, json)
Hash identifier:          NRvkX7IEEwE6eVFepi0Bg0vTFbpt/3Mqhz4YmkSq8+w=
Subject key identifier:   6A:BB:46:8B:4E:6A:E9:4E:ED:CC:49:72:EF:01:0D:62:91:38:0C:29
Certificate issuer:       /CN=8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084
Certificate serial:       2A0AAE444EC344C71479B945A1A4827F69D4413F
Authority key identifier: 8B:8B:4E:1F:32:9B:88:F7:0D:E3:5D:A3:30:FC:1F:9C:A2:B9:20:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/323830343a376536633a3a2f33322d313238203d3e20323731363233.roa
Signing time:             Fri 06 Feb 2026 02:08:23 +0000
ROA not before:           Fri 06 Feb 2026 02:03:23 +0000
ROA not after:            Fri 05 Feb 2027 02:08:23 +0000
asID:                     271623
IP address blocks:        2804:7e6c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl
                          rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0a:ae:44:4e:c3:44:c7:14:79:b9:45:a1:a4:82:7f:69:d4:41:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084
        Validity
            Not Before: Feb  6 02:03:23 2026 GMT
            Not After : Feb  5 02:08:23 2027 GMT
        Subject: CN=6ABB468B4E6AE94EEDCC4972EF010D6291380C29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d3:37:c2:fb:3d:8d:b8:aa:49:d9:39:c9:91:
                    55:74:a6:61:3b:76:80:e4:66:e6:aa:c8:7d:e0:95:
                    c7:d3:7e:b9:f9:96:90:aa:46:50:ed:85:38:7e:71:
                    65:b6:56:51:7c:13:00:db:1e:8e:80:a8:83:f9:57:
                    bd:e8:3b:28:b7:21:82:ce:fa:93:26:cd:be:95:41:
                    da:08:ab:63:c2:bd:d5:bf:9a:ca:65:07:dc:d8:04:
                    03:fc:cb:d4:a3:b6:2a:9f:9c:12:bd:fd:1e:d2:f4:
                    73:f3:6a:d4:13:8d:7b:da:25:2b:af:ee:6f:89:d8:
                    7a:10:97:83:e9:2a:94:09:96:2a:c1:2c:c7:3e:14:
                    20:74:b9:7b:a3:38:ba:77:11:48:c9:fc:6b:58:07:
                    39:e8:0d:00:1d:1d:e4:dd:aa:79:c8:08:d5:41:5f:
                    f4:57:af:5b:e1:b8:d0:0a:f5:1b:76:c4:dd:8a:45:
                    6a:5a:7e:d0:fb:aa:02:ba:d8:dd:84:e6:93:f5:f5:
                    bf:99:11:1e:b7:a2:bd:62:93:b9:7b:98:d9:96:e2:
                    cb:71:fa:a7:fa:77:94:98:0e:2d:ec:9a:96:75:64:
                    47:31:b8:20:75:01:7b:49:32:22:c9:b8:11:56:b3:
                    3b:a1:9f:20:ff:f2:41:b0:88:7e:04:23:1b:76:ec:
                    6f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BB:46:8B:4E:6A:E9:4E:ED:CC:49:72:EF:01:0D:62:91:38:0C:29
            X509v3 Authority Key Identifier:
                keyid:8B:8B:4E:1F:32:9B:88:F7:0D:E3:5D:A3:30:FC:1F:9C:A2:B9:20:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/323830343a376536633a3a2f33322d313238203d3e20323731363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:43:17:a3:25:9b:70:40:25:1f:75:2b:b1:15:c8:7f:de:87:
         81:5f:0f:48:18:35:c4:4e:ab:56:56:03:b3:51:a9:26:20:a0:
         31:db:39:2b:91:d3:d5:3a:b4:91:6b:18:b1:f9:88:da:14:47:
         35:77:65:db:87:cd:cc:f2:5c:f8:0f:2b:e2:94:a1:14:ec:e7:
         b1:26:97:4f:c6:4b:1c:3f:61:0e:46:35:0c:56:94:bf:83:60:
         0f:aa:be:99:24:bd:6b:7a:77:66:f0:4f:5e:84:3f:c6:ca:9c:
         91:b4:c5:fa:61:a7:60:cc:1e:3e:41:50:2d:d3:ca:ee:29:d0:
         96:22:89:d0:a3:94:73:20:b6:05:3e:79:25:fa:bb:d5:22:fa:
         c2:41:24:35:29:98:3b:d1:a1:4a:8f:bb:0a:d9:3e:d7:dd:6f:
         95:bb:27:99:2b:1f:09:6f:21:cc:fa:8e:c6:d9:9e:0f:44:c5:
         f7:0d:a9:e2:6e:a9:cc:34:60:87:d1:47:56:5c:55:e2:37:7f:
         e0:b9:fc:7f:59:84:da:a4:15:07:dd:43:b4:d8:06:f6:01:45:
         18:7b:65:f5:5e:d3:a6:21:56:c9:0e:5e:1a:0f:f0:23:40:1a:
         2b:09:0a:b9:4e:31:dc:99:99:06:95:db:b5:5c:f5:61:49:55:
         31:2f:2c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:23:36 2026 by rpki-client