Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/323830343a356436343a3a2f33322d3332203d3e20323638393639.roa
File:                     323830343a356436343a3a2f33322d3332203d3e20323638393639.roa (raw, json)
Hash identifier:          2RgvHgDdeznnOsPWjm7Y4FD8b6EbnQ1DN7dx5YdZMFA=
Subject key identifier:   72:DA:33:5C:4C:04:AF:00:A4:B0:F1:F6:EB:6F:E0:EB:74:11:18:D7
Certificate issuer:       /CN=E5121D713C732A6B45D5702FCDFD545FD0E1B866
Certificate serial:       22BCC108A032428C44569F3A620160C2F9E3DBD7
Authority key identifier: E5:12:1D:71:3C:73:2A:6B:45:D5:70:2F:CD:FD:54:5F:D0:E1:B8:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/323830343a356436343a3a2f33322d3332203d3e20323638393639.roa
Signing time:             Thu 05 Feb 2026 06:00:10 +0000
ROA not before:           Thu 05 Feb 2026 05:55:10 +0000
ROA not after:            Thu 04 Feb 2027 06:00:10 +0000
asID:                     268969
IP address blocks:        2804:5d64::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.crl
                          rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:bc:c1:08:a0:32:42:8c:44:56:9f:3a:62:01:60:c2:f9:e3:db:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5121D713C732A6B45D5702FCDFD545FD0E1B866
        Validity
            Not Before: Feb  5 05:55:10 2026 GMT
            Not After : Feb  4 06:00:10 2027 GMT
        Subject: CN=72DA335C4C04AF00A4B0F1F6EB6FE0EB741118D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:76:fd:13:73:59:03:06:12:4e:f4:8e:eb:95:
                    e8:2e:1c:e3:9f:b7:d5:49:87:a0:8d:9a:19:a1:5b:
                    f5:a7:ff:5a:b8:76:b0:87:04:a0:49:2f:3e:0f:a5:
                    c4:dc:1d:e5:db:72:27:ef:b6:07:79:0b:1a:50:d4:
                    3f:68:5c:3a:c2:d8:6f:7d:22:6a:43:e3:48:de:85:
                    b4:6b:b7:1d:9a:06:d1:df:17:f4:f2:67:9c:28:1f:
                    db:32:aa:96:8e:f0:94:a3:41:c8:f3:da:43:57:cc:
                    14:f1:44:80:75:b5:f3:b8:50:58:30:c5:70:32:3e:
                    24:96:34:d8:60:9e:88:89:6e:4b:9b:6e:69:43:52:
                    ad:ee:a0:57:ca:7a:e4:0b:fd:68:ff:3d:86:a9:1c:
                    d2:24:21:df:e7:ea:8c:8f:29:d1:d1:6b:3c:88:3d:
                    d4:4c:eb:2d:61:3a:f5:48:c2:60:48:69:e5:61:f4:
                    0d:40:30:bc:67:89:8d:0c:36:30:7f:83:78:a5:66:
                    9f:b0:b7:5e:ef:62:9e:b0:f0:7b:fc:e1:ff:f9:28:
                    e4:ea:45:ff:a2:b0:6d:76:fc:3c:f4:cf:f2:50:4c:
                    7f:2a:d3:7b:77:de:cb:72:cb:34:31:a6:79:02:48:
                    b9:78:e8:5c:a4:84:1a:4d:91:2b:18:2b:d6:fd:a7:
                    4e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DA:33:5C:4C:04:AF:00:A4:B0:F1:F6:EB:6F:E0:EB:74:11:18:D7
            X509v3 Authority Key Identifier:
                keyid:E5:12:1D:71:3C:73:2A:6B:45:D5:70:2F:CD:FD:54:5F:D0:E1:B8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/323830343a356436343a3a2f33322d3332203d3e20323638393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d64::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:e0:3a:e3:4e:3e:4e:54:1a:3c:82:61:01:6b:f7:6d:0f:ce:
         62:cf:d1:4b:c4:27:a1:16:86:2d:0c:8e:20:6a:84:e4:b4:ed:
         a8:18:5e:07:34:dc:40:e9:91:69:6c:f2:32:5a:e0:bd:39:22:
         9f:ac:a8:42:4e:76:3f:d0:29:11:f4:a7:25:fd:1d:92:44:45:
         2b:cd:ca:62:f9:61:10:d2:fc:35:db:f0:b6:8e:f0:31:2a:d7:
         c3:44:49:ba:86:aa:c9:30:9f:f1:16:9d:ab:e2:b2:da:f0:83:
         ca:32:69:2f:d9:b9:ca:8a:a9:fa:c2:88:d9:86:b7:0d:5e:08:
         b4:a2:b7:ac:69:6f:2b:01:bc:c1:ae:2e:9c:65:d7:c1:4d:d4:
         a9:2f:85:9c:5a:9a:44:4e:bd:f4:09:83:f7:8b:8c:25:7e:40:
         dd:5f:7b:c6:73:ff:e2:ab:97:af:52:f8:42:8c:7c:cc:2e:78:
         a9:1d:03:93:94:2d:66:93:9f:ff:dc:7e:f8:6d:fe:6b:29:ae:
         0c:5e:61:37:f9:ae:1a:d5:72:f0:95:84:6e:91:5c:ff:c5:96:
         d6:4a:1e:76:43:4c:13:e7:46:da:7c:53:4a:85:a8:b3:41:f6:
         36:71:df:9a:77:41:12:15:86:8b:46:5d:b0:ef:53:c4:dd:01:
         4c:7a:46:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:07:40 2026 by rpki-client