Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/323830343a353037303a3a2f33322d313238203d3e20323638333839.roa
File:                     323830343a353037303a3a2f33322d313238203d3e20323638333839.roa (raw, json)
Hash identifier:          E0nPSnKaLuLF08xauHORJv38dEHtEsRzwgDgpzvcooM=
Subject key identifier:   E4:65:E8:13:2A:9B:5E:4A:23:99:5F:6B:6F:D3:75:21:A8:28:D4:98
Certificate issuer:       /CN=D0EDE113278521075ABA0BA000B92CE448CC6CD4
Certificate serial:       23092C696FED6263486EDFF879E5AC07721B7911
Authority key identifier: D0:ED:E1:13:27:85:21:07:5A:BA:0B:A0:00:B9:2C:E4:48:CC:6C:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0EDE113278521075ABA0BA000B92CE448CC6CD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/323830343a353037303a3a2f33322d313238203d3e20323638333839.roa
Signing time:             Wed 11 Feb 2026 15:58:43 +0000
ROA not before:           Wed 11 Feb 2026 15:53:43 +0000
ROA not after:            Wed 10 Feb 2027 15:58:43 +0000
asID:                     268389
IP address blocks:        2804:5070::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/D0EDE113278521075ABA0BA000B92CE448CC6CD4.crl
                          rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/D0EDE113278521075ABA0BA000B92CE448CC6CD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0EDE113278521075ABA0BA000B92CE448CC6CD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 12:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:09:2c:69:6f:ed:62:63:48:6e:df:f8:79:e5:ac:07:72:1b:79:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0EDE113278521075ABA0BA000B92CE448CC6CD4
        Validity
            Not Before: Feb 11 15:53:43 2026 GMT
            Not After : Feb 10 15:58:43 2027 GMT
        Subject: CN=E465E8132A9B5E4A23995F6B6FD37521A828D498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a0:56:0c:1e:42:a9:65:c8:38:f7:8e:38:de:
                    c4:41:b2:31:14:a1:60:1a:54:ad:41:e7:02:01:26:
                    d7:68:5f:7c:61:eb:98:1c:fd:7a:be:a7:72:75:bd:
                    50:37:c3:4e:9f:e8:59:72:52:68:55:5f:62:86:be:
                    a4:56:05:ce:29:f7:92:1c:93:29:58:43:db:15:35:
                    2c:00:8d:cd:10:fa:75:6a:bc:c9:25:cc:b6:f9:6d:
                    ec:b6:37:3a:46:e5:e9:df:ce:d6:01:de:e3:ce:f8:
                    a2:ec:a5:74:07:ae:03:3c:85:91:2c:0a:27:47:f9:
                    15:27:71:d6:e0:6c:dc:11:35:e0:9f:4a:9f:c3:4b:
                    f2:bc:8a:f9:40:86:20:cb:19:4c:ea:2d:f8:c4:46:
                    ee:8b:0b:42:d0:85:7e:b4:de:5d:43:b9:fe:70:86:
                    64:de:00:26:df:9b:3f:db:c6:b4:7f:08:e4:42:df:
                    3b:98:05:79:bc:50:fe:15:db:02:88:f7:73:d1:db:
                    fa:d6:01:de:d7:22:35:45:24:16:bf:1e:3e:59:8a:
                    63:9f:20:1f:24:85:15:09:46:8a:0a:f4:c9:f6:57:
                    a3:df:df:f8:b4:76:9f:d1:83:08:4c:bb:18:55:77:
                    ea:3a:45:ae:28:1f:9c:88:5d:2d:1b:b4:86:9a:21:
                    29:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:65:E8:13:2A:9B:5E:4A:23:99:5F:6B:6F:D3:75:21:A8:28:D4:98
            X509v3 Authority Key Identifier:
                keyid:D0:ED:E1:13:27:85:21:07:5A:BA:0B:A0:00:B9:2C:E4:48:CC:6C:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/D0EDE113278521075ABA0BA000B92CE448CC6CD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0EDE113278521075ABA0BA000B92CE448CC6CD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/323830343a353037303a3a2f33322d313238203d3e20323638333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5070::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:20:07:a1:4f:76:07:6d:ea:0f:22:9a:17:53:9e:fa:7b:66:
         46:38:89:6b:16:4e:66:9f:06:92:16:ee:cb:1d:d4:c8:13:95:
         95:d1:1f:8e:76:c0:61:4f:b1:e0:00:87:4a:84:81:8f:a0:bb:
         a0:81:76:1a:90:e4:11:e5:a2:8d:0c:25:14:5d:20:9d:af:f0:
         46:9e:82:f3:f9:3b:c8:73:ee:b2:e5:d4:a1:ad:5a:ef:92:b6:
         96:46:4e:02:05:da:3b:68:ae:bb:5e:64:7a:e8:63:78:2e:23:
         69:42:ca:db:3d:44:69:9d:10:3f:9a:bd:5c:54:1a:78:1d:c2:
         73:93:eb:6b:1c:7c:03:62:61:c3:9b:1d:e2:aa:0e:94:d8:8f:
         7b:ae:bd:3c:90:24:44:a2:fc:c6:3f:b4:9d:c8:b7:f7:df:61:
         29:ef:9a:e6:da:90:82:28:68:58:25:02:ff:1c:ec:9b:66:38:
         e1:6a:b1:a4:95:c3:02:3e:2b:cf:77:38:75:55:1b:2a:eb:45:
         65:69:91:f4:ca:cf:c8:33:64:11:67:f3:5a:b3:ba:3e:43:98:
         68:f6:20:61:45:9f:19:7f:7f:ca:4c:15:56:45:34:06:63:0d:
         8d:82:4d:76:e7:a7:31:47:4a:6b:a9:e6:80:77:c0:fa:1c:7c:
         75:30:08:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 03:06:31 2026 by rpki-client