Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/323830343a356433633a3a2f33332d3333203d3e20323638393539.roa
File:                     323830343a356433633a3a2f33332d3333203d3e20323638393539.roa (raw, json)
Hash identifier:          CCX6Bf9Hf1ZhC5HxyJVeLoPvatx27N7gkcUWym5ML78=
Subject key identifier:   A5:86:25:8D:26:D9:B7:53:E5:71:F2:B4:E5:19:26:0F:51:A7:62:3B
Certificate issuer:       /CN=DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00
Certificate serial:       73D026CD846BA8CA222571DAB1CEF05EEF9405EF
Authority key identifier: DA:F0:AA:5C:D3:B0:FF:53:39:F0:5C:AC:F8:F0:66:5F:94:15:4B:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/323830343a356433633a3a2f33332d3333203d3e20323638393539.roa
Signing time:             Fri 30 Jan 2026 15:21:29 +0000
ROA not before:           Fri 30 Jan 2026 15:16:29 +0000
ROA not after:            Fri 29 Jan 2027 15:21:29 +0000
asID:                     268959
IP address blocks:        2804:5d3c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.crl
                          rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 21:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d0:26:cd:84:6b:a8:ca:22:25:71:da:b1:ce:f0:5e:ef:94:05:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00
        Validity
            Not Before: Jan 30 15:16:29 2026 GMT
            Not After : Jan 29 15:21:29 2027 GMT
        Subject: CN=A586258D26D9B753E571F2B4E519260F51A7623B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bf:e5:bd:9c:90:42:52:24:49:67:08:99:77:
                    34:60:0f:43:71:04:be:bc:c3:1b:eb:09:54:4d:6a:
                    94:c6:d9:32:05:ee:aa:85:ba:3b:c5:91:4d:27:9a:
                    69:af:5f:94:85:f6:b7:b6:1d:ab:49:ab:3e:cb:2c:
                    03:85:3e:87:e4:cd:6e:93:13:a5:61:2f:d4:4f:37:
                    85:d1:fa:f0:2a:9e:cc:4a:a7:4c:c7:07:8e:01:99:
                    04:cf:60:40:f4:e6:d7:c8:f8:e7:e8:33:e9:32:e3:
                    cc:6f:e0:c6:a4:9b:69:f5:ea:ec:d2:76:07:2d:38:
                    5a:5f:0d:47:b9:f5:dd:2d:5f:3a:c7:2b:75:de:fc:
                    4d:a0:8d:ae:20:39:82:55:ac:a5:50:36:a7:6b:81:
                    f1:f5:e4:51:43:91:a3:ea:6f:d5:90:11:58:53:66:
                    cf:97:83:6a:6f:d6:c7:c7:5b:89:db:9f:aa:ec:d5:
                    7a:4b:67:a0:da:82:ae:2f:7a:db:77:ee:c6:d2:50:
                    30:18:b0:56:0a:64:08:5f:42:ce:c9:64:ed:da:b5:
                    f9:cd:0b:82:d1:c6:39:78:c2:f0:15:87:e8:08:9e:
                    94:80:aa:f0:97:7e:7f:d5:e4:b7:42:2c:d3:f0:e4:
                    bd:83:99:3e:ac:eb:30:a9:22:f6:f0:92:b9:ad:91:
                    62:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:86:25:8D:26:D9:B7:53:E5:71:F2:B4:E5:19:26:0F:51:A7:62:3B
            X509v3 Authority Key Identifier:
                keyid:DA:F0:AA:5C:D3:B0:FF:53:39:F0:5C:AC:F8:F0:66:5F:94:15:4B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/323830343a356433633a3a2f33332d3333203d3e20323638393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d3c::/33

    Signature Algorithm: sha256WithRSAEncryption
         9c:d5:6b:cb:3c:04:21:9d:ad:38:c5:ea:54:27:0d:e3:8e:ab:
         66:f6:5f:27:08:fa:59:a0:e5:77:bb:11:44:01:dd:66:af:05:
         ee:cd:c7:27:84:49:64:58:f8:51:ae:07:d0:11:b9:3c:7a:15:
         20:d8:8d:e2:38:b6:30:85:fb:68:b3:93:2b:11:a6:61:0a:7a:
         96:13:3b:18:5a:4c:1c:c9:4c:e9:6f:c3:f2:6c:1f:2a:ef:44:
         e5:c2:d8:39:e5:80:cb:3a:ca:f4:23:a6:6c:6a:b7:f7:51:2e:
         70:6f:74:f0:55:3f:43:c0:ac:ae:ee:45:48:52:9b:e3:15:1c:
         f3:d8:43:7f:12:47:5c:d5:eb:2e:98:f9:ab:89:93:68:a5:5d:
         6a:fd:c5:92:31:b9:9a:26:0b:f1:fb:ed:03:88:eb:9f:0e:28:
         90:aa:b8:e3:11:2a:7f:97:fb:cd:10:2c:61:3d:36:1c:d9:be:
         97:1b:e4:36:9d:a4:e3:be:56:01:08:63:32:39:5b:8c:e5:2a:
         5f:3e:6f:ef:41:cf:95:35:64:6a:45:75:7b:c0:6b:cf:2c:d3:
         d0:f0:e7:f8:89:b7:e0:a9:ad:ee:1e:38:e0:fe:6e:ce:a2:ee:
         e4:42:50:9f:32:79:f3:12:93:46:34:be:70:bc:5e:39:cf:3c:
         f2:eb:71:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:12:34 2026 by rpki-client