Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/323830343a373764383a3a2f33322d313238203d3e20323731323033.roa
File:                     323830343a373764383a3a2f33322d313238203d3e20323731323033.roa (raw, json)
Hash identifier:          Nlt/Y6/nODbh4r2NGsZd69GdJrMHdKXT8sbF6PAJ6Z0=
Subject key identifier:   1D:98:BF:6C:D6:F2:71:D6:E5:4A:9C:DF:24:32:40:05:17:A4:15:47
Certificate issuer:       /CN=450D6F328960F7F9455DC73974848BE9496BDAA5
Certificate serial:       1B8BD9D67CE513BBBB8D27DC4AE2F6EE2888C65E
Authority key identifier: 45:0D:6F:32:89:60:F7:F9:45:5D:C7:39:74:84:8B:E9:49:6B:DA:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D6F328960F7F9455DC73974848BE9496BDAA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/323830343a373764383a3a2f33322d313238203d3e20323731323033.roa
Signing time:             Sat 21 Feb 2026 11:44:05 +0000
ROA not before:           Sat 21 Feb 2026 11:39:05 +0000
ROA not after:            Sat 20 Feb 2027 11:44:05 +0000
asID:                     271203
IP address blocks:        2804:77d8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/450D6F328960F7F9455DC73974848BE9496BDAA5.crl
                          rsync://rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/450D6F328960F7F9455DC73974848BE9496BDAA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D6F328960F7F9455DC73974848BE9496BDAA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 01:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8b:d9:d6:7c:e5:13:bb:bb:8d:27:dc:4a:e2:f6:ee:28:88:c6:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450D6F328960F7F9455DC73974848BE9496BDAA5
        Validity
            Not Before: Feb 21 11:39:05 2026 GMT
            Not After : Feb 20 11:44:05 2027 GMT
        Subject: CN=1D98BF6CD6F271D6E54A9CDF2432400517A41547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3f:93:10:22:2f:ea:e0:b4:49:e9:e3:fb:ba:
                    21:c8:9b:b5:27:b4:51:13:96:25:de:a3:59:ed:f6:
                    b1:ed:db:6e:fd:af:64:f0:32:7a:15:ce:c3:84:94:
                    82:0f:7b:f2:0e:44:09:63:0a:fd:72:f2:8a:d3:1a:
                    66:a8:c7:fc:04:9a:1a:83:58:16:d1:5f:25:6e:f8:
                    4b:92:0b:62:c8:af:2a:94:f3:05:d7:b1:15:cb:8c:
                    e2:05:4f:aa:25:2c:eb:c1:88:77:71:bc:62:41:c5:
                    ee:de:2c:8c:f6:51:82:19:17:b4:56:26:95:f1:ff:
                    57:d2:0b:03:8c:7a:af:76:b2:3d:24:9f:1d:1d:84:
                    e2:17:b7:6f:de:95:1b:1f:a3:68:59:61:0d:31:9e:
                    f0:e3:2c:82:2e:a3:49:0f:a6:07:52:cc:60:d6:c5:
                    20:67:3d:02:2d:3d:7d:d9:58:55:41:e1:de:6d:bc:
                    ad:d1:b3:c6:ee:44:35:07:e1:6b:ff:16:e5:28:82:
                    52:9a:8b:c2:2a:4f:8d:b0:32:7a:6f:57:00:c9:30:
                    d6:ac:d6:ee:29:4e:a2:1b:b7:c8:4c:2a:ba:dd:a0:
                    a4:3b:9d:df:7f:db:ff:fd:aa:0d:6b:21:96:fb:ec:
                    55:87:de:6e:e2:21:cf:a4:72:e0:5f:d3:44:81:c8:
                    0b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:98:BF:6C:D6:F2:71:D6:E5:4A:9C:DF:24:32:40:05:17:A4:15:47
            X509v3 Authority Key Identifier:
                keyid:45:0D:6F:32:89:60:F7:F9:45:5D:C7:39:74:84:8B:E9:49:6B:DA:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/450D6F328960F7F9455DC73974848BE9496BDAA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D6F328960F7F9455DC73974848BE9496BDAA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/323830343a373764383a3a2f33322d313238203d3e20323731323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:80:55:e5:7a:cd:aa:fe:5d:f2:7b:a0:6b:da:23:b0:63:f5:
         7c:20:5e:20:4c:29:10:75:7c:0d:8c:7b:bf:33:ae:ec:e5:ad:
         3f:44:18:9b:0c:1c:80:6b:d8:f1:57:d7:3d:55:1d:de:0a:9e:
         1a:ed:ee:9d:43:6d:7b:35:d1:bf:c1:52:51:16:40:be:b9:02:
         35:a2:85:a9:a0:70:54:b8:56:9e:f4:9d:42:54:f5:8d:ca:b0:
         18:5d:96:f0:e8:3d:91:86:06:cd:54:a3:b3:be:ee:d0:95:44:
         74:cb:db:9e:ac:3d:3d:0d:8d:06:f6:e3:9e:cb:94:2a:67:b8:
         ab:86:8e:c2:00:b8:5e:f9:e6:c4:92:26:8b:62:8b:1a:7b:cc:
         e0:62:2f:8e:48:35:aa:b2:d7:9f:2d:1e:34:c1:51:2f:7e:14:
         0c:12:a1:8a:30:0d:2b:25:6e:ec:06:c3:1e:7c:71:b1:18:b0:
         37:5f:c6:41:7d:41:54:d0:31:16:0d:6b:89:47:89:f9:1f:72:
         5e:1c:7b:7e:71:7a:90:4f:87:31:2d:2f:9c:a6:97:5f:f2:f5:
         6a:25:01:00:74:4f:c1:e0:13:3c:e4:a7:67:36:03:41:59:a1:
         40:44:a7:10:3c:b8:80:f1:2d:b7:d4:99:83:ef:28:c4:08:5b:
         18:2d:2a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:50:19 2026 by rpki-client