Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/323830343a383637383a3a2f33322d313238203d3e20323732363435.roa
File:                     323830343a383637383a3a2f33322d313238203d3e20323732363435.roa (raw, json)
Hash identifier:          jyyXbnWXsjgj0U3Si4lJj1yLNi2pYw/d65QV1ubMUpc=
Subject key identifier:   BC:19:2D:3C:C3:63:13:E9:CE:E2:DC:2C:56:5D:FF:13:41:08:1C:09
Certificate issuer:       /CN=1E71509DDAF040F68CB7D75B73108CE2284487D7
Certificate serial:       5248C77F524DD70D102F8711AFD3BC3B0C2CCF27
Authority key identifier: 1E:71:50:9D:DA:F0:40:F6:8C:B7:D7:5B:73:10:8C:E2:28:44:87:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E71509DDAF040F68CB7D75B73108CE2284487D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/323830343a383637383a3a2f33322d313238203d3e20323732363435.roa
Signing time:             Sun 01 Feb 2026 14:36:48 +0000
ROA not before:           Sun 01 Feb 2026 14:31:48 +0000
ROA not after:            Sun 31 Jan 2027 14:36:48 +0000
asID:                     272645
IP address blocks:        2804:8678::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/1E71509DDAF040F68CB7D75B73108CE2284487D7.crl
                          rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/1E71509DDAF040F68CB7D75B73108CE2284487D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E71509DDAF040F68CB7D75B73108CE2284487D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 01:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:48:c7:7f:52:4d:d7:0d:10:2f:87:11:af:d3:bc:3b:0c:2c:cf:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E71509DDAF040F68CB7D75B73108CE2284487D7
        Validity
            Not Before: Feb  1 14:31:48 2026 GMT
            Not After : Jan 31 14:36:48 2027 GMT
        Subject: CN=BC192D3CC36313E9CEE2DC2C565DFF1341081C09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:69:fd:97:80:61:57:e8:d2:f4:22:04:7d:d5:
                    10:de:03:2b:e3:b5:e5:08:18:7b:f6:47:0e:57:d2:
                    81:74:d9:2e:1b:a3:18:56:6d:ef:d4:d4:91:c7:ae:
                    82:e5:ec:a0:a3:54:6f:1e:bb:a6:b1:e3:b1:e5:dc:
                    9a:8b:34:2c:2a:53:69:18:42:74:53:39:9d:ef:a5:
                    87:9a:3c:a5:32:81:99:4a:b8:75:4c:8f:52:25:50:
                    d0:c7:6b:e7:4f:c0:17:27:1e:fb:f6:60:26:12:4b:
                    8f:63:dc:9e:8d:04:de:02:7d:92:36:64:59:fe:23:
                    aa:7c:b5:17:a8:fb:c1:cf:a3:23:bf:56:4c:31:35:
                    6d:20:58:a4:07:75:66:6d:36:f2:c1:e8:e7:2b:a4:
                    7e:31:d5:f6:42:07:b9:ab:11:6c:fb:b7:2e:4f:b2:
                    5c:0c:71:57:0a:e2:56:03:1a:99:1c:7a:0d:ff:50:
                    4f:d7:44:83:f4:85:21:61:bd:97:a3:e5:d9:76:5c:
                    92:09:d4:17:8b:c7:c5:c3:f5:7b:47:f5:8b:f2:e4:
                    b1:f9:b0:52:be:aa:3c:4a:07:c4:e1:03:3d:b8:fc:
                    c6:e5:a5:fd:f7:03:07:7b:af:75:30:04:68:fd:71:
                    24:5d:3d:16:77:7a:a2:32:6a:89:fd:4b:13:b2:81:
                    ce:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:19:2D:3C:C3:63:13:E9:CE:E2:DC:2C:56:5D:FF:13:41:08:1C:09
            X509v3 Authority Key Identifier:
                keyid:1E:71:50:9D:DA:F0:40:F6:8C:B7:D7:5B:73:10:8C:E2:28:44:87:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/1E71509DDAF040F68CB7D75B73108CE2284487D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E71509DDAF040F68CB7D75B73108CE2284487D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/323830343a383637383a3a2f33322d313238203d3e20323732363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8678::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:b8:f7:64:26:95:5e:2b:48:1d:11:5c:6b:48:f6:37:1f:7a:
         29:db:ec:49:e2:34:d3:7d:2a:a7:32:1a:b4:b2:f2:2e:b8:9a:
         2e:14:0b:49:e5:83:57:e2:4e:bc:ff:bc:cd:30:fb:df:59:b0:
         b4:87:c6:58:6c:6d:ef:eb:e8:a3:a4:44:00:7d:ad:7f:8d:8b:
         e2:f4:b6:af:31:40:61:1d:9e:67:58:92:7c:4c:91:05:e1:81:
         5e:f8:be:21:83:6f:13:34:7a:6e:7d:a5:ef:a0:8b:01:4d:78:
         7a:f3:ca:5c:2d:4f:08:61:94:dc:a8:67:79:b5:29:34:fe:de:
         ff:de:34:cc:e0:fd:d7:90:db:e7:eb:5b:ff:f6:d9:e2:c6:60:
         dd:3e:7e:a4:cb:51:a3:32:55:f3:40:10:ce:da:a7:6b:80:65:
         d0:5a:b2:08:5b:ca:48:0a:06:83:48:3c:cc:52:3e:44:57:82:
         50:29:81:b8:b3:3b:77:01:fb:ad:38:a0:de:5e:a9:e8:81:ed:
         2b:f5:fd:bf:cc:d4:5c:30:34:f9:ad:92:a4:12:72:d1:af:b6:
         4b:b7:99:3a:63:30:85:2f:4e:9b:df:51:bc:16:74:e2:e3:23:
         7b:a6:34:62:a9:b0:9a:81:bf:0f:89:e6:25:22:c1:30:3d:4d:
         b7:f3:90:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 08:18:56 2026 by rpki-client