Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/323830343a363833633a3a2f33322d3332203d3e20323639363738.roa
File:                     323830343a363833633a3a2f33322d3332203d3e20323639363738.roa (raw, json)
Hash identifier:          xlLmQqk4ppl9GvHpxa5pL+VG/2siOWNiyCHrQpi1Bmo=
Subject key identifier:   D9:0B:9D:EF:38:E4:2B:C1:1A:68:4D:AF:48:22:37:34:CF:89:46:D1
Certificate issuer:       /CN=5C61273BB685DE7F44069647C170414CE4D28714
Certificate serial:       249557B93C247CF9844D912061C0ABE12F892460
Authority key identifier: 5C:61:27:3B:B6:85:DE:7F:44:06:96:47:C1:70:41:4C:E4:D2:87:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C61273BB685DE7F44069647C170414CE4D28714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/323830343a363833633a3a2f33322d3332203d3e20323639363738.roa
Signing time:             Tue 03 Feb 2026 19:52:50 +0000
ROA not before:           Tue 03 Feb 2026 19:47:50 +0000
ROA not after:            Tue 02 Feb 2027 19:52:50 +0000
asID:                     269678
IP address blocks:        2804:683c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/5C61273BB685DE7F44069647C170414CE4D28714.crl
                          rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/5C61273BB685DE7F44069647C170414CE4D28714.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C61273BB685DE7F44069647C170414CE4D28714.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 19:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:95:57:b9:3c:24:7c:f9:84:4d:91:20:61:c0:ab:e1:2f:89:24:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C61273BB685DE7F44069647C170414CE4D28714
        Validity
            Not Before: Feb  3 19:47:50 2026 GMT
            Not After : Feb  2 19:52:50 2027 GMT
        Subject: CN=D90B9DEF38E42BC11A684DAF48223734CF8946D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:26:35:15:a5:b1:17:eb:4c:71:01:79:99:6e:
                    63:62:b8:bc:3e:af:2c:70:78:9a:b9:5a:57:92:1f:
                    39:e7:e3:f5:f7:8f:8d:10:a1:90:f0:1d:cd:e3:f5:
                    29:9a:99:34:9a:cd:79:4e:38:b0:2a:59:95:82:14:
                    bd:20:f9:ad:98:89:30:bf:de:db:68:c4:05:ff:17:
                    e3:73:bd:25:86:93:8d:17:c8:20:d5:f2:e3:cf:47:
                    a1:5b:35:15:87:43:75:da:91:59:b9:4f:5a:c7:00:
                    69:49:f7:21:27:83:30:5f:45:20:b6:d8:59:af:8f:
                    d1:41:8f:89:c7:3e:8f:d5:06:88:84:89:5b:0b:e6:
                    3c:26:91:ec:75:23:43:51:8b:0c:0e:6f:68:b3:31:
                    76:40:55:23:63:45:a7:30:56:70:2e:0b:92:3e:fd:
                    7f:e3:73:a5:e2:22:37:ff:d6:60:95:70:b9:b1:34:
                    a3:f8:fa:1f:25:74:8b:7e:0a:19:6c:3b:b6:ce:9c:
                    ba:65:72:99:94:ee:7b:51:6d:52:26:d8:35:a3:5c:
                    37:96:a2:e6:67:b9:50:e9:8f:66:72:64:bf:a8:58:
                    12:6a:ec:19:11:6e:b7:8a:78:96:74:ec:3c:74:4c:
                    41:f1:81:ef:8a:92:ba:1b:56:7d:9c:4a:b7:3b:05:
                    ab:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0B:9D:EF:38:E4:2B:C1:1A:68:4D:AF:48:22:37:34:CF:89:46:D1
            X509v3 Authority Key Identifier:
                keyid:5C:61:27:3B:B6:85:DE:7F:44:06:96:47:C1:70:41:4C:E4:D2:87:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/5C61273BB685DE7F44069647C170414CE4D28714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C61273BB685DE7F44069647C170414CE4D28714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/323830343a363833633a3a2f33322d3332203d3e20323639363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:683c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:d2:00:9f:10:ec:6d:73:75:14:03:ab:9a:de:48:29:56:14:
         a2:06:02:b8:77:85:ac:40:57:68:b4:e0:89:d8:83:09:55:38:
         b2:ad:70:c8:61:07:e3:a0:e6:0a:16:72:61:a7:7f:45:7d:2d:
         ae:db:c7:b2:96:0d:87:ec:b5:b5:2c:cf:51:6c:75:11:f4:d8:
         f8:86:0e:70:ca:b4:7f:cd:ca:43:0e:bb:e3:e7:8c:30:72:ff:
         9b:c3:e5:de:2b:15:82:8b:f5:ad:1c:29:bb:a3:21:6d:23:dd:
         cc:2d:61:8e:b0:53:1b:e4:e4:07:ca:4e:50:a6:22:01:e7:d8:
         5c:21:19:bb:78:43:6e:59:94:69:68:1a:87:80:48:59:e4:68:
         44:9a:7a:0f:02:09:89:c7:8b:87:64:ea:e7:b0:7c:30:77:41:
         c5:10:f6:ad:18:bb:7d:2b:85:cf:08:fc:a2:ed:a5:f5:39:10:
         62:ab:41:f6:e4:77:77:29:b2:be:f3:ad:ce:fc:7c:b0:87:76:
         02:cf:17:20:d3:f5:ad:f6:d1:67:1d:93:cb:c7:15:ea:32:3a:
         18:68:4c:f3:7f:29:e3:b0:38:7c:f9:2d:29:c2:6d:7d:22:65:
         7b:bb:82:26:72:b5:ac:1a:d2:6b:a2:1c:ed:a6:9e:be:1a:f4:
         41:79:99:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:46:28 2026 by rpki-client