Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/323830343a363434633a3a2f33322d313238203d3e20323639343139.roa
File:                     323830343a363434633a3a2f33322d313238203d3e20323639343139.roa (raw, json)
Hash identifier:          gWpWB9uDeWDyPHVXwy2c2cRuickzsiL8BRPLsMyCMB4=
Subject key identifier:   99:C6:E6:F7:2B:EF:64:D5:FC:9B:89:44:F4:BC:47:6C:93:31:70:7B
Certificate issuer:       /CN=A273532C29076DEEF26D5AD7BE1E8D0888686F75
Certificate serial:       5D8BEF348DDA91AD5BB2319A71B8C146B256AEB1
Authority key identifier: A2:73:53:2C:29:07:6D:EE:F2:6D:5A:D7:BE:1E:8D:08:88:68:6F:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A273532C29076DEEF26D5AD7BE1E8D0888686F75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/323830343a363434633a3a2f33322d313238203d3e20323639343139.roa
Signing time:             Mon 26 Jan 2026 20:04:47 +0000
ROA not before:           Mon 26 Jan 2026 19:59:47 +0000
ROA not after:            Mon 25 Jan 2027 20:04:47 +0000
asID:                     269419
IP address blocks:        2804:644c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/A273532C29076DEEF26D5AD7BE1E8D0888686F75.crl
                          rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/A273532C29076DEEF26D5AD7BE1E8D0888686F75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A273532C29076DEEF26D5AD7BE1E8D0888686F75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 14:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:8b:ef:34:8d:da:91:ad:5b:b2:31:9a:71:b8:c1:46:b2:56:ae:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A273532C29076DEEF26D5AD7BE1E8D0888686F75
        Validity
            Not Before: Jan 26 19:59:47 2026 GMT
            Not After : Jan 25 20:04:47 2027 GMT
        Subject: CN=99C6E6F72BEF64D5FC9B8944F4BC476C9331707B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:bb:31:32:bb:8f:1b:45:86:a4:9b:c9:7a:22:
                    6c:60:af:01:6e:25:86:ff:6d:bd:a4:fc:6a:e3:02:
                    75:7e:c8:b4:4f:7f:2e:69:40:ac:bd:a8:6c:79:8c:
                    b5:fd:64:e9:31:c3:5b:ca:71:aa:be:ec:a0:54:96:
                    64:28:92:0b:77:d7:83:10:fb:d8:96:6a:06:fc:9c:
                    c5:85:4f:32:62:16:05:c2:27:c8:bb:69:bb:ce:4b:
                    32:b9:79:42:f5:c7:6b:0c:34:06:5c:0a:4c:e7:1b:
                    85:6a:83:74:18:1a:6b:d0:42:a7:83:2b:27:c6:75:
                    13:48:60:91:2b:3f:6f:e7:86:a1:5e:93:85:fe:77:
                    de:87:d0:3d:0d:aa:15:db:bf:17:2c:35:fe:a5:01:
                    12:63:b0:5b:e4:eb:7e:57:a7:9f:6f:dd:6d:43:14:
                    ae:17:e5:52:dd:84:e8:5a:8d:a7:ed:9e:8b:26:ce:
                    7e:08:f9:be:6d:19:35:9c:3b:70:88:95:04:60:92:
                    f2:8f:dc:73:94:d6:9d:fb:ce:e3:03:9b:fb:57:0b:
                    32:25:7f:d8:f3:ad:a0:1e:af:ae:2e:08:0d:b2:84:
                    1d:50:9b:9c:8d:87:d2:f4:bf:51:73:15:34:b4:f5:
                    55:ab:c1:6d:a0:8c:f0:1f:af:c5:af:14:cd:6b:75:
                    6f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C6:E6:F7:2B:EF:64:D5:FC:9B:89:44:F4:BC:47:6C:93:31:70:7B
            X509v3 Authority Key Identifier:
                keyid:A2:73:53:2C:29:07:6D:EE:F2:6D:5A:D7:BE:1E:8D:08:88:68:6F:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/A273532C29076DEEF26D5AD7BE1E8D0888686F75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A273532C29076DEEF26D5AD7BE1E8D0888686F75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/323830343a363434633a3a2f33322d313238203d3e20323639343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:644c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:ec:3b:93:71:04:23:38:f5:89:b1:d2:42:be:90:e9:f3:a7:
         18:f6:b9:d2:89:49:63:84:02:d1:f4:b2:1b:6d:b7:b3:12:a7:
         50:7f:63:30:40:86:41:d8:4f:3f:4e:23:4a:c6:2c:59:28:09:
         63:e6:83:97:e6:58:60:5e:38:a3:49:86:d1:26:1a:d3:52:9d:
         c1:c6:8b:3d:0a:97:00:23:37:ca:df:7c:b4:cb:3f:90:95:1c:
         1f:70:36:11:19:04:cb:b5:ca:ba:08:e0:4f:2f:0d:86:ef:31:
         3a:23:79:a3:dd:9f:c3:aa:e7:76:83:e6:a7:7c:90:bb:f3:32:
         15:34:2f:14:a9:10:f9:cb:9f:4a:c6:51:2d:f0:2d:70:b7:00:
         0b:bc:eb:38:ef:4a:0f:d7:57:6f:ec:c6:7a:98:db:ca:74:25:
         ef:b5:82:03:61:b3:b8:e9:55:24:0b:30:fa:49:71:23:04:bc:
         a6:0c:ba:d3:e7:61:02:2a:fd:85:f1:74:90:f4:39:91:53:49:
         69:14:a5:ee:b4:53:ef:a4:56:2c:7e:c8:77:5f:40:41:77:2a:
         75:c1:0f:4a:05:ca:ba:f5:bc:ef:4b:32:67:fb:ee:c8:c3:70:
         a9:ea:23:c2:3c:01:15:58:52:55:b4:e6:d4:58:2e:dc:7a:34:
         e7:c7:53:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:55:35 2026 by rpki-client