Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BJZEnmQ9KKyn3LQJaULXd2kDoafc5wyMQXD7CTxMXrRv/0/323830343a383438343a3a2f33322d3332203d3e20323732323635.roa
File:                     323830343a383438343a3a2f33322d3332203d3e20323732323635.roa (raw, json)
Hash identifier:          bEyRwsMpXTEvUAGXMSFTQv7yrt9ivZNEzgWE8VHrXbU=
Subject key identifier:   72:DA:C3:8A:18:82:C2:03:C7:FC:62:04:6D:BA:C8:2E:E4:3B:AD:7D
Certificate issuer:       /CN=8E7CA0811985CDBD24526BDC8922FC0B843BDD14
Certificate serial:       449BCAD191AA6096893494BA8127A033FB0F98A3
Authority key identifier: 8E:7C:A0:81:19:85:CD:BD:24:52:6B:DC:89:22:FC:0B:84:3B:DD:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJZEnmQ9KKyn3LQJaULXd2kDoafc5wyMQXD7CTxMXrRv/0/323830343a383438343a3a2f33322d3332203d3e20323732323635.roa
Signing time:             Sat 21 Feb 2026 21:28:10 +0000
ROA not before:           Sat 21 Feb 2026 21:23:10 +0000
ROA not after:            Sat 20 Feb 2027 21:28:10 +0000
asID:                     272265
IP address blocks:        2804:8484::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BJZEnmQ9KKyn3LQJaULXd2kDoafc5wyMQXD7CTxMXrRv/0/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.crl
                          rsync://rpki-repo.registro.br/repo/BJZEnmQ9KKyn3LQJaULXd2kDoafc5wyMQXD7CTxMXrRv/0/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 18:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:9b:ca:d1:91:aa:60:96:89:34:94:ba:81:27:a0:33:fb:0f:98:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E7CA0811985CDBD24526BDC8922FC0B843BDD14
        Validity
            Not Before: Feb 21 21:23:10 2026 GMT
            Not After : Feb 20 21:28:10 2027 GMT
        Subject: CN=72DAC38A1882C203C7FC62046DBAC82EE43BAD7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:23:e2:6f:38:21:af:0f:33:34:31:42:24:69:
                    50:26:9e:14:4a:89:1a:a6:2e:41:8e:50:c3:0a:8e:
                    1f:cd:0a:9c:58:33:32:97:cc:e6:54:6e:72:a9:ca:
                    46:0a:c6:12:8b:4a:97:89:16:a9:b4:26:63:b2:95:
                    4e:d2:68:a6:62:5c:93:f6:e7:a5:a3:35:a9:da:79:
                    c5:9b:95:23:b6:dd:7c:2c:6f:c0:05:03:d8:8b:56:
                    a0:33:93:99:be:81:a6:02:4f:24:24:2c:29:c7:82:
                    ad:8d:30:27:70:d7:f7:2b:50:97:86:d5:6f:ed:6a:
                    f6:55:f6:d2:dd:7b:f3:2f:9c:7f:27:a1:a5:45:3e:
                    2d:70:40:37:d3:ed:f9:ab:e8:78:b1:d9:4d:43:49:
                    5e:35:d4:83:71:72:12:aa:eb:a7:d5:da:81:2b:2e:
                    a6:aa:de:4d:ee:78:97:d7:80:7a:34:3f:0d:c5:60:
                    e6:f9:3b:00:04:6a:bc:4a:d0:d1:6a:6f:1a:d6:b7:
                    bc:0b:24:b8:96:0b:f3:47:f1:5f:cb:e5:1f:e9:54:
                    03:f7:04:83:a9:c0:63:fd:10:e7:cd:35:79:df:d8:
                    92:bc:55:90:0a:b0:b4:2b:f8:ce:5f:ac:9f:a0:ed:
                    af:08:1a:9f:14:bb:c8:ed:2b:a6:b2:bc:e4:3f:7d:
                    94:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DA:C3:8A:18:82:C2:03:C7:FC:62:04:6D:BA:C8:2E:E4:3B:AD:7D
            X509v3 Authority Key Identifier:
                keyid:8E:7C:A0:81:19:85:CD:BD:24:52:6B:DC:89:22:FC:0B:84:3B:DD:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJZEnmQ9KKyn3LQJaULXd2kDoafc5wyMQXD7CTxMXrRv/0/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJZEnmQ9KKyn3LQJaULXd2kDoafc5wyMQXD7CTxMXrRv/0/323830343a383438343a3a2f33322d3332203d3e20323732323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8484::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:b3:ee:73:95:6b:f1:06:9a:98:44:14:87:b6:cd:c0:5a:2d:
         d2:f1:a8:46:e6:8e:45:9d:ae:ea:dd:09:c9:96:20:e8:f1:95:
         fe:36:74:88:a7:f4:c3:85:6f:0f:47:2b:10:50:a9:11:98:26:
         34:8f:e4:fd:e8:b1:4d:d5:b3:31:cd:42:c9:db:8a:3c:f1:bc:
         b1:ef:27:88:28:39:d0:db:47:31:76:c4:8e:07:5a:0e:f1:37:
         66:e0:2a:b3:76:45:0e:03:4e:d0:3f:e5:33:9b:55:88:e4:5b:
         9d:dc:5b:f8:d9:f4:4c:08:d5:a9:e3:bc:1b:18:70:09:56:2c:
         c9:ef:5d:9b:94:f3:53:e2:22:75:8d:aa:05:e5:44:3d:a9:b9:
         ce:17:4c:1c:5e:44:36:c7:df:38:38:70:13:4c:dd:b2:ef:f6:
         2c:5b:23:cc:90:cb:48:ca:f3:21:7f:db:59:1a:cf:f6:27:69:
         52:45:ea:df:a5:47:dc:a3:9b:95:40:5d:1c:4c:2a:a5:7d:8f:
         28:50:2e:89:12:f4:33:5e:12:e1:d7:ba:ed:8c:6d:d4:18:60:
         70:5a:bf:a0:8a:86:29:af:07:85:06:71:b5:c8:a8:24:33:7c:
         8a:e7:48:8d:78:d2:48:71:9e:1e:2a:a6:76:7e:dd:5e:cb:68:
         3a:ec:2b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:18:44 2026 by rpki-client