Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DEuGHPKjiFwVxKgcg8h6j1uX8NkMUzHqovZe2amM3NaU/0/323830343a376662343a3a2f33322d313238203d3e20323731373034.roa
File:                     323830343a376662343a3a2f33322d313238203d3e20323731373034.roa (raw, json)
Hash identifier:          FOCXQ2JlVXJ/pSATljPqY8DpTuVF5RxKvue37Ci2qRg=
Subject key identifier:   FC:08:54:FA:29:51:40:B6:B7:BC:53:CC:BF:35:2D:BB:0A:98:20:E4
Certificate issuer:       /CN=3924B516E35165FE5C42CA81DECF7024E08B60F5
Certificate serial:       6DC1758CBA21DE87C35E47643D0B6B816FF5F0DF
Authority key identifier: 39:24:B5:16:E3:51:65:FE:5C:42:CA:81:DE:CF:70:24:E0:8B:60:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3924B516E35165FE5C42CA81DECF7024E08B60F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEuGHPKjiFwVxKgcg8h6j1uX8NkMUzHqovZe2amM3NaU/0/323830343a376662343a3a2f33322d313238203d3e20323731373034.roa
Signing time:             Mon 16 Feb 2026 20:09:44 +0000
ROA not before:           Mon 16 Feb 2026 20:04:44 +0000
ROA not after:            Mon 15 Feb 2027 20:09:44 +0000
asID:                     271704
IP address blocks:        2804:7fb4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DEuGHPKjiFwVxKgcg8h6j1uX8NkMUzHqovZe2amM3NaU/0/3924B516E35165FE5C42CA81DECF7024E08B60F5.crl
                          rsync://rpki-repo.registro.br/repo/DEuGHPKjiFwVxKgcg8h6j1uX8NkMUzHqovZe2amM3NaU/0/3924B516E35165FE5C42CA81DECF7024E08B60F5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3924B516E35165FE5C42CA81DECF7024E08B60F5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 23:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c1:75:8c:ba:21:de:87:c3:5e:47:64:3d:0b:6b:81:6f:f5:f0:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3924B516E35165FE5C42CA81DECF7024E08B60F5
        Validity
            Not Before: Feb 16 20:04:44 2026 GMT
            Not After : Feb 15 20:09:44 2027 GMT
        Subject: CN=FC0854FA295140B6B7BC53CCBF352DBB0A9820E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:dd:a0:14:50:05:55:ae:df:ba:96:5e:da:b4:
                    aa:3e:44:ca:84:17:b0:ac:c0:ab:f3:6f:1f:a9:a3:
                    44:2e:e2:d0:e6:90:de:44:0e:54:d7:4e:54:2f:d1:
                    b0:a4:e0:82:ce:b4:ad:be:3c:38:b1:a8:1b:2e:af:
                    79:b8:03:b4:b0:7f:0e:42:d2:8f:e1:32:40:e4:5d:
                    36:c9:ef:24:c6:2d:9f:87:ad:09:50:29:65:94:03:
                    ed:36:a7:ff:23:57:8e:81:38:6a:90:d3:79:cb:08:
                    dc:f9:d1:ba:e8:f5:be:6c:6b:50:72:56:12:1d:fa:
                    8c:bb:fb:0e:06:b8:47:7a:10:83:fa:13:d9:92:80:
                    d9:b8:83:76:b1:73:f6:24:cb:a0:b7:b4:75:ed:e8:
                    37:a9:3d:ed:4b:c9:19:ac:7f:29:d2:01:cf:a8:86:
                    9c:ef:32:65:63:b2:03:91:2e:d4:ec:09:fe:2d:e5:
                    a8:8f:48:b1:83:d2:ee:58:89:66:55:f0:01:22:9a:
                    f5:4c:06:bf:c2:4f:e4:e3:5c:13:21:ea:77:93:e6:
                    4a:43:af:e5:30:b9:0e:ed:e8:41:58:d7:e6:2b:74:
                    8a:a8:90:e3:81:99:cd:a7:c6:ea:ff:d9:ca:d2:92:
                    f2:07:57:a4:04:ad:b5:a5:ae:8f:43:00:7c:96:0a:
                    6f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:08:54:FA:29:51:40:B6:B7:BC:53:CC:BF:35:2D:BB:0A:98:20:E4
            X509v3 Authority Key Identifier:
                keyid:39:24:B5:16:E3:51:65:FE:5C:42:CA:81:DE:CF:70:24:E0:8B:60:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEuGHPKjiFwVxKgcg8h6j1uX8NkMUzHqovZe2amM3NaU/0/3924B516E35165FE5C42CA81DECF7024E08B60F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3924B516E35165FE5C42CA81DECF7024E08B60F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEuGHPKjiFwVxKgcg8h6j1uX8NkMUzHqovZe2amM3NaU/0/323830343a376662343a3a2f33322d313238203d3e20323731373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:4d:92:6b:23:ec:99:d5:01:ab:2f:4d:dd:f5:40:52:2d:e2:
         61:88:1a:88:1a:b7:d5:0c:61:5b:d0:01:8c:81:f7:61:2c:a5:
         61:0a:db:e5:50:09:a7:07:79:c6:5e:25:99:c5:5b:be:b8:d4:
         da:06:07:29:b8:02:cf:c9:61:ff:f1:56:cc:ab:d1:97:74:8b:
         4b:47:13:b5:52:6d:18:96:a6:39:ec:b8:ba:0b:11:0c:01:dc:
         4b:fc:14:6e:5a:39:1f:20:91:3e:64:9b:92:f6:97:84:24:be:
         60:84:68:ee:ce:9e:88:af:41:63:47:36:76:b1:8e:6f:d4:48:
         76:7f:df:b7:77:39:aa:73:05:02:e5:02:ef:12:4f:a1:49:5e:
         5f:ed:5f:2d:d8:f1:43:7a:d2:f0:8d:c1:59:f1:46:ad:19:98:
         9e:7a:de:b2:77:95:8f:c4:ff:84:69:2d:8d:bd:f8:a0:4a:ba:
         3f:f8:e8:2d:cd:48:1a:67:bc:38:ca:75:79:be:92:90:84:65:
         56:01:6c:a3:7f:3b:0c:de:74:c2:fa:ab:2c:24:84:f9:51:d8:
         77:f2:b5:7d:4e:86:e3:43:5f:88:b9:9e:28:59:39:b4:75:07:
         11:3c:f8:e6:13:e6:31:75:c1:9a:ac:4e:16:da:85:c0:5e:3a:
         9b:6a:d0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 07:22:22 2026 by rpki-client