Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQEhd2dCNezpdd2vjCseVJfEoRiqxajM6fwpZk94ZgTN/0/323830343a363438343a3a2f33332d3333203d3e20323639343332.roa
File:                     323830343a363438343a3a2f33332d3333203d3e20323639343332.roa (raw, json)
Hash identifier:          oXDTiKoYiDMfJOXb9uHASDQE16EKQKtypu07IJPwQL4=
Subject key identifier:   26:1E:93:78:BF:0E:69:18:3A:15:CC:C1:B5:E0:B9:A8:38:DE:A2:A6
Certificate issuer:       /CN=CD927BB65CBF320EF893E090733F137A18FEC20B
Certificate serial:       31F80C011D35C18ED6DB92676664CEB1E5A79774
Authority key identifier: CD:92:7B:B6:5C:BF:32:0E:F8:93:E0:90:73:3F:13:7A:18:FE:C2:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD927BB65CBF320EF893E090733F137A18FEC20B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQEhd2dCNezpdd2vjCseVJfEoRiqxajM6fwpZk94ZgTN/0/323830343a363438343a3a2f33332d3333203d3e20323639343332.roa
Signing time:             Mon 09 Feb 2026 13:55:38 +0000
ROA not before:           Mon 09 Feb 2026 13:50:38 +0000
ROA not after:            Mon 08 Feb 2027 13:55:38 +0000
asID:                     269432
IP address blocks:        2804:6484::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQEhd2dCNezpdd2vjCseVJfEoRiqxajM6fwpZk94ZgTN/0/CD927BB65CBF320EF893E090733F137A18FEC20B.crl
                          rsync://rpki-repo.registro.br/repo/EQEhd2dCNezpdd2vjCseVJfEoRiqxajM6fwpZk94ZgTN/0/CD927BB65CBF320EF893E090733F137A18FEC20B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD927BB65CBF320EF893E090733F137A18FEC20B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 15:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f8:0c:01:1d:35:c1:8e:d6:db:92:67:66:64:ce:b1:e5:a7:97:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD927BB65CBF320EF893E090733F137A18FEC20B
        Validity
            Not Before: Feb  9 13:50:38 2026 GMT
            Not After : Feb  8 13:55:38 2027 GMT
        Subject: CN=261E9378BF0E69183A15CCC1B5E0B9A838DEA2A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7c:5c:73:be:66:2a:dd:fc:2c:40:cb:01:3d:
                    2c:ba:4d:19:33:11:6a:89:5c:0b:1f:5a:d4:67:80:
                    9b:47:61:7f:7b:b9:dc:96:f3:70:e5:f7:b2:4d:10:
                    41:a5:4c:07:58:40:c6:10:c5:97:f9:39:1f:65:6c:
                    99:c0:d9:72:4e:07:38:79:1d:9d:f9:ae:f2:88:e0:
                    a6:6b:a1:51:bf:02:ef:fc:fd:04:e8:07:f1:42:65:
                    b4:35:c2:d7:73:86:35:60:dc:f5:71:d5:cb:20:96:
                    49:51:14:41:3d:11:ca:08:71:c4:c2:81:0f:a1:5e:
                    a9:dc:58:50:a9:2a:e3:4d:0e:c4:ba:11:09:dc:49:
                    74:d7:ef:31:d4:e5:7c:d3:f9:f2:82:24:10:1d:75:
                    a0:87:c1:98:02:04:74:ac:d9:a1:cc:b2:a0:cb:80:
                    07:40:3d:a9:a4:48:aa:39:40:37:7e:20:c0:bf:5f:
                    16:7c:b1:63:1b:bd:20:9a:a2:88:65:4d:67:4e:bf:
                    27:9d:80:69:f5:25:89:56:2d:99:bd:17:0e:d3:7d:
                    14:c3:4d:00:a5:d0:d6:67:0e:60:53:50:85:73:bc:
                    19:f0:b3:eb:62:0d:38:2e:ae:ec:6d:6d:e8:0e:9b:
                    dc:98:90:d7:99:90:63:66:3b:ed:e3:ca:97:f5:3c:
                    ef:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1E:93:78:BF:0E:69:18:3A:15:CC:C1:B5:E0:B9:A8:38:DE:A2:A6
            X509v3 Authority Key Identifier:
                keyid:CD:92:7B:B6:5C:BF:32:0E:F8:93:E0:90:73:3F:13:7A:18:FE:C2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQEhd2dCNezpdd2vjCseVJfEoRiqxajM6fwpZk94ZgTN/0/CD927BB65CBF320EF893E090733F137A18FEC20B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD927BB65CBF320EF893E090733F137A18FEC20B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQEhd2dCNezpdd2vjCseVJfEoRiqxajM6fwpZk94ZgTN/0/323830343a363438343a3a2f33332d3333203d3e20323639343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6484::/33

    Signature Algorithm: sha256WithRSAEncryption
         6d:43:50:82:e5:31:1c:7e:22:64:56:14:0b:78:fc:a3:1f:2c:
         55:c9:fc:77:b2:07:e5:d7:22:60:8d:c4:3c:a6:7a:98:15:bf:
         ef:05:01:f3:4e:57:6f:96:1c:c1:bb:83:bc:d6:a5:b2:0d:1f:
         15:0e:77:17:39:cf:cc:3f:50:19:b5:e3:68:56:b8:31:4b:ec:
         d5:d7:e9:40:1b:ea:76:21:48:cf:ee:3b:5a:cd:4b:06:27:db:
         72:34:2b:e6:06:65:8d:20:3c:21:2c:5c:b8:08:e3:64:bb:62:
         0b:5c:b6:f2:a5:db:29:b5:d4:ac:5c:d8:0d:0a:a2:b3:b5:37:
         e3:a4:6d:10:e5:5a:91:42:10:7f:bb:ef:01:fe:1a:4b:4a:2e:
         a4:c7:74:11:11:e1:b7:19:c3:d5:a3:2d:f0:c7:86:13:da:dc:
         c6:be:36:c9:de:30:bf:14:06:be:31:b6:c9:95:fb:91:c8:fa:
         e7:c7:49:41:3b:d2:21:ac:10:ad:cd:f9:e2:d1:62:62:96:12:
         26:fd:b8:cf:b2:e6:3a:d9:05:8c:55:0f:6d:74:d0:50:24:78:
         57:ee:23:d2:a2:e6:0e:7a:28:ac:14:5a:4a:9f:66:6d:11:7e:
         56:1d:04:2c:07:6a:a2:46:09:86:3a:37:75:ee:74:a3:c3:ea:
         b1:2c:b5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:48:01 2026 by rpki-client