Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Edwa9FBcaFF5PXcU9cJW636VQDN7XooCNHAHp48r5W9n/0/323830343a393166633a3a2f33322d3438203d3e20323734363830.roa
File:                     323830343a393166633a3a2f33322d3438203d3e20323734363830.roa (raw, json)
Hash identifier:          1sl8LMHpV3WBc5xK3f6CzNviyWw+p7DSYND0aRvDrEw=
Subject key identifier:   24:85:DE:1C:1F:A9:8D:98:3A:11:45:A7:59:A0:FC:E8:6D:C2:5B:D8
Certificate issuer:       /CN=5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4
Certificate serial:       411B2354CD22FFFC1349ED42111F839F578D1A5F
Authority key identifier: 5D:C4:02:BA:39:7E:7E:F1:50:69:B3:A4:F7:A6:67:F0:2B:1F:EA:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Edwa9FBcaFF5PXcU9cJW636VQDN7XooCNHAHp48r5W9n/0/323830343a393166633a3a2f33322d3438203d3e20323734363830.roa
Signing time:             Fri 02 Jan 2026 18:02:34 +0000
ROA not before:           Fri 02 Jan 2026 17:57:34 +0000
ROA not after:            Fri 01 Jan 2027 18:02:34 +0000
asID:                     274680
IP address blocks:        2804:91fc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Edwa9FBcaFF5PXcU9cJW636VQDN7XooCNHAHp48r5W9n/0/5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.crl
                          rsync://rpki-repo.registro.br/repo/Edwa9FBcaFF5PXcU9cJW636VQDN7XooCNHAHp48r5W9n/0/5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 02:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1b:23:54:cd:22:ff:fc:13:49:ed:42:11:1f:83:9f:57:8d:1a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4
        Validity
            Not Before: Jan  2 17:57:34 2026 GMT
            Not After : Jan  1 18:02:34 2027 GMT
        Subject: CN=2485DE1C1FA98D983A1145A759A0FCE86DC25BD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:42:99:fb:fe:ae:3b:0c:48:fc:57:43:9d:a2:
                    eb:e7:12:5e:64:ef:f3:5b:38:8d:62:6c:2f:27:da:
                    3b:6c:0b:3d:3a:7a:06:e4:ed:15:ba:b0:37:9c:75:
                    8e:98:a9:65:9e:9d:ef:85:fd:ef:ae:f9:fb:a0:37:
                    55:3a:2a:2f:73:4c:d4:86:06:72:d1:2c:a7:47:9b:
                    22:3f:e1:02:45:27:da:16:0f:32:91:c4:8e:1e:20:
                    c4:68:e9:76:a3:4d:1b:d2:ab:0f:cf:6e:9b:85:3b:
                    71:6b:f6:79:19:89:b6:22:43:a5:84:40:09:12:a6:
                    d3:31:c7:a3:a8:1c:f9:08:0b:f8:10:fb:23:2b:b8:
                    d3:76:58:fa:7f:4c:7e:d3:89:f2:e7:09:8d:cd:68:
                    63:f5:c1:32:d7:e2:63:da:ca:3d:76:93:a6:f5:25:
                    f6:d3:df:4e:bf:f9:fd:dc:20:d0:f6:a2:2d:a4:14:
                    5f:24:b3:60:04:ce:cc:26:a4:5a:ae:03:53:05:85:
                    92:09:a9:ce:dc:45:7f:15:54:0b:cb:69:63:5d:7c:
                    19:42:db:9a:6c:6a:d9:10:d9:dd:79:a7:c7:32:35:
                    75:54:3d:8d:33:35:62:e9:fd:b8:b3:1e:27:a5:1a:
                    45:7f:a5:b2:06:63:44:a5:0a:47:4c:19:ba:08:10:
                    dc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:85:DE:1C:1F:A9:8D:98:3A:11:45:A7:59:A0:FC:E8:6D:C2:5B:D8
            X509v3 Authority Key Identifier:
                keyid:5D:C4:02:BA:39:7E:7E:F1:50:69:B3:A4:F7:A6:67:F0:2B:1F:EA:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Edwa9FBcaFF5PXcU9cJW636VQDN7XooCNHAHp48r5W9n/0/5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC402BA397E7EF15069B3A4F7A667F02B1FEAE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Edwa9FBcaFF5PXcU9cJW636VQDN7XooCNHAHp48r5W9n/0/323830343a393166633a3a2f33322d3438203d3e20323734363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:c2:6e:e8:ff:fa:a8:5c:6e:d2:8b:d5:c5:39:18:4c:5b:90:
         db:83:8b:28:eb:50:c2:47:fe:86:76:7b:5a:54:2a:d3:f8:00:
         8f:db:78:9e:51:51:8f:49:32:d8:31:40:00:84:b3:ae:61:fa:
         ea:69:89:fc:0e:87:47:b7:ea:a2:db:44:6b:aa:9a:0d:4b:9b:
         28:59:9f:eb:ac:43:74:87:c2:d2:98:b9:6a:40:5a:1a:92:51:
         19:93:7c:7b:93:1c:04:32:08:fc:e2:f2:3b:91:d5:a0:16:b7:
         56:6f:8f:44:a9:f4:b3:cd:30:af:59:1b:8a:b7:8b:d5:be:51:
         0d:e8:a9:5c:a7:cc:6f:a8:fc:5e:fe:d4:f1:e3:6d:34:f7:87:
         e7:e8:0d:0a:74:f7:fe:e2:bf:16:90:65:b8:a0:ca:46:a1:8e:
         d6:c1:46:ca:9c:f1:34:ad:a8:61:02:20:74:6c:82:ee:9a:70:
         65:b7:ab:c6:29:b7:3d:91:98:21:c4:79:4a:05:01:db:00:d2:
         38:16:dd:48:df:14:c0:65:d8:df:24:09:7f:81:55:e6:5e:b3:
         25:06:f9:36:98:f2:24:b2:73:9a:b3:e9:fa:ce:5f:a4:7c:02:
         40:96:9e:5c:2d:ca:e5:62:f1:b3:db:00:51:aa:81:ad:39:b1:
         43:d0:7c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:48:14 2026 by rpki-client