Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/1/323830343a346632343a3a2f33322d3332203d3e20323638333037.roa
File:                     323830343a346632343a3a2f33322d3332203d3e20323638333037.roa (raw, json)
Hash identifier:          HDP9cbiEWGnaai0SHydPajl2OWJhjaenaWdkZR2jBKo=
Subject key identifier:   1D:45:EA:D3:BF:E3:2F:68:F8:D8:7B:96:67:A4:B0:86:B9:75:99:F3
Certificate issuer:       /CN=D0441492A402DE782957BD53548E564CE233FB42
Certificate serial:       7E9F91446BA7777640505A6964BEAA4D89056845
Authority key identifier: D0:44:14:92:A4:02:DE:78:29:57:BD:53:54:8E:56:4C:E2:33:FB:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0441492A402DE782957BD53548E564CE233FB42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/1/323830343a346632343a3a2f33322d3332203d3e20323638333037.roa
Signing time:             Mon 09 Feb 2026 15:01:52 +0000
ROA not before:           Mon 09 Feb 2026 14:56:52 +0000
ROA not after:            Mon 08 Feb 2027 15:01:52 +0000
asID:                     268307
IP address blocks:        2804:4f24::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/1/D0441492A402DE782957BD53548E564CE233FB42.crl
                          rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/1/D0441492A402DE782957BD53548E564CE233FB42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0441492A402DE782957BD53548E564CE233FB42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:9f:91:44:6b:a7:77:76:40:50:5a:69:64:be:aa:4d:89:05:68:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0441492A402DE782957BD53548E564CE233FB42
        Validity
            Not Before: Feb  9 14:56:52 2026 GMT
            Not After : Feb  8 15:01:52 2027 GMT
        Subject: CN=1D45EAD3BFE32F68F8D87B9667A4B086B97599F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:64:29:8d:d1:e1:23:0f:58:3d:26:01:ee:d9:
                    7f:fb:d6:29:e1:b0:3e:5a:5d:03:d9:bb:f9:04:e6:
                    a1:aa:22:de:37:3c:7f:44:ec:72:89:69:f8:f7:5f:
                    b6:28:f6:4d:62:9e:8d:07:13:1d:e1:27:ba:0f:f9:
                    36:9e:a0:62:85:ee:85:36:24:87:30:5e:1e:ce:21:
                    f2:9e:45:7d:6d:3e:ee:5b:96:0a:9d:84:bc:27:6b:
                    19:6d:16:67:44:12:a6:96:63:4b:3b:e5:9b:c2:16:
                    fe:f7:4d:aa:d8:99:71:90:c1:c5:e7:59:a0:b8:0d:
                    84:55:4e:95:e8:c4:c8:21:12:bb:27:66:94:5a:b0:
                    4c:ba:a6:4f:7c:1a:d4:23:9c:3d:ce:cd:d2:46:0c:
                    ce:9c:90:c8:d8:be:fa:42:09:5e:a3:27:4c:b9:eb:
                    72:e1:8d:0d:09:5e:f9:3d:a4:45:b0:43:cc:48:a3:
                    d6:e8:58:49:f6:83:26:cb:79:b7:ba:b9:df:06:40:
                    7f:1a:f7:5a:ef:96:75:94:7b:b9:a5:d6:b4:48:d2:
                    11:a9:b1:7b:92:c5:4d:c1:3b:da:cc:b0:62:15:f4:
                    93:a6:0b:88:8d:9e:5e:51:b1:4c:3b:62:a8:ad:5b:
                    92:fd:32:33:e4:ec:81:93:ef:ca:93:04:be:dd:5f:
                    62:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:45:EA:D3:BF:E3:2F:68:F8:D8:7B:96:67:A4:B0:86:B9:75:99:F3
            X509v3 Authority Key Identifier:
                keyid:D0:44:14:92:A4:02:DE:78:29:57:BD:53:54:8E:56:4C:E2:33:FB:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/1/D0441492A402DE782957BD53548E564CE233FB42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0441492A402DE782957BD53548E564CE233FB42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/1/323830343a346632343a3a2f33322d3332203d3e20323638333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f24::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:10:76:cc:26:85:f1:e8:11:99:c5:d0:06:f7:cf:6c:15:3f:
         dc:e9:ad:8c:3b:06:36:9a:d1:a7:ff:89:c2:78:13:42:dc:1d:
         23:c6:11:b6:c7:60:1a:04:c1:82:20:a9:fb:e7:bb:3e:99:e9:
         b6:6f:e4:04:4a:d0:14:84:0b:76:23:b6:62:ea:c5:94:4c:52:
         82:b3:8b:d0:b0:dc:1c:59:34:c2:db:b5:46:07:0d:99:67:af:
         fb:f8:29:e7:c6:a3:c8:0f:ff:21:d6:76:65:02:84:12:c1:d6:
         73:6e:7b:8d:68:20:f1:be:69:bc:64:7b:53:42:f3:6b:f5:1c:
         72:6f:5c:7d:d7:e2:27:08:ba:e0:35:a7:9f:cd:1e:01:37:4f:
         2d:25:1c:e2:04:b8:ce:9a:61:82:78:bb:5f:7b:45:d9:5f:0c:
         ff:c6:aa:aa:7f:c2:45:bc:50:8d:47:8d:53:9b:91:22:5b:0f:
         f1:ae:18:03:62:3b:d8:5f:87:82:d1:1d:77:d2:d7:fc:91:5e:
         e3:ce:42:75:e9:51:85:fb:4b:e3:76:c6:0d:98:6d:44:4d:1a:
         3d:5c:1a:71:1d:c5:56:b4:de:80:51:4a:a4:d7:b5:e6:3c:42:
         11:08:65:4a:63:97:2c:eb:35:57:09:e7:f2:01:8d:66:0d:c6:
         2e:d3:11:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:31:31 2026 by rpki-client