Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/1/323830343a346632343a3a2f33332d3333203d3e20323638333037.roa
File:                     323830343a346632343a3a2f33332d3333203d3e20323638333037.roa (raw, json)
Hash identifier:          DVcJy1qItpJqF35NIlUS7i5V9KqUshVH0d0Oo1xJRMI=
Subject key identifier:   7C:4C:F5:8C:BA:35:FA:47:48:AC:0E:D1:0A:0B:DC:BB:90:0A:A6:A2
Certificate issuer:       /CN=D0441492A402DE782957BD53548E564CE233FB42
Certificate serial:       049D4DD0F16C459ECA6891E873DBF923DAAC07D8
Authority key identifier: D0:44:14:92:A4:02:DE:78:29:57:BD:53:54:8E:56:4C:E2:33:FB:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0441492A402DE782957BD53548E564CE233FB42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/1/323830343a346632343a3a2f33332d3333203d3e20323638333037.roa
Signing time:             Mon 09 Feb 2026 15:01:51 +0000
ROA not before:           Mon 09 Feb 2026 14:56:51 +0000
ROA not after:            Mon 08 Feb 2027 15:01:51 +0000
asID:                     268307
IP address blocks:        2804:4f24::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/1/D0441492A402DE782957BD53548E564CE233FB42.crl
                          rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/1/D0441492A402DE782957BD53548E564CE233FB42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0441492A402DE782957BD53548E564CE233FB42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9d:4d:d0:f1:6c:45:9e:ca:68:91:e8:73:db:f9:23:da:ac:07:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0441492A402DE782957BD53548E564CE233FB42
        Validity
            Not Before: Feb  9 14:56:51 2026 GMT
            Not After : Feb  8 15:01:51 2027 GMT
        Subject: CN=7C4CF58CBA35FA4748AC0ED10A0BDCBB900AA6A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:68:bb:ca:d3:3d:26:af:e8:46:22:20:91:fe:
                    63:a4:73:e4:1f:73:cf:6c:e1:91:5e:c4:bd:ab:cb:
                    f8:8d:23:00:a1:38:77:b0:14:0e:99:34:84:8d:14:
                    b4:f3:5c:c6:c1:b3:2a:42:73:74:11:b3:a7:03:fa:
                    d6:71:38:ed:ae:ae:eb:d3:a5:7f:15:4a:76:da:25:
                    ef:80:9a:fb:bc:bd:3e:28:26:16:5a:a1:a4:7d:9a:
                    25:82:12:a6:55:eb:e5:05:87:9e:ad:f6:4b:e1:ff:
                    ab:be:cb:b1:85:42:08:03:c9:89:40:21:29:6e:88:
                    32:f3:bf:be:98:25:7f:2a:30:58:42:9d:87:27:5f:
                    90:a2:c0:ae:cd:97:c5:ac:b0:c9:2d:43:8a:3c:a8:
                    f5:af:ff:3a:76:20:a0:59:65:95:dd:9a:16:f8:45:
                    cd:0c:4e:b3:af:b5:ea:28:94:88:b0:86:eb:5f:e7:
                    e8:e9:f1:91:1e:8b:cb:2e:d4:07:3e:fc:c7:e8:30:
                    9c:af:90:33:13:be:f0:31:54:ef:49:de:4d:55:f6:
                    62:f7:7c:b6:9a:62:43:2c:37:59:e6:86:4e:8a:b4:
                    48:ef:e8:76:f7:a7:f3:d5:c8:5b:43:bf:bc:26:b1:
                    07:3b:e9:62:41:d4:71:9e:1b:bc:cf:5f:14:f3:cb:
                    95:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4C:F5:8C:BA:35:FA:47:48:AC:0E:D1:0A:0B:DC:BB:90:0A:A6:A2
            X509v3 Authority Key Identifier:
                keyid:D0:44:14:92:A4:02:DE:78:29:57:BD:53:54:8E:56:4C:E2:33:FB:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/1/D0441492A402DE782957BD53548E564CE233FB42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0441492A402DE782957BD53548E564CE233FB42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/1/323830343a346632343a3a2f33332d3333203d3e20323638333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f24::/33

    Signature Algorithm: sha256WithRSAEncryption
         2e:14:32:0d:af:a4:26:f6:7c:df:3d:41:c4:e7:45:05:c6:12:
         b6:85:80:4a:40:3e:24:00:1c:4c:f0:f6:26:94:fa:ba:8a:86:
         c8:34:2c:f9:ec:20:4a:58:13:a1:b4:3a:55:23:9c:62:78:96:
         13:55:7a:97:d6:07:e5:c7:67:11:98:96:2c:3b:03:3b:a3:d4:
         6d:46:92:56:a4:2f:34:b9:66:75:78:c6:ad:d8:a8:e0:97:eb:
         d7:9e:07:38:dd:4a:20:da:16:54:0d:94:59:c5:88:c3:0c:da:
         59:ae:bd:a2:f8:85:50:91:26:7b:2c:1b:a1:19:f1:00:51:f9:
         51:53:33:b5:ed:e5:ef:bf:6d:bc:06:8e:94:fb:cf:e8:81:98:
         db:09:ed:54:42:00:09:f3:ee:ac:45:bf:aa:84:3b:d2:9c:bd:
         d2:a6:9a:05:4b:40:f4:37:b8:e7:a7:1c:07:3c:ba:f7:94:50:
         5e:12:50:13:31:0d:c3:a2:3e:52:a4:52:14:df:21:5b:cd:b8:
         5f:bf:0d:47:3d:a3:76:1e:33:a9:36:86:11:52:09:68:ff:e5:
         bf:88:c3:97:c2:17:a4:17:c1:19:b0:fa:ec:42:8e:3e:95:be:
         30:54:1e:f8:d8:c2:5d:ca:ef:14:cb:6a:50:02:8b:f5:45:5f:
         78:fb:b0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:18:42 2026 by rpki-client