Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F49S9pxJSsVQMnpg84cZCRRHud3W3iTgfYKpNFaoSs9H/0/323830343a363633343a3a2f33322d313238203d3e20323639353431.roa
File:                     323830343a363633343a3a2f33322d313238203d3e20323639353431.roa (raw, json)
Hash identifier:          mdz+k25Yl69fWCwPtCoh7Kmxpkya5lWd9YY+ZK4ogXk=
Subject key identifier:   88:0E:9E:74:7D:CC:73:12:C7:F7:55:F2:97:66:0B:FC:21:1E:2D:92
Certificate issuer:       /CN=2A402458A400ED074E76D8C820FBA439A0893E31
Certificate serial:       2D290D4716F43BBEB24E910FD0957D75D14288DC
Authority key identifier: 2A:40:24:58:A4:00:ED:07:4E:76:D8:C8:20:FB:A4:39:A0:89:3E:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A402458A400ED074E76D8C820FBA439A0893E31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F49S9pxJSsVQMnpg84cZCRRHud3W3iTgfYKpNFaoSs9H/0/323830343a363633343a3a2f33322d313238203d3e20323639353431.roa
Signing time:             Mon 09 Feb 2026 19:04:19 +0000
ROA not before:           Mon 09 Feb 2026 18:59:19 +0000
ROA not after:            Mon 08 Feb 2027 19:04:19 +0000
asID:                     269541
IP address blocks:        2804:6634::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F49S9pxJSsVQMnpg84cZCRRHud3W3iTgfYKpNFaoSs9H/0/2A402458A400ED074E76D8C820FBA439A0893E31.crl
                          rsync://rpki-repo.registro.br/repo/F49S9pxJSsVQMnpg84cZCRRHud3W3iTgfYKpNFaoSs9H/0/2A402458A400ED074E76D8C820FBA439A0893E31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A402458A400ED074E76D8C820FBA439A0893E31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 18:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:29:0d:47:16:f4:3b:be:b2:4e:91:0f:d0:95:7d:75:d1:42:88:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A402458A400ED074E76D8C820FBA439A0893E31
        Validity
            Not Before: Feb  9 18:59:19 2026 GMT
            Not After : Feb  8 19:04:19 2027 GMT
        Subject: CN=880E9E747DCC7312C7F755F297660BFC211E2D92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2e:49:85:e1:90:42:b1:79:29:e6:7b:7c:87:
                    d2:cb:f4:6e:43:d4:c8:4f:0b:da:2f:80:f5:18:3d:
                    70:31:fd:68:f9:bc:ea:ee:bf:2b:6e:b0:ef:8e:5d:
                    24:52:3c:2a:5f:71:a4:4d:f8:99:fd:4d:94:92:39:
                    38:ac:91:ab:8d:46:68:03:e9:b2:1a:35:05:c2:d5:
                    b1:4e:fc:44:be:6f:e1:2a:fd:a8:e0:89:af:ad:ad:
                    e5:c0:63:e2:f3:55:d5:29:79:35:7a:30:f0:e7:07:
                    0b:3b:62:c9:2c:c2:7b:b2:f7:15:e0:a5:cc:d1:96:
                    0f:07:62:fb:41:f9:1f:34:92:a0:a2:78:d7:ae:fd:
                    92:65:0c:3f:ab:23:b8:d3:e4:25:fc:d7:60:f4:ea:
                    f6:78:2f:38:1f:00:22:a0:a0:8d:7d:b5:3f:28:31:
                    1d:f4:5d:67:2a:89:7e:ee:74:71:5b:be:37:0b:53:
                    56:bc:21:1e:1f:2d:0b:9a:4a:71:6d:9d:71:09:1e:
                    98:93:c0:e2:5f:b4:e2:9b:c6:20:94:0a:70:07:9f:
                    87:8c:40:19:9d:ed:aa:52:45:3c:d7:e6:d6:a1:e7:
                    88:16:1b:0b:6e:25:2f:a0:3e:85:9b:48:ba:84:7a:
                    c7:42:81:48:dc:4d:a7:ad:07:46:02:02:9e:7f:58:
                    dc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0E:9E:74:7D:CC:73:12:C7:F7:55:F2:97:66:0B:FC:21:1E:2D:92
            X509v3 Authority Key Identifier:
                keyid:2A:40:24:58:A4:00:ED:07:4E:76:D8:C8:20:FB:A4:39:A0:89:3E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F49S9pxJSsVQMnpg84cZCRRHud3W3iTgfYKpNFaoSs9H/0/2A402458A400ED074E76D8C820FBA439A0893E31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A402458A400ED074E76D8C820FBA439A0893E31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F49S9pxJSsVQMnpg84cZCRRHud3W3iTgfYKpNFaoSs9H/0/323830343a363633343a3a2f33322d313238203d3e20323639353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6634::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:11:16:58:31:6c:64:c5:cc:11:60:c9:b1:11:2d:e3:92:4c:
         77:63:2f:70:31:b3:bf:ec:c5:9d:3d:8b:cf:92:f6:27:97:54:
         71:0f:b2:b2:54:41:73:9c:0a:8e:c0:7f:03:92:ac:ff:19:26:
         d9:86:f2:17:64:b7:be:cf:ca:4a:92:43:fa:4c:c5:79:b5:10:
         c1:1a:75:09:ed:e5:49:4e:c4:5d:e4:ef:b6:bd:af:e6:5b:9b:
         a2:79:d9:0e:9a:cd:f7:e7:bb:0d:2b:46:41:1b:de:a2:8e:ce:
         df:70:5d:cd:65:fb:58:56:a7:dd:53:c7:6e:e1:f5:63:1a:b2:
         46:2c:c9:1a:37:bf:41:e6:63:28:4e:9d:53:dd:d1:95:73:69:
         9d:97:f6:be:4b:7a:9c:38:6b:cb:b6:81:57:2b:ae:ff:81:e4:
         19:92:87:f6:87:c9:f1:2b:7f:02:23:76:44:81:cb:06:53:fb:
         5f:7f:76:df:c3:08:3a:1b:f5:0a:b0:e1:d5:a0:49:51:91:87:
         51:d2:04:49:31:f9:15:ca:9c:9f:18:c0:7e:25:71:fc:2c:ee:
         ab:c0:db:89:bd:b5:a9:5f:07:17:60:2d:a0:37:51:ef:0f:17:
         1a:37:4d:7a:33:f9:48:3d:51:d6:63:11:ed:3c:a3:b1:8e:03:
         5b:01:1c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:30:55 2026 by rpki-client