Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4UzVWXXk6HGr8gbzLuxpLeUVtRna4CmBppqavpDdZPE/0/323830343a346564343a3a2f33322d3438203d3e20323638323835.roa
File:                     323830343a346564343a3a2f33322d3438203d3e20323638323835.roa (raw, json)
Hash identifier:          EPxLq5EfXaPHnhyb43M8S4b+Bl4ut/Lf065P2iboCok=
Subject key identifier:   BD:2B:47:C1:54:7F:FB:90:96:15:27:CC:8D:0B:51:8D:6C:5C:BD:C5
Certificate issuer:       /CN=64516CA555CC22525F6FBCB7B37EF8844DB4D07B
Certificate serial:       3F9D5F45A4AE065EFC278F59639A282F20F16CC3
Authority key identifier: 64:51:6C:A5:55:CC:22:52:5F:6F:BC:B7:B3:7E:F8:84:4D:B4:D0:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64516CA555CC22525F6FBCB7B37EF8844DB4D07B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4UzVWXXk6HGr8gbzLuxpLeUVtRna4CmBppqavpDdZPE/0/323830343a346564343a3a2f33322d3438203d3e20323638323835.roa
Signing time:             Thu 29 Jan 2026 18:38:03 +0000
ROA not before:           Thu 29 Jan 2026 18:33:03 +0000
ROA not after:            Thu 28 Jan 2027 18:38:03 +0000
asID:                     268285
IP address blocks:        2804:4ed4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F4UzVWXXk6HGr8gbzLuxpLeUVtRna4CmBppqavpDdZPE/0/64516CA555CC22525F6FBCB7B37EF8844DB4D07B.crl
                          rsync://rpki-repo.registro.br/repo/F4UzVWXXk6HGr8gbzLuxpLeUVtRna4CmBppqavpDdZPE/0/64516CA555CC22525F6FBCB7B37EF8844DB4D07B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64516CA555CC22525F6FBCB7B37EF8844DB4D07B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 21:49:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:9d:5f:45:a4:ae:06:5e:fc:27:8f:59:63:9a:28:2f:20:f1:6c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64516CA555CC22525F6FBCB7B37EF8844DB4D07B
        Validity
            Not Before: Jan 29 18:33:03 2026 GMT
            Not After : Jan 28 18:38:03 2027 GMT
        Subject: CN=BD2B47C1547FFB90961527CC8D0B518D6C5CBDC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8d:15:d3:ab:76:27:08:11:3e:b3:99:34:26:
                    20:45:0a:a8:74:d9:14:01:85:44:d5:12:6e:64:3a:
                    79:40:b1:be:c3:05:a5:3f:14:6d:43:09:e5:b8:67:
                    fa:15:e1:a0:49:be:94:64:2f:d7:cf:35:5c:93:a2:
                    7e:30:7d:fa:5c:fe:94:cd:11:fb:dd:98:7d:bd:3c:
                    23:32:26:b8:fa:c1:9b:8c:e7:cf:2f:a0:93:f5:51:
                    e7:3e:28:ab:b8:16:10:24:d3:a0:aa:3b:0e:0d:b4:
                    eb:b6:f1:26:ed:01:c4:db:ea:8d:66:05:59:75:61:
                    6f:de:f0:55:8e:fd:dd:b3:1c:73:f9:11:76:fb:bc:
                    ee:61:99:3b:9f:f0:60:36:40:f5:8c:87:f6:6c:65:
                    48:00:bd:3b:51:e4:f7:17:7f:32:12:0d:c7:07:26:
                    45:76:3d:55:b3:56:6e:ab:7d:12:97:cf:70:5c:43:
                    09:06:73:21:18:d4:b8:6c:4b:29:e0:51:3e:d1:78:
                    b0:f1:a9:ff:71:a3:0f:fc:dd:91:c0:7b:90:e6:6b:
                    65:03:ca:dc:56:94:0d:bf:e0:aa:35:c0:b0:13:41:
                    ec:fc:3b:9c:88:3c:3c:b3:a3:52:99:6c:40:da:d2:
                    a2:eb:ff:2f:15:0a:22:b9:8c:93:3b:74:04:83:c3:
                    be:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2B:47:C1:54:7F:FB:90:96:15:27:CC:8D:0B:51:8D:6C:5C:BD:C5
            X509v3 Authority Key Identifier:
                keyid:64:51:6C:A5:55:CC:22:52:5F:6F:BC:B7:B3:7E:F8:84:4D:B4:D0:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4UzVWXXk6HGr8gbzLuxpLeUVtRna4CmBppqavpDdZPE/0/64516CA555CC22525F6FBCB7B37EF8844DB4D07B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64516CA555CC22525F6FBCB7B37EF8844DB4D07B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4UzVWXXk6HGr8gbzLuxpLeUVtRna4CmBppqavpDdZPE/0/323830343a346564343a3a2f33322d3438203d3e20323638323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ed4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:78:8a:1e:dd:d8:d0:63:48:1c:2a:08:26:31:41:b9:49:3a:
         04:41:3e:b8:b6:16:73:c7:61:78:29:85:8f:61:9b:af:30:62:
         8a:f9:2c:b6:f0:ec:ab:61:64:cf:87:71:04:67:fd:0a:99:3b:
         b2:c9:05:cf:c6:f2:40:a7:3c:b5:a1:4d:0b:54:50:ea:49:ad:
         8a:0b:9e:ed:93:17:ba:63:37:6a:13:b8:42:6c:22:62:3c:0e:
         f7:7b:0c:9f:fb:c0:f7:f6:e8:ae:78:83:bc:b3:91:ad:9a:f5:
         1f:20:c7:8c:32:c9:f4:2c:d9:8b:4a:50:d1:46:eb:8a:09:72:
         2f:f8:31:a0:cd:dd:bc:12:ec:8f:27:2b:53:e3:7f:37:8a:46:
         6e:76:1b:5f:bb:c9:a4:fb:62:f0:58:11:7b:ed:6f:5f:38:c7:
         90:01:54:32:5d:33:26:4e:ea:65:8b:24:be:b0:16:b1:4d:51:
         33:d2:48:60:92:99:81:36:2b:45:69:20:87:d9:25:2c:05:82:
         c2:6e:19:e2:2f:3d:25:06:18:7a:39:0d:c1:6c:52:11:a2:ba:
         28:e4:a7:68:df:12:82:32:96:3f:08:fa:ab:2f:c5:fc:19:41:
         18:03:3d:c9:a7:dd:72:c3:a2:ca:1b:cb:82:2a:5c:83:3d:33:
         19:b8:56:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:19:13 2026 by rpki-client