Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F5sFSPevz3n3gbdcyypNbi2RkS79EShpKZ15cNLkvPMA/0/323830343a393739303a3a2f33322d313238203d3e20323735363331.roa
File:                     323830343a393739303a3a2f33322d313238203d3e20323735363331.roa (raw, json)
Hash identifier:          Tru9K7iTZxan0rQQwtQXpAlbYmyzN539zYEj4ZP3VjY=
Subject key identifier:   47:CB:AB:68:8F:CD:DC:DA:15:DF:C2:D5:02:8B:5A:21:A4:DE:D4:65
Certificate issuer:       /CN=3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8
Certificate serial:       287FEADBFFBE1410C6F6E6FAE0B9403225D39197
Authority key identifier: 3D:09:87:4F:AB:AB:66:40:E1:AF:90:CD:33:F6:EE:C4:3C:E6:5A:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5sFSPevz3n3gbdcyypNbi2RkS79EShpKZ15cNLkvPMA/0/323830343a393739303a3a2f33322d313238203d3e20323735363331.roa
Signing time:             Mon 02 Feb 2026 17:21:59 +0000
ROA not before:           Mon 02 Feb 2026 17:16:59 +0000
ROA not after:            Mon 01 Feb 2027 17:21:59 +0000
asID:                     275631
IP address blocks:        2804:9790::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F5sFSPevz3n3gbdcyypNbi2RkS79EShpKZ15cNLkvPMA/0/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.crl
                          rsync://rpki-repo.registro.br/repo/F5sFSPevz3n3gbdcyypNbi2RkS79EShpKZ15cNLkvPMA/0/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 12:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7f:ea:db:ff:be:14:10:c6:f6:e6:fa:e0:b9:40:32:25:d3:91:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8
        Validity
            Not Before: Feb  2 17:16:59 2026 GMT
            Not After : Feb  1 17:21:59 2027 GMT
        Subject: CN=47CBAB688FCDDCDA15DFC2D5028B5A21A4DED465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cf:0e:4f:e4:4e:80:16:ea:8d:24:10:a2:33:
                    a4:63:41:bb:f0:b9:5e:6c:c2:f3:88:1d:da:a3:1c:
                    3c:9c:bf:cb:37:7e:ff:ee:fa:db:51:04:91:84:45:
                    52:f8:e9:78:c1:9f:9a:13:4b:b0:69:bc:53:67:13:
                    0a:a2:e9:0b:4b:d6:2e:1b:14:3b:55:e5:e5:08:88:
                    de:20:55:37:a9:ec:81:38:7e:2e:cb:37:75:4a:01:
                    d7:3b:81:f5:80:e8:4b:bd:3e:df:59:6a:d6:1b:0b:
                    14:8e:34:0d:7d:d6:d9:bb:bf:73:da:a5:e4:49:c5:
                    5a:f7:f5:17:9c:1d:13:ac:b1:8b:58:a1:61:f4:24:
                    a7:63:54:0d:ac:7b:ba:bf:92:9f:84:1b:40:f6:da:
                    cd:a1:ac:a1:86:0b:a6:16:b8:62:19:56:e2:85:2c:
                    10:ad:09:89:cf:8d:37:5b:a3:52:48:64:b3:26:72:
                    26:97:4d:e4:8f:90:b2:57:db:67:66:b1:bf:17:72:
                    ae:c2:22:91:0b:b1:19:b2:0f:44:38:62:bc:1b:6e:
                    37:3c:d2:64:eb:9b:16:70:f0:54:95:83:18:af:b8:
                    14:32:85:60:43:90:d4:16:3c:b1:f6:f7:a2:56:5f:
                    f4:81:97:36:be:c3:28:9f:d4:94:db:b6:db:2a:fb:
                    dc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CB:AB:68:8F:CD:DC:DA:15:DF:C2:D5:02:8B:5A:21:A4:DE:D4:65
            X509v3 Authority Key Identifier:
                keyid:3D:09:87:4F:AB:AB:66:40:E1:AF:90:CD:33:F6:EE:C4:3C:E6:5A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5sFSPevz3n3gbdcyypNbi2RkS79EShpKZ15cNLkvPMA/0/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5sFSPevz3n3gbdcyypNbi2RkS79EShpKZ15cNLkvPMA/0/323830343a393739303a3a2f33322d313238203d3e20323735363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9790::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:a7:5a:3d:ae:31:4d:77:4a:52:77:ea:da:42:1a:59:2a:8b:
         69:9c:2b:9e:03:96:fd:46:42:41:84:7a:ff:b5:ae:13:b9:d8:
         01:d1:fc:fa:99:ae:bd:87:e1:f8:2c:e4:be:97:a8:36:54:43:
         1f:85:34:12:2f:bc:09:61:22:03:52:60:8b:0f:d8:24:1b:40:
         ec:af:a7:97:22:a8:6a:12:ef:6f:2d:8e:e7:3f:5e:92:fa:1c:
         3f:99:95:90:82:f6:d9:96:1d:88:f0:14:dc:f6:00:61:99:b0:
         40:ab:ff:2a:2a:97:d3:08:8a:18:8b:ff:b5:86:56:01:7e:2b:
         3a:88:14:7d:af:a6:91:9f:37:40:9b:07:ed:31:ca:c2:f2:5c:
         97:aa:9b:6b:73:20:b1:87:83:bb:4e:6c:9c:49:cf:6a:b3:e8:
         51:94:ee:02:f8:0c:92:db:d0:81:cd:e0:4c:38:6c:08:68:53:
         6a:a4:85:df:80:2b:b0:be:fe:9f:1d:b1:78:7a:dc:f1:7e:57:
         75:b9:f2:bf:69:8d:09:ac:d4:54:b5:6b:7d:81:33:95:3c:2c:
         bb:be:a2:25:1e:3b:5e:9f:53:13:41:ee:1b:32:6c:36:5c:aa:
         45:3b:76:04:12:72:03:b5:af:b7:07:aa:d3:5a:54:ea:b0:33:
         32:35:42:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:00:23 2026 by rpki-client