Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/323830343a343630343a3a2f33322d3334203d3e20323636393632.roa
File:                     323830343a343630343a3a2f33322d3334203d3e20323636393632.roa (raw, json)
Hash identifier:          JIpoKbKmQS8aB3awqRsxOXJFuD3mJOT3SZsietBEgoE=
Subject key identifier:   88:B5:3D:81:61:0A:B8:2E:1E:52:25:B4:92:E3:E0:9C:DB:1F:D5:24
Certificate issuer:       /CN=D8BC2857A2908DA9E97EEF422A25745D89F282B3
Certificate serial:       14D0149F46C780A88DA05C64461C5051DF99A78F
Authority key identifier: D8:BC:28:57:A2:90:8D:A9:E9:7E:EF:42:2A:25:74:5D:89:F2:82:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/323830343a343630343a3a2f33322d3334203d3e20323636393632.roa
Signing time:             Wed 18 Feb 2026 15:01:52 +0000
ROA not before:           Wed 18 Feb 2026 14:56:52 +0000
ROA not after:            Wed 17 Feb 2027 15:01:52 +0000
asID:                     266962
IP address blocks:        2804:4604::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.crl
                          rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 23:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d0:14:9f:46:c7:80:a8:8d:a0:5c:64:46:1c:50:51:df:99:a7:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8BC2857A2908DA9E97EEF422A25745D89F282B3
        Validity
            Not Before: Feb 18 14:56:52 2026 GMT
            Not After : Feb 17 15:01:52 2027 GMT
        Subject: CN=88B53D81610AB82E1E5225B492E3E09CDB1FD524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:74:70:84:74:d7:1a:55:e5:06:4d:b1:ff:1a:
                    af:b3:de:79:a6:a4:ec:22:03:7a:d4:5b:95:c7:3a:
                    d6:85:d2:ef:6a:99:1b:ae:4b:f9:07:b8:b4:32:3c:
                    93:9c:a5:cc:6e:28:4e:21:18:10:dc:9c:a8:d0:aa:
                    6f:26:4e:5f:47:35:51:fc:1c:58:20:a8:20:13:3d:
                    26:5f:52:6d:72:c7:71:42:0e:3d:61:a5:04:22:02:
                    d8:5c:0d:16:61:ce:ba:cb:a1:95:06:d5:ad:e6:01:
                    0f:e0:2f:93:86:a4:f9:76:d0:9f:63:29:b1:3b:32:
                    d5:45:b8:5f:6b:4c:87:e6:45:1b:be:4d:77:fe:00:
                    17:1d:3f:c8:fe:0f:46:e6:88:8a:b8:74:36:ac:ff:
                    c2:ba:b4:eb:5e:13:16:45:e6:4f:57:c2:8f:7c:6f:
                    9e:0b:89:a4:f5:b8:a1:e6:0e:e3:fe:2e:a6:6e:d3:
                    a4:2c:36:c0:4c:9c:b8:2b:ab:7b:30:15:67:00:3f:
                    59:5b:3c:ed:01:f5:20:62:51:b4:c1:14:1b:43:ec:
                    a7:41:90:d0:1c:22:b0:06:b1:4c:7c:2d:60:bd:79:
                    d1:65:aa:65:6a:10:91:39:be:f5:6c:36:38:67:b0:
                    fd:6d:e3:b1:29:7f:ad:4c:03:be:6a:06:e5:a6:6b:
                    c1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B5:3D:81:61:0A:B8:2E:1E:52:25:B4:92:E3:E0:9C:DB:1F:D5:24
            X509v3 Authority Key Identifier:
                keyid:D8:BC:28:57:A2:90:8D:A9:E9:7E:EF:42:2A:25:74:5D:89:F2:82:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/323830343a343630343a3a2f33322d3334203d3e20323636393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4604::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:9e:94:87:68:81:41:d1:83:47:aa:d9:16:22:66:1c:c4:7b:
         ef:30:51:7f:8b:b1:15:e4:dd:5b:c9:99:d6:db:33:8e:81:0e:
         29:33:ae:5e:c4:d7:da:8a:d6:cd:f2:d3:26:fc:28:4b:98:7e:
         8d:b7:d5:e6:3b:3e:14:f1:a2:77:4b:d8:97:68:a2:c0:6f:81:
         04:e4:c0:bf:ce:5d:ec:0f:b4:b0:39:c8:26:79:57:e6:d4:55:
         ba:38:80:81:36:42:35:89:c8:3f:05:7e:0d:dc:f4:a2:6d:8c:
         09:d7:5b:c5:c3:5c:0b:a0:37:7c:15:fa:4c:52:6c:24:7f:4f:
         cb:20:7a:e7:c1:2f:5c:aa:c9:c6:ac:70:88:ea:74:8b:25:0e:
         4f:6b:b9:fc:ed:7d:4e:13:6c:b2:dc:97:90:7f:53:7e:ab:8b:
         a8:1b:c5:d6:94:63:9d:d0:0e:d0:30:2b:39:92:f9:7e:d0:59:
         3c:f1:c9:e5:b4:de:d2:c1:a3:8a:00:22:15:d7:ea:27:eb:47:
         4a:d8:17:1b:7a:13:eb:50:86:4e:c0:5e:10:95:7a:4a:cf:e6:
         ef:92:a7:eb:06:6e:ca:1a:6e:a1:e7:64:2b:98:98:b8:47:cf:
         be:58:13:6e:c1:3f:9f:28:46:68:d5:bb:06:3d:25:ae:20:a2:
         1d:55:f2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:22:25 2026 by rpki-client