Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FXjugDzajJqJZRzjsbLquz1kZwLgXKr9eEB3oNfLzMHm/0/323830343a393633633a383030303a3a2f33342d3334203d3e20323734353739.roa
File:                     323830343a393633633a383030303a3a2f33342d3334203d3e20323734353739.roa (raw, json)
Hash identifier:          BctQs19XQ1cQ1m355YIZfJBBUdtyD3X70dWZ9yCZoIE=
Subject key identifier:   C7:B1:F6:0B:30:17:45:05:D3:79:79:A2:A9:01:37:E7:36:D0:92:2A
Certificate issuer:       /CN=A8D4EE5F93EBD347F5F284DE609761D251F7953D
Certificate serial:       331BFBBD2D321A4B2EA2546A13453609B45A3C47
Authority key identifier: A8:D4:EE:5F:93:EB:D3:47:F5:F2:84:DE:60:97:61:D2:51:F7:95:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D4EE5F93EBD347F5F284DE609761D251F7953D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXjugDzajJqJZRzjsbLquz1kZwLgXKr9eEB3oNfLzMHm/0/323830343a393633633a383030303a3a2f33342d3334203d3e20323734353739.roa
Signing time:             Wed 11 Feb 2026 17:47:00 +0000
ROA not before:           Wed 11 Feb 2026 17:42:00 +0000
ROA not after:            Wed 10 Feb 2027 17:47:00 +0000
asID:                     274579
IP address blocks:        2804:963c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FXjugDzajJqJZRzjsbLquz1kZwLgXKr9eEB3oNfLzMHm/0/A8D4EE5F93EBD347F5F284DE609761D251F7953D.crl
                          rsync://rpki-repo.registro.br/repo/FXjugDzajJqJZRzjsbLquz1kZwLgXKr9eEB3oNfLzMHm/0/A8D4EE5F93EBD347F5F284DE609761D251F7953D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D4EE5F93EBD347F5F284DE609761D251F7953D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 21:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:1b:fb:bd:2d:32:1a:4b:2e:a2:54:6a:13:45:36:09:b4:5a:3c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8D4EE5F93EBD347F5F284DE609761D251F7953D
        Validity
            Not Before: Feb 11 17:42:00 2026 GMT
            Not After : Feb 10 17:47:00 2027 GMT
        Subject: CN=C7B1F60B30174505D37979A2A90137E736D0922A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d0:2d:d2:20:32:e6:be:b9:82:ab:63:7f:94:
                    0b:62:ba:ff:38:0e:47:95:5d:28:5c:6b:c4:41:62:
                    c6:00:92:3d:ef:b3:cd:a2:0d:e3:c8:d8:30:6d:f3:
                    2b:95:ee:f9:d6:e8:8f:7f:4d:6e:a6:3b:80:6e:d0:
                    0f:1a:6c:6a:f4:84:cd:77:21:c4:f5:f5:11:0d:85:
                    c9:69:20:0d:ee:eb:14:30:7d:c1:12:72:45:31:5d:
                    5e:e3:63:ac:a8:08:41:7a:f1:d3:cc:4f:2e:d1:39:
                    fd:d7:52:f0:23:f2:1d:e8:ef:19:5f:02:77:07:4f:
                    a4:24:1f:a1:73:7e:ff:95:d0:1b:b8:0e:db:d4:5b:
                    2f:6a:04:6b:4c:18:6c:b8:a2:70:fb:5a:94:d1:c7:
                    7e:b6:27:8b:ac:c7:d9:6c:e9:1f:03:de:b1:a0:97:
                    0b:80:08:6b:10:3c:b6:34:c7:ac:27:5a:09:3c:2b:
                    5d:4e:1e:91:90:71:2d:60:ab:2b:7d:f6:dc:b0:58:
                    7d:7e:a0:53:d7:b9:78:87:c1:7f:be:78:d2:55:67:
                    99:b8:00:42:8c:b7:44:20:6e:38:25:57:43:4a:80:
                    aa:3c:03:0d:65:83:78:82:6d:56:a6:5e:6d:58:b1:
                    b5:41:e2:8d:ca:53:34:be:3a:0f:61:35:b9:1c:10:
                    1d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B1:F6:0B:30:17:45:05:D3:79:79:A2:A9:01:37:E7:36:D0:92:2A
            X509v3 Authority Key Identifier:
                keyid:A8:D4:EE:5F:93:EB:D3:47:F5:F2:84:DE:60:97:61:D2:51:F7:95:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXjugDzajJqJZRzjsbLquz1kZwLgXKr9eEB3oNfLzMHm/0/A8D4EE5F93EBD347F5F284DE609761D251F7953D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D4EE5F93EBD347F5F284DE609761D251F7953D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXjugDzajJqJZRzjsbLquz1kZwLgXKr9eEB3oNfLzMHm/0/323830343a393633633a383030303a3a2f33342d3334203d3e20323734353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:963c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         02:ea:3f:f3:ce:9f:ff:2b:cf:2a:df:72:9e:a7:26:87:95:cb:
         bc:84:fc:6b:72:1b:b9:ed:4c:5c:13:d8:bc:48:82:4d:cb:e0:
         5e:6a:6a:b2:9e:16:c0:29:2c:ee:15:b2:92:a3:e7:1a:ab:d6:
         22:3b:bf:4c:e7:d6:ec:b1:a5:dc:55:97:75:df:95:81:d9:8c:
         6f:51:dc:7b:de:d3:48:a3:bb:ed:40:d0:1f:c7:15:b9:30:47:
         5f:e1:69:9b:36:97:e2:26:c6:59:08:40:0e:45:e9:cb:ac:80:
         6d:cd:7e:7c:24:f6:39:15:a8:a9:e7:dd:d1:d4:84:d2:51:92:
         91:84:3c:86:f3:a9:ea:4c:ee:68:a5:df:b3:a3:ae:77:a3:09:
         7b:48:20:06:bb:08:19:d3:5c:ee:fd:f9:d3:47:af:86:c9:9f:
         73:c5:29:3c:ef:9a:5f:23:2b:38:8b:20:2f:4c:11:5e:d5:6f:
         d9:66:87:c7:d1:92:06:0a:f6:7e:15:c2:c6:3a:79:9b:94:8c:
         77:99:dc:9c:ab:07:2f:cf:4e:0e:65:ec:24:cb:5e:24:83:76:
         de:94:f7:cf:0a:ad:bf:c9:f6:5e:a0:e1:7d:f8:40:e7:9c:98:
         9b:9b:2c:d1:eb:d4:71:70:9d:74:76:ce:0c:9a:34:cc:7d:cd:
         25:2d:bf:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:52:30 2026 by rpki-client