Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/323830343a353932633a3a2f33332d3333203d3e20323638313733.roa
File:                     323830343a353932633a3a2f33332d3333203d3e20323638313733.roa (raw, json)
Hash identifier:          fF/zjSg62zuXaZNU821QhoFAa++PUsB/DlcE4gQfIeM=
Subject key identifier:   F3:4F:05:00:F5:BA:9A:86:BD:62:80:45:48:3B:D4:F2:D0:CE:6A:37
Certificate issuer:       /CN=99A78712ED297A370E4987A326F3177259C4BC40
Certificate serial:       128F93831A6454AB3101DCD45A09613E4F87AEB8
Authority key identifier: 99:A7:87:12:ED:29:7A:37:0E:49:87:A3:26:F3:17:72:59:C4:BC:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A78712ED297A370E4987A326F3177259C4BC40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/323830343a353932633a3a2f33332d3333203d3e20323638313733.roa
Signing time:             Wed 04 Feb 2026 20:00:16 +0000
ROA not before:           Wed 04 Feb 2026 19:55:16 +0000
ROA not after:            Wed 03 Feb 2027 20:00:16 +0000
asID:                     268173
IP address blocks:        2804:592c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/99A78712ED297A370E4987A326F3177259C4BC40.crl
                          rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/99A78712ED297A370E4987A326F3177259C4BC40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A78712ED297A370E4987A326F3177259C4BC40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 17:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8f:93:83:1a:64:54:ab:31:01:dc:d4:5a:09:61:3e:4f:87:ae:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A78712ED297A370E4987A326F3177259C4BC40
        Validity
            Not Before: Feb  4 19:55:16 2026 GMT
            Not After : Feb  3 20:00:16 2027 GMT
        Subject: CN=F34F0500F5BA9A86BD628045483BD4F2D0CE6A37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:87:9d:75:2d:b2:9a:81:a6:6e:0e:fb:b0:fd:
                    2c:6e:b5:ad:1a:b8:53:a6:b7:bb:7d:d1:8b:60:df:
                    e1:38:99:05:92:e9:94:7b:89:29:20:17:98:6d:18:
                    27:3a:0e:59:9d:15:ba:79:b3:11:af:4b:9d:a8:ef:
                    79:de:29:d7:d0:de:b8:b3:74:1e:24:73:c2:2c:86:
                    30:06:6e:79:85:98:4d:5d:27:9f:f8:64:a1:e9:ea:
                    d8:ea:cc:a4:58:02:96:2f:fc:f1:0c:29:d8:ce:14:
                    2b:58:ca:b0:cb:0f:ad:b1:24:b0:fb:b5:dd:03:eb:
                    bc:c9:82:e4:30:a6:15:18:c9:15:26:ed:0e:03:08:
                    2d:3c:5e:08:9d:9c:8e:1b:ec:b5:c2:d9:ef:55:41:
                    0c:d9:8f:cf:ae:7f:15:c3:64:b6:99:d7:85:c8:f4:
                    a8:11:1c:7e:b8:22:00:00:1f:90:b0:46:bc:68:0b:
                    7d:2d:66:57:b1:e6:fc:2a:f5:81:9c:27:ec:21:a6:
                    ba:70:1b:72:d2:49:bf:b2:a8:de:a6:2c:20:9d:4e:
                    61:69:f8:4f:2d:17:79:34:7f:a1:03:58:b9:01:4c:
                    c7:ec:c7:af:a7:fc:64:92:35:dc:fc:3d:00:67:97:
                    24:78:f6:36:e8:79:ae:39:21:21:31:39:68:a0:8e:
                    40:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4F:05:00:F5:BA:9A:86:BD:62:80:45:48:3B:D4:F2:D0:CE:6A:37
            X509v3 Authority Key Identifier:
                keyid:99:A7:87:12:ED:29:7A:37:0E:49:87:A3:26:F3:17:72:59:C4:BC:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/99A78712ED297A370E4987A326F3177259C4BC40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A78712ED297A370E4987A326F3177259C4BC40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/323830343a353932633a3a2f33332d3333203d3e20323638313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:592c::/33

    Signature Algorithm: sha256WithRSAEncryption
         88:c8:25:fa:9b:aa:9f:86:2f:f2:27:57:1e:f2:05:57:3b:93:
         df:9b:58:f6:1b:58:cb:5e:da:d2:ce:a7:5f:c3:4c:40:2b:b5:
         2c:8c:32:e9:c9:90:9f:e8:28:6c:56:90:65:78:95:82:4a:d7:
         dd:a3:1d:9e:1a:25:bf:da:41:08:d0:31:8b:31:14:50:31:9d:
         9c:a8:80:29:67:51:e5:a6:69:92:00:80:4f:c3:62:a6:a7:75:
         68:ca:cc:f4:f8:f2:5c:cd:6a:4e:02:f8:2e:a3:93:3b:c5:42:
         cf:49:8c:e8:fd:a7:d0:53:b9:17:e3:c0:48:83:95:58:87:6e:
         1e:72:83:6f:46:14:ad:ac:8b:fd:67:4e:f6:c0:7f:43:5c:5e:
         28:59:4d:fb:a8:ce:96:b3:1b:8e:c4:a2:11:38:c8:31:92:19:
         6f:0e:85:73:28:7f:39:59:14:36:ed:3c:be:c3:a8:4e:e2:89:
         9c:96:95:d5:bc:52:5e:cf:52:d3:4c:3e:2e:85:ee:e4:50:bf:
         72:39:6c:2a:24:8f:46:98:bf:d5:b5:95:d1:b9:aa:6d:56:43:
         b3:39:27:af:67:0f:a3:73:66:74:3c:06:9c:33:99:04:73:8a:
         65:b0:47:d1:fc:2f:a4:5b:5a:9e:9f:68:24:53:68:18:72:15:
         c7:99:86:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:42:03 2026 by rpki-client