Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/323830343a326263343a3a2f33322d313238203d3e20323635313734.roa
File:                     323830343a326263343a3a2f33322d313238203d3e20323635313734.roa (raw, json)
Hash identifier:          eEL9AoxSMdm7lTeAGzZNUKeJFxnyUUBDhVybmeKBV/E=
Subject key identifier:   66:85:4C:A9:59:75:69:7A:FD:2B:AA:B1:7D:4F:9C:02:DF:15:8B:86
Certificate issuer:       /CN=51A41F1275FF94CC496816F994B49E1F6B638B92
Certificate serial:       2837A2EA8637DA0A4053C11A0D01AB078092F264
Authority key identifier: 51:A4:1F:12:75:FF:94:CC:49:68:16:F9:94:B4:9E:1F:6B:63:8B:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51A41F1275FF94CC496816F994B49E1F6B638B92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/323830343a326263343a3a2f33322d313238203d3e20323635313734.roa
Signing time:             Wed 31 Dec 2025 21:10:16 +0000
ROA not before:           Wed 31 Dec 2025 21:05:16 +0000
ROA not after:            Wed 30 Dec 2026 21:10:16 +0000
asID:                     265174
IP address blocks:        2804:2bc4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/51A41F1275FF94CC496816F994B49E1F6B638B92.crl
                          rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/51A41F1275FF94CC496816F994B49E1F6B638B92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51A41F1275FF94CC496816F994B49E1F6B638B92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 03:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:37:a2:ea:86:37:da:0a:40:53:c1:1a:0d:01:ab:07:80:92:f2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A41F1275FF94CC496816F994B49E1F6B638B92
        Validity
            Not Before: Dec 31 21:05:16 2025 GMT
            Not After : Dec 30 21:10:16 2026 GMT
        Subject: CN=66854CA95975697AFD2BAAB17D4F9C02DF158B86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:76:e4:02:29:5d:1d:d6:08:eb:0e:51:f7:f2:
                    93:84:87:58:a7:cd:a3:fd:79:fa:aa:eb:37:71:34:
                    78:84:b0:f3:5b:19:68:60:01:a3:fe:80:bd:69:51:
                    d9:6d:f8:33:d3:dc:c9:ef:c5:47:4d:13:b6:be:f3:
                    2e:2f:2f:78:e4:6f:3c:c8:13:78:6f:e2:33:03:a0:
                    93:2a:ea:d1:97:e2:e2:e2:97:7c:d4:9b:46:a9:f6:
                    d8:76:1b:7e:27:50:6d:2a:ad:8e:cb:5b:01:46:6c:
                    2f:4d:35:30:c8:e6:08:5d:07:cd:b8:33:0b:e0:80:
                    f5:9f:73:64:cb:d3:95:fc:7a:c6:19:aa:43:0f:a7:
                    4f:81:b7:22:c5:d3:d9:b3:41:23:c8:b1:7e:29:05:
                    99:8f:3c:05:e2:80:c8:58:9f:3e:ab:e9:75:ea:32:
                    49:52:f0:84:f8:90:e7:8e:ea:9b:5a:9f:b2:01:24:
                    71:b8:28:db:58:8d:c5:59:21:06:0e:c4:44:f5:3f:
                    86:28:53:56:98:56:ac:c1:00:ab:0a:02:50:0e:b5:
                    d4:cf:fc:d0:64:8a:7a:a3:1e:5e:92:fb:87:43:4e:
                    ab:ca:39:0a:24:a6:08:7f:ed:a7:16:f8:63:5c:89:
                    a3:21:78:96:ce:e2:0d:3e:29:38:ce:79:34:ae:7f:
                    43:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:85:4C:A9:59:75:69:7A:FD:2B:AA:B1:7D:4F:9C:02:DF:15:8B:86
            X509v3 Authority Key Identifier:
                keyid:51:A4:1F:12:75:FF:94:CC:49:68:16:F9:94:B4:9E:1F:6B:63:8B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/51A41F1275FF94CC496816F994B49E1F6B638B92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51A41F1275FF94CC496816F994B49E1F6B638B92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/323830343a326263343a3a2f33322d313238203d3e20323635313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:59:6c:41:86:89:ae:20:2d:46:b8:36:b6:1e:53:b5:88:d2:
         99:0e:85:32:b9:4c:0e:f8:45:bf:fc:0c:31:87:cb:69:17:7e:
         64:38:45:85:e1:00:df:35:b2:dc:bd:58:ef:f4:32:3c:eb:19:
         aa:e8:fc:00:1b:15:aa:4f:20:9f:1d:e1:f2:ad:5b:68:3e:0d:
         5e:e7:91:b0:c0:49:9d:08:4a:20:62:ee:cb:94:b5:4f:b9:3a:
         73:15:ae:d4:ff:2d:f4:a0:0b:67:11:65:14:27:78:be:01:9b:
         99:ff:f6:c4:42:ec:6b:34:60:59:b5:a7:72:32:2a:82:94:b2:
         bf:7d:ad:0a:16:03:a9:c2:ff:05:f8:d4:07:a6:23:a1:20:26:
         52:34:b5:c2:b3:f3:e7:83:5b:ba:78:dd:d9:3f:44:ac:75:95:
         b0:80:48:db:52:1d:b7:3f:b5:51:46:9d:f7:22:1a:fc:1e:7f:
         90:4e:04:ff:b9:9c:e1:cb:07:0c:a9:66:f3:f8:91:dc:c9:70:
         06:37:d5:09:a4:c0:02:a2:ae:d6:37:3f:59:0e:53:14:2f:9a:
         29:fe:0b:e7:e1:a2:f1:4c:e0:f2:a1:d3:2f:c2:2b:e7:bb:69:
         d6:73:64:b9:72:ef:14:76:14:02:32:1e:bd:12:f8:40:08:4d:
         d7:37:33:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 06:59:26 2026 by rpki-client