Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/323830343a373432303a633030303a3a2f33342d3334203d3e20323730393630.roa
File:                     323830343a373432303a633030303a3a2f33342d3334203d3e20323730393630.roa (raw, json)
Hash identifier:          m1B8MgSMdInTjRxXqIO10IrCOEOp4ZSE1NL95WO2DDg=
Subject key identifier:   72:15:BA:DF:57:F6:F9:4F:5C:40:BD:56:1E:FE:9B:22:D6:AC:CB:68
Certificate issuer:       /CN=869C4BCAFE918920C9C1F12D6D940F5B1B9883AC
Certificate serial:       043CE268977795B0C2434891953B07665EA4AA0F
Authority key identifier: 86:9C:4B:CA:FE:91:89:20:C9:C1:F1:2D:6D:94:0F:5B:1B:98:83:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/869C4BCAFE918920C9C1F12D6D940F5B1B9883AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/323830343a373432303a633030303a3a2f33342d3334203d3e20323730393630.roa
Signing time:             Wed 18 Feb 2026 13:39:53 +0000
ROA not before:           Wed 18 Feb 2026 13:34:53 +0000
ROA not after:            Wed 17 Feb 2027 13:39:53 +0000
asID:                     270960
IP address blocks:        2804:7420:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/869C4BCAFE918920C9C1F12D6D940F5B1B9883AC.crl
                          rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/869C4BCAFE918920C9C1F12D6D940F5B1B9883AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/869C4BCAFE918920C9C1F12D6D940F5B1B9883AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 11:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3c:e2:68:97:77:95:b0:c2:43:48:91:95:3b:07:66:5e:a4:aa:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=869C4BCAFE918920C9C1F12D6D940F5B1B9883AC
        Validity
            Not Before: Feb 18 13:34:53 2026 GMT
            Not After : Feb 17 13:39:53 2027 GMT
        Subject: CN=7215BADF57F6F94F5C40BD561EFE9B22D6ACCB68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:36:f2:0c:f5:1e:3c:d8:6f:e4:48:7d:31:33:
                    29:03:ae:c1:6e:91:89:47:57:83:e1:6c:62:32:8f:
                    0d:64:69:c0:dc:1e:bf:ca:cf:6a:d0:89:ab:8f:0c:
                    73:1d:b1:46:f5:be:52:25:a7:4f:ed:38:1e:12:4e:
                    ec:af:54:b4:67:a8:63:4d:86:42:a2:99:8e:1b:96:
                    b7:3f:39:54:12:01:82:26:8c:3b:92:5b:93:50:5c:
                    2f:49:72:0c:c6:de:cc:dc:e5:0d:73:90:d1:e3:ad:
                    d1:8f:db:a5:fc:22:8e:02:18:74:8e:65:48:54:41:
                    5a:a0:9a:69:42:1e:2b:e8:71:cc:7e:72:e3:4b:a3:
                    bd:b5:f6:94:b6:b1:6a:77:9c:91:eb:2e:96:03:0d:
                    4c:85:d2:5f:6e:77:82:14:dd:ca:0f:0a:19:86:f7:
                    f0:73:d5:e1:6f:a3:f2:3a:0c:c7:4e:a3:34:c1:23:
                    98:5c:bd:65:5e:ce:47:65:30:36:c6:9a:36:75:a4:
                    69:6f:89:0c:90:2d:c0:13:9b:48:88:6b:49:26:a8:
                    5a:ed:dd:b3:bc:95:1a:44:f4:b4:c1:25:e8:81:a2:
                    2d:d2:2d:7f:cb:b4:34:55:9a:6d:31:b3:fd:09:07:
                    80:e7:95:a5:69:af:1f:ff:c8:6e:88:bf:a8:05:1d:
                    d4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:15:BA:DF:57:F6:F9:4F:5C:40:BD:56:1E:FE:9B:22:D6:AC:CB:68
            X509v3 Authority Key Identifier:
                keyid:86:9C:4B:CA:FE:91:89:20:C9:C1:F1:2D:6D:94:0F:5B:1B:98:83:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/869C4BCAFE918920C9C1F12D6D940F5B1B9883AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/869C4BCAFE918920C9C1F12D6D940F5B1B9883AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/323830343a373432303a633030303a3a2f33342d3334203d3e20323730393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7420:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         00:65:d4:77:43:64:9a:6b:00:ed:e6:a4:6e:ff:98:1c:85:f1:
         d3:bb:7d:e9:94:d8:fb:24:87:c0:2d:f5:5d:30:02:b0:a0:8c:
         1d:4a:55:0d:9a:32:4f:35:0a:2e:88:be:1b:22:08:56:27:f0:
         83:7c:c2:74:f4:b3:c6:27:5f:b5:76:b1:83:98:4d:9d:2b:d2:
         ac:ae:98:0e:aa:2e:da:fc:90:5b:69:85:91:af:43:35:4c:01:
         76:35:f1:6b:80:2c:9a:f8:e1:81:1d:29:2c:b7:d7:4e:3f:e2:
         55:13:33:4f:0f:64:07:d2:e9:da:af:0f:87:7f:cc:73:a0:70:
         16:05:ce:11:d4:ac:08:d0:32:a6:17:d3:8d:a2:ab:33:bb:a3:
         e8:b3:0c:d9:01:73:63:dd:ac:6f:96:34:71:a6:ef:9d:3d:7d:
         48:c0:7e:0e:4b:37:df:c0:81:5b:a7:45:64:da:eb:27:84:ca:
         65:ce:7d:62:b4:0b:6c:f0:68:28:31:03:bb:45:96:2d:8d:1c:
         f3:8d:0c:ba:35:77:6f:70:5b:a7:e7:59:04:89:bc:82:97:bf:
         de:7d:f5:45:36:62:ce:cb:d3:78:55:13:fd:d0:8b:3b:14:b1:
         f1:1a:84:f2:89:84:71:11:1a:08:72:38:2d:7b:9d:19:80:d4:
         cc:d4:23:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:30:32 2026 by rpki-client