Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HPktu2Dk7o8VanZ9fZ9p1f2dBa5DCHwa2EhiJBMjPJe2/0/323830343a326433383a3a2f33322d3438203d3e20323635323637.roa
File:                     323830343a326433383a3a2f33322d3438203d3e20323635323637.roa (raw, json)
Hash identifier:          m5O/DDGHts0BLn4PKXj8CLtYomcL224DZtGPXTrmS80=
Subject key identifier:   55:33:92:4B:D3:52:89:00:91:B2:60:6B:7E:CD:6E:8E:2B:2E:E5:F7
Certificate issuer:       /CN=A5C5A74B5F08CE669F802C22BA768A868B290A72
Certificate serial:       4EDFAD54379C5EFAED383A53AC2B04FCBB38CDD3
Authority key identifier: A5:C5:A7:4B:5F:08:CE:66:9F:80:2C:22:BA:76:8A:86:8B:29:0A:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5C5A74B5F08CE669F802C22BA768A868B290A72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HPktu2Dk7o8VanZ9fZ9p1f2dBa5DCHwa2EhiJBMjPJe2/0/323830343a326433383a3a2f33322d3438203d3e20323635323637.roa
Signing time:             Thu 19 Feb 2026 17:06:47 +0000
ROA not before:           Thu 19 Feb 2026 17:01:47 +0000
ROA not after:            Thu 18 Feb 2027 17:06:47 +0000
asID:                     265267
IP address blocks:        2804:2d38::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HPktu2Dk7o8VanZ9fZ9p1f2dBa5DCHwa2EhiJBMjPJe2/0/A5C5A74B5F08CE669F802C22BA768A868B290A72.crl
                          rsync://rpki-repo.registro.br/repo/HPktu2Dk7o8VanZ9fZ9p1f2dBa5DCHwa2EhiJBMjPJe2/0/A5C5A74B5F08CE669F802C22BA768A868B290A72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5C5A74B5F08CE669F802C22BA768A868B290A72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 17:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:df:ad:54:37:9c:5e:fa:ed:38:3a:53:ac:2b:04:fc:bb:38:cd:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C5A74B5F08CE669F802C22BA768A868B290A72
        Validity
            Not Before: Feb 19 17:01:47 2026 GMT
            Not After : Feb 18 17:06:47 2027 GMT
        Subject: CN=5533924BD352890091B2606B7ECD6E8E2B2EE5F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:af:3e:21:f8:ca:06:23:48:8a:e7:d9:ec:ae:
                    66:99:a2:fa:65:36:d7:00:42:c3:4c:8b:8b:99:c2:
                    18:d8:13:6d:87:73:a5:ef:0d:53:ed:8f:46:a7:ef:
                    16:8c:ba:6a:f0:99:de:92:51:4e:9d:a6:0c:33:ed:
                    48:60:05:67:89:0b:3e:de:0a:41:65:ac:f7:96:67:
                    6e:1c:50:cf:52:e1:7d:87:52:da:ae:9c:20:c2:72:
                    9f:6b:13:de:8a:2e:ed:79:c2:e5:5b:f6:6c:aa:63:
                    61:ad:5d:14:3a:f6:1b:51:1e:c1:0a:8f:3e:dd:1a:
                    bc:10:c0:19:39:4b:62:75:f1:50:de:97:b0:de:4d:
                    52:84:e1:43:95:24:92:a4:47:8f:cb:3a:80:07:64:
                    0f:08:7a:ec:e5:bb:34:53:5b:4a:00:f4:1a:b6:ec:
                    1a:d8:fa:0c:e6:f5:b4:d1:f1:52:48:7d:7a:fc:a8:
                    7a:2f:c0:6c:32:a1:b1:a0:25:9c:10:05:22:bf:3f:
                    ba:71:dd:5d:b9:00:49:7e:fc:cc:84:f7:c0:46:e3:
                    1f:65:e4:cd:e9:9b:5e:61:e0:bc:54:df:a5:b1:c2:
                    3b:72:c2:fc:88:98:4d:0d:70:d4:f1:3b:43:46:1c:
                    af:e7:85:5a:10:43:b5:21:02:0d:95:cd:9b:0d:46:
                    fb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:33:92:4B:D3:52:89:00:91:B2:60:6B:7E:CD:6E:8E:2B:2E:E5:F7
            X509v3 Authority Key Identifier:
                keyid:A5:C5:A7:4B:5F:08:CE:66:9F:80:2C:22:BA:76:8A:86:8B:29:0A:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HPktu2Dk7o8VanZ9fZ9p1f2dBa5DCHwa2EhiJBMjPJe2/0/A5C5A74B5F08CE669F802C22BA768A868B290A72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5C5A74B5F08CE669F802C22BA768A868B290A72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HPktu2Dk7o8VanZ9fZ9p1f2dBa5DCHwa2EhiJBMjPJe2/0/323830343a326433383a3a2f33322d3438203d3e20323635323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d38::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:93:ef:5a:52:0d:93:5f:65:b1:5c:76:0e:6f:6c:39:ff:2a:
         08:3f:42:d5:76:29:4a:ab:ee:d5:18:38:99:cb:b5:41:c8:7d:
         eb:f9:09:ff:7c:e2:c6:8e:2d:6a:93:25:52:6a:95:2f:e3:4d:
         fb:7a:a7:d8:87:e2:12:34:3e:81:96:4e:9e:99:4f:95:20:a6:
         62:75:fb:ce:29:18:84:62:d7:fe:6a:38:08:ee:67:1d:97:55:
         28:4d:7f:fd:d9:98:f9:a8:62:1b:ce:54:21:bc:c9:4f:8e:87:
         ac:7b:6a:e1:ac:bd:b6:eb:1d:be:b6:ee:87:82:e9:a5:4f:0f:
         d2:e7:2a:b3:f2:9e:4e:8f:7f:49:2f:11:ac:86:2c:8f:65:dc:
         20:a4:b3:a0:c7:2e:e5:f5:4e:3b:d6:3f:bc:68:21:ad:ca:ec:
         b4:bc:4e:64:c9:9f:09:0a:2f:87:e3:95:a5:62:1c:fd:5f:20:
         17:fa:7c:f5:fd:80:33:21:41:9c:4d:39:81:00:ae:6e:af:78:
         5c:99:b5:a9:f4:1c:59:e6:52:b0:95:af:a6:02:0f:25:0e:a3:
         9e:41:3a:f5:9d:a0:8a:b1:ba:44:e6:2f:d1:32:fe:30:43:0a:
         5d:40:89:1a:52:70:bc:59:f1:0a:6f:bd:ab:73:13:79:fe:bc:
         fb:9f:8d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 06:42:48 2026 by rpki-client