Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/323830343a356466383a3a2f33322d313238203d3e20323639303034.roa
File:                     323830343a356466383a3a2f33322d313238203d3e20323639303034.roa (raw, json)
Hash identifier:          RjgfrLyf+pgTVe83x6i5F0/niW+OcWQjOWohOtpJGf0=
Subject key identifier:   7F:88:57:CB:02:6E:DA:E2:80:28:B3:65:2D:90:9A:4C:59:2A:6D:FB
Certificate issuer:       /CN=B5EEB596E7AF02EFB172E48B357B396D9792EB2A
Certificate serial:       15A1D98D4562D410E9FED05848BB602F086D43DB
Authority key identifier: B5:EE:B5:96:E7:AF:02:EF:B1:72:E4:8B:35:7B:39:6D:97:92:EB:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5EEB596E7AF02EFB172E48B357B396D9792EB2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/323830343a356466383a3a2f33322d313238203d3e20323639303034.roa
Signing time:             Fri 02 Jan 2026 18:29:37 +0000
ROA not before:           Fri 02 Jan 2026 18:24:37 +0000
ROA not after:            Fri 01 Jan 2027 18:29:37 +0000
asID:                     269004
IP address blocks:        2804:5df8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/B5EEB596E7AF02EFB172E48B357B396D9792EB2A.crl
                          rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/B5EEB596E7AF02EFB172E48B357B396D9792EB2A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5EEB596E7AF02EFB172E48B357B396D9792EB2A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:56:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a1:d9:8d:45:62:d4:10:e9:fe:d0:58:48:bb:60:2f:08:6d:43:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EEB596E7AF02EFB172E48B357B396D9792EB2A
        Validity
            Not Before: Jan  2 18:24:37 2026 GMT
            Not After : Jan  1 18:29:37 2027 GMT
        Subject: CN=7F8857CB026EDAE28028B3652D909A4C592A6DFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3d:a7:0f:41:f4:fd:15:03:70:de:93:3d:5c:
                    af:5d:f6:18:72:fc:ef:c2:0a:1e:13:87:89:92:2d:
                    07:d3:f5:ae:4a:ad:71:27:18:c7:8a:a0:a8:ed:0c:
                    34:37:07:0b:59:1d:86:a6:b5:fa:72:7b:d2:e6:77:
                    f8:7c:fb:51:14:c3:5f:51:22:40:0b:f3:b5:d9:1a:
                    7f:19:55:a3:73:15:83:10:89:b6:f3:b6:97:ef:16:
                    ce:d9:90:89:d9:81:71:cb:1d:7c:9c:d0:b6:8d:71:
                    9c:3b:d6:ae:8b:5e:d4:aa:77:47:df:f7:e4:df:dc:
                    e5:7d:79:b5:f5:0c:21:d6:bd:01:5f:30:3b:21:2a:
                    25:77:0c:be:34:72:92:ee:02:d8:e1:3a:d2:dc:53:
                    14:e7:07:68:de:ee:11:53:aa:3e:ff:01:36:09:4a:
                    4e:19:43:1c:44:57:82:78:73:9c:12:8b:7b:8b:ad:
                    36:fe:6d:9b:bf:65:69:bc:f2:b9:18:02:fe:9f:b1:
                    79:24:39:a6:2b:b4:cb:3e:c1:25:c6:71:8c:9a:51:
                    0b:de:85:d8:c8:08:29:cb:97:4c:96:79:f1:1b:66:
                    af:6d:a0:a8:25:42:85:c4:79:32:8c:3b:5e:4f:5b:
                    cf:0e:80:67:8b:de:d4:e3:23:63:4c:c2:79:19:93:
                    48:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:88:57:CB:02:6E:DA:E2:80:28:B3:65:2D:90:9A:4C:59:2A:6D:FB
            X509v3 Authority Key Identifier:
                keyid:B5:EE:B5:96:E7:AF:02:EF:B1:72:E4:8B:35:7B:39:6D:97:92:EB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/B5EEB596E7AF02EFB172E48B357B396D9792EB2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5EEB596E7AF02EFB172E48B357B396D9792EB2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/323830343a356466383a3a2f33322d313238203d3e20323639303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5df8::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:12:51:1d:8f:7c:ff:ca:b6:ec:d2:b2:b2:12:c3:fe:c6:c2:
         26:83:43:39:c2:23:54:d5:2b:5d:90:1f:1c:48:2a:0d:0f:7b:
         37:0f:49:b8:18:d9:0c:39:48:18:8d:84:17:ca:78:18:df:28:
         ed:fc:ed:d5:c0:8c:60:c5:0a:3d:21:cd:3b:35:b5:75:0b:66:
         a3:7e:9f:98:0c:4b:e5:66:2d:f5:21:fe:4e:07:5c:5d:46:32:
         4f:23:1d:d5:87:36:c0:84:38:a5:fe:55:fe:7b:b1:8e:40:08:
         8a:24:32:c4:ee:df:7e:0a:94:28:60:19:a0:bf:da:66:ab:0c:
         99:49:21:ac:73:d8:a5:d0:84:95:5a:ad:7b:69:b9:21:0e:a3:
         56:c8:a0:55:b3:f3:b7:3a:83:f6:53:ba:df:e1:53:0d:c8:bd:
         64:68:0c:53:e3:da:94:88:c6:d6:2c:cd:5f:57:c3:8d:75:53:
         90:4e:25:f0:85:78:74:f3:20:dd:7a:84:ec:ea:71:1e:26:8e:
         15:0a:21:f2:db:a9:d3:6b:fd:4a:81:36:c8:61:2d:c4:06:57:
         53:b5:33:c9:9e:a9:64:4c:f1:8b:04:69:bd:a1:5e:58:4e:ec:
         ae:79:d5:a2:ac:7f:77:24:d1:ef:2b:20:7d:50:69:f1:e1:23:
         a2:21:d8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:45:07 2026 by rpki-client