Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS265401.roa
File:                     AS265401.roa (raw, json)
Hash identifier:          kPnWBgygZB2CdL/A2lA80b0JgFFMlEyNt31bl5OLVes=
Subject key identifier:   45:09:30:BC:10:25:71:54:76:63:76:9A:F8:C9:3A:4B:D2:45:ED:C1
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       0175BAFB439DDE428FDA4D1131FD7161B43255DB
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS265401.roa
Signing time:             Thu 12 Feb 2026 13:37:16 +0000
ROA not before:           Thu 12 Feb 2026 13:32:16 +0000
ROA not after:            Thu 11 Feb 2027 13:37:16 +0000
asID:                     265401
IP address blocks:        2804:574:2006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 13:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:75:ba:fb:43:9d:de:42:8f:da:4d:11:31:fd:71:61:b4:32:55:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb 12 13:32:16 2026 GMT
            Not After : Feb 11 13:37:16 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0f:b6:7d:87:a8:6d:b2:39:28:58:ac:2e:d3:
                    e7:db:8f:44:91:c4:94:c6:2a:02:26:c9:3f:c4:62:
                    c6:eb:bc:fe:d5:a1:a5:01:35:18:a4:58:fd:d8:e7:
                    a1:0c:4e:1c:3f:c5:76:39:69:c1:ef:27:17:bb:06:
                    d4:bc:1f:b1:07:e0:b0:43:9a:6c:ea:16:2d:2f:3b:
                    5f:b1:f3:c6:87:b3:9e:c7:c5:73:90:bd:e4:03:4b:
                    e9:b7:5d:7b:24:9c:55:5f:69:ad:19:ac:c5:54:6e:
                    f5:dd:45:a0:a2:bd:52:da:f8:42:d2:bb:15:db:a1:
                    77:f0:94:fb:ba:1c:37:35:b4:ce:43:58:c8:42:0c:
                    73:aa:b7:28:0a:f1:00:d7:81:ab:d5:5e:1c:75:bd:
                    63:dd:b1:b7:ac:33:ca:c4:97:9e:1e:27:74:bd:5c:
                    57:e4:75:82:6b:77:96:f6:c7:75:f0:12:ab:c9:10:
                    ba:00:32:32:0d:d7:4a:f9:1c:4c:27:65:6a:7b:79:
                    2a:44:fe:30:56:c3:c6:6c:3c:d6:97:d5:01:95:99:
                    f9:72:e1:90:a4:c3:d7:26:1f:c4:9e:46:50:01:7c:
                    0a:82:04:72:87:11:b6:eb:0a:d3:c8:17:77:d5:1e:
                    89:80:44:74:8c:67:72:1c:f6:df:ef:f3:d5:09:80:
                    83:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:09:30:BC:10:25:71:54:76:63:76:9A:F8:C9:3A:4B:D2:45:ED:C1
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS265401.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:574:2006::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:18:99:77:85:ac:2f:5b:30:a7:40:24:58:7a:03:be:21:0d:
         96:bf:6c:e8:92:0b:69:80:1c:35:ed:2d:cf:65:d6:2e:6b:9b:
         2f:ed:98:89:84:49:30:90:ba:f7:35:cd:73:3b:b1:b4:b3:2e:
         15:18:46:ae:46:31:b7:57:81:03:8d:59:e9:56:3b:4e:8e:46:
         f8:f9:67:13:fc:8c:d2:8a:62:9b:73:e2:5e:6d:f9:60:dd:4f:
         ed:8a:44:05:22:57:39:c9:1e:24:6e:b2:6d:7d:13:a9:12:1d:
         01:7e:42:96:b9:a4:7a:13:0b:3c:da:0f:28:0e:2c:0a:b1:f6:
         3d:35:43:2b:3e:e1:4d:2b:c0:11:ec:41:a2:6e:5b:b5:0e:34:
         70:34:f9:08:d6:17:a9:d8:9d:0e:44:22:ed:a2:67:0d:36:44:
         1b:5f:db:eb:09:03:33:63:ca:63:a1:99:e3:fe:00:ef:bc:ab:
         a7:61:c4:32:9a:c3:fc:d1:49:c6:5a:1a:24:b1:32:31:14:3b:
         a3:1f:06:0d:5b:01:e5:4e:33:43:5f:65:31:82:e5:14:fa:65:
         e6:3e:52:6d:10:d5:b3:80:e5:c5:ac:87:0e:a9:a8:2d:a0:82:
         e7:3f:29:cc:ae:a5:4c:c7:03:fa:1f:56:b3:b5:5e:05:b2:df:
         85:2d:e9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:13:43 2026 by rpki-client