Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/323830343a313638303a383030303a3a2f33342d3334203d3e20323633323839.roa
File:                     323830343a313638303a383030303a3a2f33342d3334203d3e20323633323839.roa (raw, json)
Hash identifier:          Fe4bERd/AXZMRSPYc4+bklTHqSKM25ALDg/ED1Y0zm0=
Subject key identifier:   36:60:F9:72:9A:60:36:4F:FE:AA:03:FB:DF:70:C7:63:A0:2C:25:62
Certificate issuer:       /CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
Certificate serial:       3C45B197E7A2EB2E72AD5AEDD5C7A913AFF30BCD
Authority key identifier: 15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/323830343a313638303a383030303a3a2f33342d3334203d3e20323633323839.roa
Signing time:             Thu 05 Feb 2026 11:04:20 +0000
ROA not before:           Thu 05 Feb 2026 10:59:20 +0000
ROA not after:            Thu 04 Feb 2027 11:04:20 +0000
asID:                     263289
IP address blocks:        2804:1680:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl
                          rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 09:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:45:b1:97:e7:a2:eb:2e:72:ad:5a:ed:d5:c7:a9:13:af:f3:0b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
        Validity
            Not Before: Feb  5 10:59:20 2026 GMT
            Not After : Feb  4 11:04:20 2027 GMT
        Subject: CN=3660F9729A60364FFEAA03FBDF70C763A02C2562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5a:77:64:39:d9:db:3d:31:63:eb:f8:d2:a1:
                    3b:94:8c:74:bb:ff:95:45:44:e4:3f:38:1c:d0:05:
                    e6:fe:c4:e0:cf:ec:da:e2:da:28:78:f2:39:eb:f7:
                    c1:ab:02:db:36:00:b7:01:66:1c:f4:21:6f:df:25:
                    0d:3d:59:1c:dd:fe:f3:74:c7:0c:bd:21:de:55:34:
                    86:2e:93:91:3f:cb:9f:b1:54:2c:b6:73:59:f7:2e:
                    fb:7a:c8:50:29:56:b7:f2:51:a3:ea:52:d1:56:b0:
                    05:aa:08:8f:99:2e:24:a8:de:7c:2f:a9:31:38:0b:
                    7a:39:1b:50:6c:56:0a:78:a2:fe:c2:61:69:4f:db:
                    37:72:57:9b:c8:05:04:44:80:f0:c4:5b:7f:c3:d0:
                    9d:cc:38:91:62:16:3b:4b:a6:14:aa:34:4b:e2:9f:
                    31:a3:fa:05:c3:88:f1:70:48:76:39:f3:e3:c2:00:
                    a5:f4:80:53:8d:7f:a6:79:93:e6:19:4e:97:32:0e:
                    9e:65:32:20:e4:73:27:19:e0:97:0f:30:d0:1a:29:
                    8e:10:4d:a6:1c:79:01:6c:69:fe:93:ec:9b:c2:b3:
                    27:c2:a8:91:c6:82:e0:d8:0a:40:30:cd:92:b7:71:
                    68:38:e0:84:97:b7:2e:83:85:7d:f7:b5:5b:d1:04:
                    31:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:60:F9:72:9A:60:36:4F:FE:AA:03:FB:DF:70:C7:63:A0:2C:25:62
            X509v3 Authority Key Identifier:
                keyid:15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/323830343a313638303a383030303a3a2f33342d3334203d3e20323633323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1680:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         31:98:2a:50:92:79:1a:36:c6:b1:30:b6:d5:0c:b8:26:9f:bd:
         22:31:c6:6d:6c:bf:46:2e:85:bf:3e:10:8c:07:d9:51:cf:03:
         93:1d:d6:4e:ba:1a:32:ce:d8:19:62:6c:39:13:b3:60:9b:eb:
         19:b1:1c:f0:b8:4a:69:46:51:99:82:af:71:60:14:02:2d:54:
         35:e9:49:b2:ac:e8:02:39:d7:e3:45:53:55:aa:24:a2:ce:be:
         d5:43:6d:ab:f7:db:b9:d6:ec:92:94:96:6c:14:19:16:70:58:
         95:8c:e1:5f:e7:cc:7b:69:e8:aa:64:02:b1:d9:a4:24:ae:db:
         69:d8:70:99:a6:30:8a:b9:8b:6f:14:a0:52:16:8a:ba:bb:ce:
         bd:7b:a2:7e:8e:e7:f4:f1:8b:06:5c:93:7c:d5:4d:22:81:2e:
         c9:3a:d6:d4:bf:90:e4:d3:7f:7e:c2:7d:d1:71:8a:28:c3:68:
         79:77:a1:7d:41:ae:66:ca:35:87:cc:81:75:03:c4:62:58:2c:
         35:ef:66:d8:16:fd:c4:5b:2e:07:16:19:91:0e:48:55:66:c6:
         fb:9f:3f:fb:ef:01:83:a9:59:59:97:b5:87:02:f7:8a:ee:35:
         d9:99:75:52:7a:3f:6e:64:44:ad:76:2c:87:45:9d:1b:cf:e1:
         e3:3c:c6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:48 2026 by rpki-client