Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31333a3a2f34382d3438203d3e203631383838.roa
File:                     323830343a6536303a31333a3a2f34382d3438203d3e203631383838.roa (raw, json)
Hash identifier:          Oe/mWqYmCPj9XNx1yXVk5DYp2C+4llCh9cWnkz0xYXE=
Subject key identifier:   D7:4D:2B:2A:56:8B:36:55:97:62:07:8F:63:2E:51:01:9F:C7:8F:52
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       0D4F51CDBEC4737A8024CA2BBAFEE643972E3A02
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31333a3a2f34382d3438203d3e203631383838.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     61888
IP address blocks:        2804:e60:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
                          rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4f:51:cd:be:c4:73:7a:80:24:ca:2b:ba:fe:e6:43:97:2e:3a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject: CN=D74D2B2A568B36559762078F632E51019FC78F52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:93:39:d5:c1:88:eb:b9:34:4b:d2:cf:72:86:
                    7b:af:9f:2a:ac:34:44:13:68:ac:17:34:54:ce:2a:
                    b2:66:51:f7:77:ac:84:9c:b2:be:ee:1e:fc:e1:06:
                    87:89:07:d7:cb:6d:10:89:8c:b8:d6:0d:aa:b9:03:
                    4f:bc:6c:f0:55:0b:8a:c3:27:76:99:14:9c:9a:9d:
                    94:fb:a6:fd:80:eb:bc:f1:3c:6f:5a:00:9e:23:7b:
                    fb:c2:a8:c2:e3:0a:61:d3:3b:bd:78:12:89:87:a4:
                    d0:67:5b:7c:ed:30:37:fc:a6:9e:72:e7:98:80:a3:
                    b7:b6:a8:23:1c:c6:8c:b3:11:b5:94:26:05:31:5e:
                    b7:46:8f:40:5d:f1:1d:f5:d1:06:e1:86:18:b5:bd:
                    76:e8:e4:47:93:70:b9:13:6a:32:d4:00:25:c8:49:
                    53:16:2d:fa:b8:8a:03:a2:d2:c8:8d:33:b4:58:6a:
                    9a:ba:7a:ed:5c:a2:70:72:9b:a3:56:66:84:42:8b:
                    a2:f6:2f:7f:e0:57:2b:09:c3:34:ec:a6:eb:b9:22:
                    ce:0e:2c:99:b2:33:49:1c:3f:ea:38:53:43:a6:84:
                    a0:ff:1a:f0:ea:be:ba:73:de:8e:ca:22:23:b2:13:
                    77:dd:fb:c8:21:ec:ee:4b:8c:77:67:fa:2a:bf:89:
                    ea:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4D:2B:2A:56:8B:36:55:97:62:07:8F:63:2E:51:01:9F:C7:8F:52
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31333a3a2f34382d3438203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         d7:19:21:34:2e:e8:dc:a7:6c:16:d3:de:da:49:a2:0f:04:ef:
         db:9d:c7:6b:80:18:26:b7:9b:5a:64:df:f4:77:21:ef:a8:37:
         41:22:bc:25:02:8a:9b:d0:3f:6e:1b:1e:55:34:bc:fc:be:4c:
         96:39:b1:53:4e:bf:c7:8c:58:3e:cf:9f:6d:fc:8a:aa:89:5f:
         14:d7:49:e1:8b:1f:4f:2f:e5:5c:ee:95:f8:ac:23:0a:1f:6e:
         ca:9e:9e:47:c9:07:27:4c:a0:5f:d6:f2:b0:a9:ff:c7:6c:36:
         3c:9e:87:78:1f:5c:be:b0:b0:d9:63:ba:a2:cc:12:a6:fa:c1:
         33:00:af:d7:e8:44:95:e6:62:87:eb:1d:08:7c:52:d5:55:a9:
         8f:00:13:c8:2a:30:5f:51:e1:0c:4f:59:bf:7d:cb:76:36:2f:
         77:47:df:d0:bc:06:10:0c:dc:be:26:b7:73:f0:aa:9f:39:db:
         17:cf:73:1f:b6:21:6a:d4:59:66:fd:e2:15:93:79:b8:a9:e5:
         01:ee:77:f7:03:40:9f:8d:93:20:58:20:e5:de:cd:3b:d5:3c:
         c5:ba:71:8d:a6:59:60:ed:ac:e8:c2:91:57:cf:50:9a:45:a4:
         a3:d7:25:32:4b:61:07:b1:e6:3b:fb:02:35:35:80:2b:5e:fc:
         2c:2e:74:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:01:59 2026 by rpki-client