Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31613a3a2f34382d3438203d3e203631383838.roa
File:                     323830343a6536303a31613a3a2f34382d3438203d3e203631383838.roa (raw, json)
Hash identifier:          l0gcVsqmkTTdEtZg0OVx3xKJjv7Hj1JAqV/BGQucRwo=
Subject key identifier:   3C:C4:1D:FD:EE:18:67:CC:94:3C:6C:ED:0E:77:0C:2D:4C:DD:23:81
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       659632F6FF71C502A80DD132D626F54ABBEBF7
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31613a3a2f34382d3438203d3e203631383838.roa
Signing time:             Tue 27 Jan 2026 15:27:32 +0000
ROA not before:           Tue 27 Jan 2026 15:22:32 +0000
ROA not after:            Tue 26 Jan 2027 15:27:32 +0000
asID:                     61888
IP address blocks:        2804:e60:1a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
                          rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:96:32:f6:ff:71:c5:02:a8:0d:d1:32:d6:26:f5:4a:bb:eb:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Jan 27 15:22:32 2026 GMT
            Not After : Jan 26 15:27:32 2027 GMT
        Subject: CN=3CC41DFDEE1867CC943C6CED0E770C2D4CDD2381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6b:cd:3f:f4:6c:75:eb:36:57:31:2c:45:2e:
                    1f:10:e4:37:7e:08:81:e4:01:12:99:01:90:ba:48:
                    ef:4a:09:dd:c3:49:28:77:06:af:95:af:17:e2:da:
                    ce:c8:96:39:e4:59:91:d0:54:2a:99:67:b0:38:45:
                    8e:81:15:12:b1:31:78:48:49:ef:67:aa:7f:52:85:
                    6f:06:62:8d:76:44:34:9d:9e:64:b0:03:50:91:72:
                    3a:42:48:15:8f:8e:5e:4d:e6:9e:01:d2:54:ed:71:
                    d1:d0:cb:33:91:33:84:bc:d0:79:eb:cf:59:39:44:
                    5a:d9:a1:a1:93:aa:d9:89:bf:e2:7e:b1:2e:f1:db:
                    1c:b6:ac:6a:0c:52:74:55:9d:e4:bd:10:9d:45:45:
                    99:b4:4d:d9:9c:33:72:dd:b3:33:2a:27:43:55:a2:
                    b0:19:1c:6a:64:10:a0:a8:b8:4e:f9:24:6b:15:91:
                    de:a9:82:8c:3e:69:9a:14:07:9f:eb:32:5b:92:d0:
                    28:be:88:ef:7b:fe:47:a7:b3:6f:b1:52:09:f4:46:
                    e1:bc:4e:8f:f3:70:7f:64:3d:c7:ed:3c:de:23:c3:
                    5b:ce:80:4b:43:c3:69:96:b1:3c:44:d3:11:dd:dc:
                    c2:fb:29:2d:fe:55:0c:a6:c6:fe:0e:eb:14:2f:78:
                    21:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C4:1D:FD:EE:18:67:CC:94:3C:6C:ED:0E:77:0C:2D:4C:DD:23:81
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31613a3a2f34382d3438203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:1a::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:13:26:58:f5:3e:21:f9:ed:d2:7d:96:1e:56:8d:64:fe:41:
         93:e6:eb:ac:36:05:65:7c:c3:48:4e:bf:43:4e:0a:6d:00:8d:
         86:f3:67:9c:c9:b1:da:b6:3a:36:0a:90:72:18:af:12:99:ed:
         3c:30:b6:4b:44:36:12:00:1a:dd:d9:30:d2:1f:53:6a:2b:b5:
         4f:b3:4d:4a:2f:ad:ff:83:2e:87:c6:00:94:3e:93:de:21:f3:
         c0:12:f4:e2:1a:42:3a:1e:2e:f6:c7:a5:9c:f8:d6:da:98:eb:
         a4:b7:80:d0:9d:e0:55:4c:18:33:e5:b1:32:a1:7e:98:ae:e1:
         7b:65:36:51:64:a6:2f:21:c4:f3:18:07:1a:f4:95:45:b1:1c:
         70:90:d7:c2:90:1e:8c:69:43:8d:d4:32:3d:52:7b:8e:29:d1:
         e4:68:e1:7c:a3:e5:5b:6c:ff:4d:e3:c4:84:8a:b1:3a:7f:d6:
         f4:95:44:45:1b:02:df:92:06:0f:08:b4:06:36:ab:14:c8:cb:
         f7:d3:1c:d6:f0:6a:f7:2e:20:1b:00:f0:56:4c:05:16:c4:56:
         ef:c1:83:02:4f:17:43:43:85:d8:00:70:d6:8a:58:06:70:8b:
         5f:23:b8:b8:f8:a8:55:7c:c2:56:18:6e:90:ae:33:5b:aa:02:
         db:28:02:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:24:26 2026 by rpki-client