Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3a2f33322d3333203d3e203631383838.roa
File:                     323830343a6536303a3a2f33322d3333203d3e203631383838.roa (raw, json)
Hash identifier:          KrjQcukvjlJJOW0lFp0dgvPZ2CZpP7wMgw3Pvl1eV/g=
Subject key identifier:   43:3F:3A:49:ED:FE:FF:60:32:6D:EF:A9:39:66:29:3A:89:71:60:49
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       2976A2C6C4430D0DECD7A520469D85B18E5FE327
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3a2f33322d3333203d3e203631383838.roa
Signing time:             Wed 04 Feb 2026 20:00:03 +0000
ROA not before:           Wed 04 Feb 2026 19:55:03 +0000
ROA not after:            Wed 03 Feb 2027 20:00:03 +0000
asID:                     61888
IP address blocks:        2804:e60::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
                          rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:76:a2:c6:c4:43:0d:0d:ec:d7:a5:20:46:9d:85:b1:8e:5f:e3:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Feb  4 19:55:03 2026 GMT
            Not After : Feb  3 20:00:03 2027 GMT
        Subject: CN=433F3A49EDFEFF60326DEFA93966293A89716049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:98:dc:f5:bd:b0:ab:c7:fa:87:1c:26:03:cf:
                    c4:25:7b:40:5f:0f:da:24:50:f1:ab:cd:06:9f:9d:
                    d3:b0:7a:f1:aa:39:e2:f6:30:f9:a9:cd:e0:f7:5e:
                    26:c8:6d:55:4d:74:cb:4f:f5:ab:8a:85:fb:af:02:
                    15:c2:d9:3c:65:c3:a6:ca:5c:c9:21:0d:d9:dc:47:
                    37:35:a9:b5:be:42:35:a3:41:ff:83:28:25:5f:2e:
                    db:5c:92:4a:42:7b:fa:dd:4a:43:56:cb:76:5f:06:
                    4a:89:ee:72:af:65:2d:4f:12:c5:10:c1:56:69:ba:
                    dc:39:41:d5:00:92:b8:65:92:83:32:34:a6:3e:4c:
                    b2:0f:5c:8a:4e:8d:1a:e1:4c:85:02:b7:ec:11:93:
                    df:23:d7:88:c9:67:2b:1b:13:82:8d:e3:f2:91:7a:
                    ad:77:b2:24:d2:47:5c:c9:39:99:25:57:2d:67:8e:
                    a5:82:17:a8:0b:08:0a:d5:e9:55:e2:93:af:9e:89:
                    eb:02:71:3b:45:cc:b6:0f:7a:0f:5a:ad:66:15:3c:
                    11:2c:d7:da:6c:c6:7c:0b:08:e8:17:2e:0e:3e:73:
                    ed:a4:0e:e2:0e:78:17:44:a2:dc:92:44:bd:7a:26:
                    6e:36:c8:2b:6b:f1:14:3b:b8:b9:6d:f5:71:71:0c:
                    62:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3F:3A:49:ED:FE:FF:60:32:6D:EF:A9:39:66:29:3A:89:71:60:49
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3a2f33322d3333203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:66:11:65:02:94:50:c3:76:c4:a9:83:89:f5:43:6a:55:55:
         4d:33:8c:67:72:95:3e:c4:38:73:c2:19:1d:00:e2:57:f2:bd:
         16:39:7d:0d:9f:34:55:f7:3d:6e:2b:4f:83:c1:5f:3c:e7:8f:
         4b:81:36:2c:53:5c:c9:cd:98:55:01:95:ad:ab:16:32:5f:a7:
         05:ec:8d:4a:ec:27:15:ba:71:7a:b1:50:8c:99:b1:ac:72:27:
         b9:8e:bc:0a:a7:87:87:cf:cb:e2:0c:70:7f:ca:1c:65:08:f9:
         7a:52:af:be:cd:ec:b8:46:89:57:aa:9e:0c:69:ff:3d:51:63:
         ab:9a:c0:c8:ca:57:9b:37:9d:53:3b:df:31:38:10:37:71:4e:
         5b:5b:7b:ec:85:10:50:42:72:31:f1:ac:a2:3e:75:e7:dc:d7:
         96:1f:72:39:e5:15:7d:89:c7:a8:5a:21:39:d5:0b:f4:ef:1b:
         58:7e:86:40:2a:5f:38:cf:16:0e:1f:44:cf:ba:dc:99:80:74:
         51:d4:dd:0b:06:78:33:48:f7:e6:d6:03:0a:8a:40:65:53:f2:
         1e:7e:f8:90:37:5e:00:b2:d5:9d:5e:4b:f7:94:f9:c9:77:b9:
         91:95:3e:01:42:c3:83:5d:df:a2:c6:5a:33:58:dd:da:7f:5e:
         04:a7:ea:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:02:27 2026 by rpki-client