Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a666163653a3a2f34382d3438203d3e203631383838.roa
File:                     323830343a6536303a666163653a3a2f34382d3438203d3e203631383838.roa (raw, json)
Hash identifier:          WY5nF08qUjm5JHBVzyl42O8yDd1O6CGGpdTHkgh+V/M=
Subject key identifier:   CD:1D:65:6E:1B:F8:FE:4C:68:3A:01:87:69:C4:AE:20:C5:CA:B6:4B
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       68BBEE863F21E455BED20B718A9B1465B648F462
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a666163653a3a2f34382d3438203d3e203631383838.roa
Signing time:             Wed 04 Feb 2026 20:00:01 +0000
ROA not before:           Wed 04 Feb 2026 19:55:01 +0000
ROA not after:            Wed 03 Feb 2027 20:00:01 +0000
asID:                     61888
IP address blocks:        2804:e60:face::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
                          rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:bb:ee:86:3f:21:e4:55:be:d2:0b:71:8a:9b:14:65:b6:48:f4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Feb  4 19:55:01 2026 GMT
            Not After : Feb  3 20:00:01 2027 GMT
        Subject: CN=CD1D656E1BF8FE4C683A018769C4AE20C5CAB64B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9c:25:9e:4c:64:2e:29:d0:cb:f6:39:06:3e:
                    fe:7c:b7:19:a1:bb:43:c2:9b:da:11:f2:91:8f:d7:
                    9d:25:04:b4:74:6a:00:d2:42:26:98:df:0b:86:7a:
                    6a:b0:b3:76:e2:66:88:32:27:12:26:38:8a:a1:6d:
                    77:8b:67:42:83:8d:ac:55:f9:c8:96:86:08:3f:13:
                    0c:a8:7c:52:f0:4f:76:f3:c5:30:85:a2:61:82:ca:
                    7e:1e:08:a8:1b:c4:4e:42:19:f9:15:f6:26:22:af:
                    22:58:59:35:39:14:c2:b1:dc:77:67:88:58:49:cc:
                    1c:fd:62:57:d1:b7:78:5f:87:da:9b:e0:1c:0e:ab:
                    06:d5:6f:fa:50:38:f4:62:2b:ea:95:e3:34:08:18:
                    61:41:17:af:d6:7d:4e:4f:00:39:cb:e5:7d:1f:19:
                    b5:51:0c:f3:1e:89:fc:85:63:62:2e:d2:22:5e:ab:
                    ba:bd:ff:53:fc:84:44:cf:74:20:57:f7:46:cf:2d:
                    a3:f5:ef:9f:47:a3:94:28:da:46:69:81:cc:48:f5:
                    55:a6:71:93:76:9a:8b:c9:46:cf:92:9f:d4:a5:ae:
                    7d:74:b5:4b:b6:de:f9:12:63:86:0a:dc:a7:20:80:
                    ad:a2:46:6e:a9:bd:4c:06:06:d2:7e:00:59:e8:5a:
                    99:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1D:65:6E:1B:F8:FE:4C:68:3A:01:87:69:C4:AE:20:C5:CA:B6:4B
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a666163653a3a2f34382d3438203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:face::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:fe:c1:ef:93:6a:4a:99:ca:e1:62:a8:8a:f3:47:7a:db:cf:
         34:9b:02:8d:f2:41:59:f8:5f:13:b7:ef:42:06:86:b4:66:93:
         5e:0a:57:4a:ad:ee:cc:68:26:48:ae:05:62:30:2d:a6:a6:c6:
         5c:0c:5e:2c:96:50:ee:1f:66:9e:48:b5:a2:50:bc:4a:cf:0c:
         dd:ab:35:e1:cf:62:a8:f9:6a:b3:28:35:0c:43:dd:05:74:1c:
         3c:a5:9e:4b:f3:e8:e5:bb:a0:ab:3c:62:45:d2:13:42:4a:0b:
         7e:57:11:10:06:21:47:ce:a4:77:a1:93:3a:4f:4a:56:8d:09:
         9a:d5:30:a5:c6:47:38:a7:f5:67:00:da:f6:76:4c:52:89:fe:
         ad:95:89:ee:b6:fe:71:fb:31:54:37:d5:1a:21:62:09:1f:7c:
         fc:d8:d0:8d:af:d7:f2:69:63:ce:be:ba:7a:02:85:dd:8c:0c:
         96:f2:b9:df:a0:27:36:af:2e:75:3a:d1:9a:bf:a1:73:8f:a5:
         5b:c9:24:a8:3d:12:45:0a:74:65:d4:26:a2:9b:44:45:6e:f1:
         46:3a:a6:72:75:ef:e3:f1:25:72:0a:7e:ae:54:42:37:2d:83:
         58:cd:14:33:11:9a:2f:dd:ad:cb:81:b5:3b:c7:c9:fb:3f:dd:
         2c:42:82:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:02:26 2026 by rpki-client