Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a666666663a3a2f34382d3438203d3e203631383838.roa
File:                     323830343a6536303a666666663a3a2f34382d3438203d3e203631383838.roa (raw, json)
Hash identifier:          VObZ2YJQjWB9Fy3l5WOJiQjgy3/4/dc3I0O7C/Q7tt8=
Subject key identifier:   B8:C3:E0:E8:79:00:5E:AB:7B:F4:FD:BA:02:E9:34:F9:61:AB:74:36
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       554436C58055B10CC1DC9F8154D857A1D3FD8FDE
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a666666663a3a2f34382d3438203d3e203631383838.roa
Signing time:             Wed 04 Feb 2026 20:00:02 +0000
ROA not before:           Wed 04 Feb 2026 19:55:02 +0000
ROA not after:            Wed 03 Feb 2027 20:00:02 +0000
asID:                     61888
IP address blocks:        2804:e60:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
                          rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:44:36:c5:80:55:b1:0c:c1:dc:9f:81:54:d8:57:a1:d3:fd:8f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Feb  4 19:55:02 2026 GMT
            Not After : Feb  3 20:00:02 2027 GMT
        Subject: CN=B8C3E0E879005EAB7BF4FDBA02E934F961AB7436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:db:99:e7:86:6a:12:4a:c2:12:f4:53:d3:12:
                    54:cb:b9:e3:33:b0:fd:32:76:4b:f5:66:12:0a:6b:
                    33:69:4b:c9:17:ff:4a:45:bd:3e:6d:72:05:d3:1e:
                    37:63:e0:17:d9:72:f8:7f:29:62:41:2d:b2:c7:74:
                    0f:f7:63:e7:53:77:2f:6e:7b:bd:56:43:90:6f:1f:
                    0f:20:cd:62:81:ef:8a:1d:ef:da:5f:88:06:56:e9:
                    73:11:98:fa:d5:22:f8:fb:4a:64:04:e5:57:1a:5e:
                    b2:d3:bd:49:cc:ea:89:61:8c:fd:18:ae:c5:7b:fc:
                    d5:00:89:23:6e:bf:59:0e:31:61:26:45:05:66:b7:
                    5a:0b:3c:67:30:0c:6c:5f:13:15:f9:37:90:d1:21:
                    26:87:e3:2e:41:56:4f:99:0c:dd:bb:00:44:95:86:
                    8e:f6:76:fc:8d:a8:6e:50:4b:46:5e:bd:90:28:6d:
                    80:6f:44:f6:0a:e2:42:56:25:8b:2c:b4:0c:77:8c:
                    0f:0d:89:94:60:92:61:4c:57:b9:64:d9:7f:19:0d:
                    61:2b:7f:0a:32:e8:84:d1:3d:35:13:3f:b8:7c:a4:
                    29:8d:d1:d5:7d:8f:f6:73:a3:03:0b:ea:5c:46:d2:
                    e0:02:72:8d:62:a0:68:c5:96:68:9d:65:23:df:1e:
                    64:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C3:E0:E8:79:00:5E:AB:7B:F4:FD:BA:02:E9:34:F9:61:AB:74:36
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a666666663a3a2f34382d3438203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:b3:36:36:32:f2:fc:b5:17:c8:24:40:df:0b:ff:25:ad:fd:
         00:c1:82:ff:58:4f:d2:e6:75:c5:df:6e:d0:64:6d:fe:61:95:
         6a:02:14:f8:5e:79:02:31:8b:5c:4b:09:26:2b:d5:82:0e:eb:
         0f:25:e2:99:1c:fe:8a:8e:8e:b9:b0:0b:c0:51:28:2f:fb:09:
         38:9e:de:11:cf:10:74:b1:28:bb:75:01:8b:98:2f:60:73:c7:
         37:e9:49:53:2c:5a:1e:b3:b4:6d:6c:2e:8a:26:ae:90:f9:70:
         09:3e:9f:74:f6:65:10:3c:3d:23:11:d0:06:c5:91:1f:4e:4b:
         c7:96:7f:2c:9f:b5:a7:85:24:f6:c6:2f:f0:03:fd:36:12:6c:
         e0:56:fd:c5:70:fe:a6:7f:c9:74:76:bf:84:47:09:25:02:e4:
         03:19:d6:09:05:81:52:5c:95:d8:c0:20:34:0e:10:79:af:36:
         b6:02:e2:b4:76:78:a7:c8:28:77:54:1c:7c:96:d1:7c:0e:e2:
         78:12:85:ad:ff:e3:12:6f:e7:52:d9:db:8b:5d:c8:0d:04:07:
         22:a7:d8:16:09:83:c3:fb:0c:3a:cc:be:61:34:98:e0:af:1a:
         60:a5:5e:64:50:43:2a:93:dc:1c:85:e5:1d:ea:81:d7:8d:58:
         d2:fe:cb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:37:47 2026 by rpki-client