Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/39BCYPk69Unqpep3kRJLJZfqaXsEqDY5tXBXTSC44cxj/1/323830343a346566343a3a2f33322d3336203d3e20323638323934.roa
File:                     323830343a346566343a3a2f33322d3336203d3e20323638323934.roa (raw, json)
Hash identifier:          Fg70brhGs8vWhrnI1HFKAPXSJzytimVzoCXE1hLyjm8=
Subject key identifier:   3F:86:1A:68:A1:81:AB:6A:3D:5F:DA:F7:49:4C:C3:70:80:54:9E:79
Certificate issuer:       /CN=D486E78181EB5A2A2481151B9D21AD45CE11DD00
Certificate serial:       7A46BE4261DC7F8527F5E69D77C31D9E6420A95C
Authority key identifier: D4:86:E7:81:81:EB:5A:2A:24:81:15:1B:9D:21:AD:45:CE:11:DD:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D486E78181EB5A2A2481151B9D21AD45CE11DD00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/39BCYPk69Unqpep3kRJLJZfqaXsEqDY5tXBXTSC44cxj/1/323830343a346566343a3a2f33322d3336203d3e20323638323934.roa
Signing time:             Thu 05 Feb 2026 14:00:02 +0000
ROA not before:           Thu 05 Feb 2026 13:55:02 +0000
ROA not after:            Thu 04 Feb 2027 14:00:02 +0000
asID:                     268294
IP address blocks:        2804:4ef4::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/39BCYPk69Unqpep3kRJLJZfqaXsEqDY5tXBXTSC44cxj/1/D486E78181EB5A2A2481151B9D21AD45CE11DD00.crl
                          rsync://rpki-repo.registro.br/repo/39BCYPk69Unqpep3kRJLJZfqaXsEqDY5tXBXTSC44cxj/1/D486E78181EB5A2A2481151B9D21AD45CE11DD00.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D486E78181EB5A2A2481151B9D21AD45CE11DD00.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:46:be:42:61:dc:7f:85:27:f5:e6:9d:77:c3:1d:9e:64:20:a9:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D486E78181EB5A2A2481151B9D21AD45CE11DD00
        Validity
            Not Before: Feb  5 13:55:02 2026 GMT
            Not After : Feb  4 14:00:02 2027 GMT
        Subject: CN=3F861A68A181AB6A3D5FDAF7494CC37080549E79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:98:06:df:41:42:19:c1:0e:c9:31:6f:55:a4:
                    0a:18:1d:82:d7:80:b1:77:63:af:6e:b7:ec:85:2e:
                    ed:0d:4a:34:55:6c:5f:2a:9b:a5:65:2a:e0:04:2d:
                    1b:8d:0d:7b:ae:3e:cc:a6:b2:9c:cd:f6:73:d3:87:
                    9d:f8:9f:d1:0c:6e:24:01:b7:89:29:64:59:c5:55:
                    40:82:3a:b4:ae:8a:eb:78:f4:ff:23:9e:23:72:21:
                    e2:b8:66:8c:ce:e5:3a:cb:c6:3c:4f:b8:52:c0:de:
                    7b:1d:f2:21:46:98:15:03:ac:b4:db:db:ae:5b:0a:
                    30:4d:d6:d8:2a:d4:a3:3e:24:27:72:97:2f:1c:29:
                    2a:77:37:ef:81:73:52:79:b9:19:31:70:90:0d:6c:
                    15:ed:5d:49:05:57:17:71:2b:5f:bd:5e:43:29:ce:
                    22:0c:bd:3b:03:8b:6c:f2:ca:88:12:39:a0:c8:69:
                    8a:f1:bf:04:5f:31:24:11:d2:8b:9b:a9:ed:72:bd:
                    6a:8e:3c:b7:69:ea:10:85:79:6a:e4:9e:b3:00:71:
                    f9:7b:ff:31:f5:14:6f:f5:9a:8c:a0:2e:ba:bb:05:
                    0b:ad:7a:55:11:fc:f7:db:6d:16:ed:9a:c6:2b:b7:
                    0b:0e:03:6f:93:6c:a4:90:9e:4c:d0:53:e6:13:d7:
                    64:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:86:1A:68:A1:81:AB:6A:3D:5F:DA:F7:49:4C:C3:70:80:54:9E:79
            X509v3 Authority Key Identifier:
                keyid:D4:86:E7:81:81:EB:5A:2A:24:81:15:1B:9D:21:AD:45:CE:11:DD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/39BCYPk69Unqpep3kRJLJZfqaXsEqDY5tXBXTSC44cxj/1/D486E78181EB5A2A2481151B9D21AD45CE11DD00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D486E78181EB5A2A2481151B9D21AD45CE11DD00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/39BCYPk69Unqpep3kRJLJZfqaXsEqDY5tXBXTSC44cxj/1/323830343a346566343a3a2f33322d3336203d3e20323638323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ef4::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:0e:29:4f:7f:38:6d:bc:75:a6:69:a0:e2:d2:5a:84:2d:85:
         94:a7:57:ca:d3:d1:04:c9:d1:e0:29:1d:de:a7:92:55:ab:bc:
         93:75:9a:25:83:55:98:7f:4f:64:34:72:4c:40:b2:f4:52:a3:
         10:92:be:48:f9:03:3e:04:0e:22:37:60:26:58:8e:93:77:ef:
         f7:81:23:8a:da:a2:a5:29:68:3b:6e:25:5a:29:f8:35:a9:cc:
         b0:5b:e7:13:23:3c:83:c8:48:da:a1:21:42:d3:f7:72:a6:ab:
         25:ba:d9:10:8e:92:9c:6e:68:25:b5:b5:64:a7:8c:f2:01:b4:
         3c:c4:22:fd:bc:84:ac:df:c1:ff:71:5c:0c:91:ce:77:d6:ce:
         26:a3:f1:4b:95:08:87:0b:cb:99:c9:db:1c:66:bd:26:4f:56:
         a2:44:e3:7b:7f:a2:cd:c7:83:ce:46:c3:9b:0d:dd:26:65:4b:
         a1:a7:fd:a9:fa:ac:a5:a1:0b:15:02:d9:ec:c0:4e:5e:be:4a:
         a2:dc:7c:c4:57:4c:3d:7b:9d:2f:d4:5c:66:27:25:55:f9:16:
         d6:66:61:37:17:35:b7:5c:b4:74:61:6f:e4:74:2e:20:7c:03:
         f8:c9:ac:26:27:fd:a2:90:c5:75:ed:e1:7b:f6:70:65:bf:c2:
         ea:5e:b4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:21 2026 by rpki-client