Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/323830343a363264303a383030303a3a2f33342d3334203d3e20323639333230.roa
File:                     323830343a363264303a383030303a3a2f33342d3334203d3e20323639333230.roa (raw, json)
Hash identifier:          Wq6golm0RcTbu7OHh2lO2akh9L//B92j2Qj2+0QNeKE=
Subject key identifier:   AD:5B:7C:88:A8:2A:34:F6:FC:6E:0D:89:B3:25:58:2A:93:8C:F5:95
Certificate issuer:       /CN=F196A9AF2ABCCD8F3406AD535AF560447E07E6E7
Certificate serial:       40070479E4446E1DEEFEACC1C8A4FA9EBD5F836E
Authority key identifier: F1:96:A9:AF:2A:BC:CD:8F:34:06:AD:53:5A:F5:60:44:7E:07:E6:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/323830343a363264303a383030303a3a2f33342d3334203d3e20323639333230.roa
Signing time:             Wed 04 Feb 2026 21:21:30 +0000
ROA not before:           Wed 04 Feb 2026 21:16:30 +0000
ROA not after:            Wed 03 Feb 2027 21:21:30 +0000
asID:                     269320
IP address blocks:        2804:62d0:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.crl
                          rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 20:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:07:04:79:e4:44:6e:1d:ee:fe:ac:c1:c8:a4:fa:9e:bd:5f:83:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F196A9AF2ABCCD8F3406AD535AF560447E07E6E7
        Validity
            Not Before: Feb  4 21:16:30 2026 GMT
            Not After : Feb  3 21:21:30 2027 GMT
        Subject: CN=AD5B7C88A82A34F6FC6E0D89B325582A938CF595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2a:66:ed:6b:f8:ea:12:34:eb:ad:e9:8e:0c:
                    0e:5b:af:a2:9b:de:47:3f:82:c9:c9:f7:13:fd:d6:
                    9d:ca:d2:c6:18:a6:f0:4f:05:c7:1c:99:c6:46:6a:
                    b5:a8:ca:49:fa:69:26:37:71:45:72:2d:bd:64:70:
                    5c:0d:3a:08:4d:ed:9f:31:39:59:5a:47:dc:f5:74:
                    57:e9:b5:2b:e2:b7:39:f8:59:cd:d6:e9:a9:f4:f7:
                    ec:72:e4:cf:13:71:da:b2:e1:f2:c8:da:9a:42:bf:
                    55:41:11:f9:77:c5:19:91:6f:0a:55:3d:28:8d:fb:
                    a2:89:02:03:2a:3a:41:f0:6b:2e:ee:90:c3:d8:23:
                    1a:1f:55:7a:38:8c:1f:9b:4b:d6:c5:9a:1a:ac:27:
                    f1:a8:1a:08:80:e4:1b:55:d7:ed:c6:1a:05:b6:21:
                    10:fa:22:46:c2:08:c0:ea:99:58:67:15:d6:0e:57:
                    63:49:69:71:ee:38:e9:0a:03:e6:60:6f:b8:cb:b2:
                    17:e1:a8:5e:b8:4c:64:e5:c0:a6:6d:a3:c2:e0:77:
                    bb:4d:a6:b9:ca:30:ae:75:a2:d3:b9:52:30:51:a8:
                    20:a6:39:4b:5b:34:c2:e0:3c:f3:1f:f5:85:47:96:
                    7c:f6:f9:f2:b0:42:e2:d2:b3:19:6d:f9:da:a3:02:
                    5c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5B:7C:88:A8:2A:34:F6:FC:6E:0D:89:B3:25:58:2A:93:8C:F5:95
            X509v3 Authority Key Identifier:
                keyid:F1:96:A9:AF:2A:BC:CD:8F:34:06:AD:53:5A:F5:60:44:7E:07:E6:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/323830343a363264303a383030303a3a2f33342d3334203d3e20323639333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:62d0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         71:19:72:7d:d3:db:0c:95:c1:17:b8:81:ab:e6:bf:c3:6f:f6:
         d6:4c:12:32:11:dd:6e:99:53:23:be:1a:9e:f5:b5:89:2b:4e:
         c0:10:7f:cf:33:be:28:1f:2a:3c:8d:9b:fd:c0:e5:f7:b7:7c:
         9a:56:53:48:6f:b1:e0:5e:31:55:70:69:63:8c:50:58:f9:6b:
         da:43:02:d8:40:88:68:2f:c6:b8:e2:1e:a7:fd:0f:c9:d7:83:
         54:ec:b4:f3:a0:37:c9:15:32:33:af:7f:65:bb:6d:36:bb:b5:
         0e:c3:13:e6:cb:88:d6:98:88:03:32:d2:38:61:c9:3b:e8:49:
         d4:6b:04:0e:82:05:a5:5a:38:44:86:ff:e2:81:6b:39:8c:5a:
         58:09:96:ec:c2:dd:fd:29:33:b8:ce:12:7a:8f:cd:e1:bf:6f:
         c3:6d:1b:e1:68:29:9f:71:c6:3a:82:ee:7c:ab:2d:e5:9d:33:
         66:95:e6:d1:98:76:dc:f9:68:b2:b6:d9:49:81:ae:c7:3e:4f:
         4a:d6:38:5d:27:5e:77:76:5a:0e:f5:d3:fc:7a:56:49:05:ed:
         3f:84:52:27:96:28:07:0b:5f:87:09:4e:80:5d:75:70:8b:25:
         e1:bb:72:60:1a:21:e6:e9:0e:e1:f4:4a:ad:75:f1:51:77:e7:
         26:e5:2d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:57:21 2026 by rpki-client