Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373430333a3a2f34382d3438203d3e203631353931.roa
File:                     323830343a323331633a373430333a3a2f34382d3438203d3e203631353931.roa (raw, json)
Hash identifier:          ZLPcoPMUNzTcg9Q1r7x1JDD/KmzO8ZaYfeu8OR+LWzM=
Subject key identifier:   EF:35:31:BF:B2:0B:FD:6E:57:23:4C:F2:15:70:AA:8C:0F:F9:0F:51
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       4DEC502C3AC96FEA3D1ACA0C49FA68851E2ADEB2
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373430333a3a2f34382d3438203d3e203631353931.roa
Signing time:             Sat 03 Jan 2026 13:00:01 +0000
ROA not before:           Sat 03 Jan 2026 12:55:01 +0000
ROA not after:            Sat 02 Jan 2027 13:00:01 +0000
asID:                     61591
IP address blocks:        2804:231c:7403::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ec:50:2c:3a:c9:6f:ea:3d:1a:ca:0c:49:fa:68:85:1e:2a:de:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Jan  3 12:55:01 2026 GMT
            Not After : Jan  2 13:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:3b:65:6a:9e:b5:0d:87:fb:18:9e:9f:a4:
                    04:51:55:2b:6f:4a:2e:0d:e7:f3:2f:3a:3c:4f:a0:
                    89:98:ea:ef:56:ab:73:a3:78:8a:e8:ce:bb:97:61:
                    e7:2b:50:ec:89:05:51:51:b0:0b:04:18:36:28:29:
                    32:3c:fb:56:ac:01:6e:b5:1b:de:50:ea:17:1a:00:
                    d2:9c:52:93:c5:ad:66:20:80:d3:24:8a:cc:01:30:
                    c8:cb:25:92:01:90:4c:8b:8c:6f:53:35:86:ff:bd:
                    da:1f:d1:bb:e9:98:1b:2e:fc:34:10:60:a4:cc:a8:
                    c5:be:f4:f8:a2:24:2c:30:0a:bb:a0:d8:3b:49:a2:
                    22:8b:4f:c4:dc:ff:e3:d9:8a:26:af:13:42:eb:74:
                    3e:6b:d2:bd:07:df:ad:52:70:3c:55:d8:de:81:f6:
                    7e:73:a6:7a:e3:89:43:b2:73:44:57:1d:eb:ef:6b:
                    30:04:ba:d0:92:38:64:b5:38:86:de:14:54:5b:42:
                    49:36:31:bb:07:89:a5:a2:b3:ce:4c:1a:44:e2:c4:
                    e9:9f:a4:db:d2:52:3c:34:9c:5a:08:59:34:95:92:
                    d1:a4:85:2f:b3:7c:a2:d0:79:cd:6b:03:94:c5:5d:
                    af:02:b1:51:ae:fd:cc:d9:fe:ef:f7:ff:ba:f5:3a:
                    bb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:35:31:BF:B2:0B:FD:6E:57:23:4C:F2:15:70:AA:8C:0F:F9:0F:51
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373430333a3a2f34382d3438203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:231c:7403::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:3d:7c:68:ce:84:53:1c:48:e2:12:63:92:12:62:f3:48:3d:
         f3:68:f1:a8:eb:fa:67:13:c0:bf:9c:43:73:76:40:e5:b9:ed:
         18:dd:cb:cc:60:87:12:98:1f:5d:ed:70:87:c2:40:5e:a8:38:
         0d:e4:0f:4c:53:33:28:13:c5:80:f6:3e:04:89:bc:53:af:88:
         eb:dc:fb:ee:c9:1a:01:6f:42:37:0c:cf:97:ae:ce:62:bc:60:
         65:c5:13:41:74:6c:b5:f2:63:8f:56:f6:13:4c:73:4b:bd:1b:
         24:13:06:44:c9:02:55:1b:28:21:c0:0a:44:bd:cf:e7:93:e6:
         49:44:14:f0:97:5b:1a:64:15:8f:06:e2:a7:65:ba:81:f4:b3:
         40:fc:49:a7:88:0a:dc:28:3d:bf:1c:fa:62:07:3f:a1:a2:3b:
         65:b9:37:1a:5c:43:ec:84:6e:04:d2:83:4c:87:e5:73:67:21:
         4d:8a:ce:ed:8a:b2:ac:b3:d0:05:f0:96:7a:12:7b:3a:a6:a8:
         b5:be:7f:d1:75:51:6b:0a:58:ea:6f:cd:a0:f5:50:42:01:e6:
         9d:fb:a4:9c:25:bd:22:2e:82:e8:83:0a:f9:0a:51:a2:bc:7e:
         68:f8:a8:b7:51:26:0a:ac:dd:69:40:e9:ae:1f:f0:89:90:f5:
         0c:df:f1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:39:32 2026 by rpki-client