Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/323830343a316362633a3130303a3a2f34382d3438203d3e203631363732.roa
File:                     323830343a316362633a3130303a3a2f34382d3438203d3e203631363732.roa (raw, json)
Hash identifier:          BylKic+EBc+t87uJ+mT4R1IMVe0xi/DtAgMMzgnZTOw=
Subject key identifier:   D1:49:FA:3B:2F:39:E2:FB:99:FE:69:58:63:3A:E1:DB:20:C3:26:8F
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       6339FBC2E5BC98F9E7535F116C686522695707C7
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/323830343a316362633a3130303a3a2f34382d3438203d3e203631363732.roa
Signing time:             Thu 05 Feb 2026 19:00:34 +0000
ROA not before:           Thu 05 Feb 2026 18:55:34 +0000
ROA not after:            Thu 04 Feb 2027 19:00:34 +0000
asID:                     61672
IP address blocks:        2804:1cbc:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl
                          rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 14:21:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:39:fb:c2:e5:bc:98:f9:e7:53:5f:11:6c:68:65:22:69:57:07:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Feb  5 18:55:34 2026 GMT
            Not After : Feb  4 19:00:34 2027 GMT
        Subject: CN=D149FA3B2F39E2FB99FE6958633AE1DB20C3268F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:11:94:5f:ae:bd:92:0a:f7:19:b9:e1:94:2b:
                    d2:59:1d:73:6e:c8:ab:da:de:8f:13:9c:e1:16:7f:
                    92:67:e6:1a:b0:ff:17:94:11:8a:7d:c8:ac:0e:d8:
                    fc:65:d5:97:fa:56:98:f4:27:99:6b:c7:b7:b1:61:
                    7f:6c:79:e2:e1:4c:c4:02:e6:46:da:d6:65:d8:95:
                    1a:d9:86:a2:24:b4:6b:ac:b9:4f:9b:96:0a:2b:01:
                    6c:e9:85:51:fa:b5:ee:d3:5b:9c:18:4c:2c:c5:f2:
                    bf:96:ce:9f:b3:30:88:ba:36:c5:66:4d:1a:1c:51:
                    60:65:bd:c9:75:92:2c:ad:78:7c:13:10:08:e4:e9:
                    12:85:c9:ca:2b:09:ba:fa:8c:f5:04:6f:98:92:85:
                    22:eb:71:9e:a7:84:ea:3e:3e:93:14:20:8e:1a:99:
                    06:cb:e7:c8:f8:43:94:9f:b4:19:ad:31:83:8b:dd:
                    b2:4b:6f:8f:51:76:9f:b2:b2:d7:c7:21:71:20:6b:
                    18:24:6e:18:53:6b:ae:d4:3e:a0:23:01:ef:d0:78:
                    b0:7c:34:fb:39:30:f5:75:c9:6e:ba:10:ab:4c:fc:
                    25:d4:29:8a:41:1e:85:2d:3e:29:a0:e4:bd:df:55:
                    a7:e6:a7:6f:d0:74:27:88:0f:dd:16:ee:05:e9:4d:
                    31:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:49:FA:3B:2F:39:E2:FB:99:FE:69:58:63:3A:E1:DB:20:C3:26:8F
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/323830343a316362633a3130303a3a2f34382d3438203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cbc:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:77:8c:a7:c7:89:ac:c0:d5:b1:e3:36:be:80:ab:42:37:cf:
         e8:22:a2:08:f8:cc:d1:0b:13:50:c8:a1:cc:c8:e0:9a:19:ca:
         09:a8:a4:fc:2d:97:3c:b8:91:c5:d9:86:4b:76:29:37:e0:65:
         95:29:8d:d1:e9:4c:9a:42:3c:c2:89:70:72:9c:ec:67:ff:18:
         0a:c2:49:88:3a:23:29:92:0d:51:87:63:93:5d:f8:59:da:b7:
         af:45:dc:89:3f:e9:ad:6a:ea:bd:81:81:50:b8:17:54:6a:02:
         c8:70:f9:ed:d3:17:2d:0a:6f:6b:03:e7:32:9e:cf:38:3d:e6:
         cc:68:a0:7e:91:e7:88:df:60:a2:de:f4:ce:09:79:01:cd:c0:
         b1:da:02:62:a2:2e:d0:24:56:5f:d8:87:15:d6:d3:df:e0:b4:
         e3:25:2d:54:e8:1e:95:5f:c3:db:be:4f:ee:47:3f:df:4a:75:
         0b:05:03:3f:d9:e6:a8:e2:70:cf:23:43:5b:69:92:c2:06:79:
         ae:b9:ab:41:0a:0b:aa:fe:21:82:b6:a8:07:4c:54:2a:b0:23:
         7b:bf:87:27:eb:4a:9f:7f:6e:0c:da:5a:59:4a:0a:09:13:97:
         a3:15:1a:e7:24:9f:66:68:64:84:24:ce:78:fc:43:af:83:98:
         ca:80:53:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:01:05 2026 by rpki-client