Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/323830343a346431383a383030303a3a2f33332d3333203d3e20323637343132.roa
File:                     323830343a346431383a383030303a3a2f33332d3333203d3e20323637343132.roa (raw, json)
Hash identifier:          Y2PTBmAsjOS/I1khVfnmNt/Lw42OfAJhZfrsaYxCYac=
Subject key identifier:   60:B4:04:3A:A9:92:4C:07:04:65:6F:A7:B6:89:87:1E:D8:3E:2B:B0
Certificate issuer:       /CN=07FCA7D1215090422388794719E04DCE9A5F39AA
Certificate serial:       061FC389CF68A1DBB3B4C308C5F04D72CCBF4855
Authority key identifier: 07:FC:A7:D1:21:50:90:42:23:88:79:47:19:E0:4D:CE:9A:5F:39:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/323830343a346431383a383030303a3a2f33332d3333203d3e20323637343132.roa
Signing time:             Mon 05 Jan 2026 18:46:47 +0000
ROA not before:           Mon 05 Jan 2026 18:41:47 +0000
ROA not after:            Mon 04 Jan 2027 18:46:47 +0000
asID:                     267412
IP address blocks:        2804:4d18:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.crl
                          rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:1f:c3:89:cf:68:a1:db:b3:b4:c3:08:c5:f0:4d:72:cc:bf:48:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07FCA7D1215090422388794719E04DCE9A5F39AA
        Validity
            Not Before: Jan  5 18:41:47 2026 GMT
            Not After : Jan  4 18:46:47 2027 GMT
        Subject: CN=60B4043AA9924C0704656FA7B689871ED83E2BB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8c:a3:90:28:45:1e:33:39:52:7b:73:3a:1e:
                    44:44:28:c2:14:5b:7c:a4:5b:cb:9c:c9:2b:9a:05:
                    ec:b1:c6:c2:f6:02:c0:c3:6f:fe:66:70:d4:28:91:
                    7e:0d:a2:46:19:fd:df:00:54:aa:1b:6f:4d:c1:01:
                    41:80:c5:16:5e:28:0d:77:67:20:4c:4e:27:3b:ad:
                    d7:f1:26:4a:9a:99:fd:7d:4b:62:33:4c:e4:75:3a:
                    d5:a8:ac:5b:1d:02:74:3a:6a:ec:77:ac:8e:b1:c0:
                    45:f4:39:c4:7c:55:83:ab:e6:23:5b:7d:c8:07:9a:
                    c9:d4:40:37:76:3a:28:ba:63:6f:61:a6:2d:c0:6d:
                    ce:3e:2e:67:07:9c:29:fb:57:61:b3:e6:17:c2:22:
                    e0:57:dd:36:b6:70:22:93:55:39:8f:6c:83:00:64:
                    bf:f0:f9:0b:58:3c:37:4e:0d:a2:ce:7c:e3:68:43:
                    92:c5:f7:2c:46:5a:59:2d:62:c7:66:b7:1a:54:2c:
                    0a:9a:0b:04:be:db:bb:be:c6:ad:7c:0d:8b:89:6a:
                    f6:b3:91:ad:81:5d:31:bc:6a:50:6d:49:b0:2b:42:
                    33:51:14:dd:81:1f:4a:85:f5:44:e3:f1:1b:27:03:
                    b2:db:3d:bc:3a:08:de:f8:c0:61:4e:a6:63:02:ea:
                    07:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B4:04:3A:A9:92:4C:07:04:65:6F:A7:B6:89:87:1E:D8:3E:2B:B0
            X509v3 Authority Key Identifier:
                keyid:07:FC:A7:D1:21:50:90:42:23:88:79:47:19:E0:4D:CE:9A:5F:39:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/07FCA7D1215090422388794719E04DCE9A5F39AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07FCA7D1215090422388794719E04DCE9A5F39AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/323830343a346431383a383030303a3a2f33332d3333203d3e20323637343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d18:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         16:82:77:95:06:89:a4:70:f0:2a:71:fd:1c:55:4d:f7:d6:a1:
         3b:f4:9c:34:ca:e1:91:5a:6d:23:9d:41:df:7e:45:c1:56:db:
         a1:67:ed:ec:3f:02:97:fc:47:a9:e3:41:13:19:ec:18:e4:80:
         e8:fa:4b:3b:b3:d5:e4:b1:68:e1:7d:11:99:f6:49:59:04:0e:
         29:71:45:f4:ba:45:cd:2f:5b:f3:30:9e:8e:08:f0:dc:20:2e:
         8c:0c:24:12:db:13:b6:ba:3b:67:e6:ce:ce:f2:3d:65:7f:9e:
         83:f2:f7:18:e3:ea:6c:de:df:9d:82:76:75:84:47:fd:b7:1d:
         aa:8d:f8:a0:ca:e8:dd:1e:77:c0:33:56:4a:68:28:b1:68:da:
         37:0c:14:c2:39:a9:25:6c:85:01:84:e7:b4:c4:34:bb:ac:85:
         7c:97:7d:e6:16:80:98:f1:75:98:d8:13:e6:4d:1f:58:eb:f4:
         d3:f3:b7:1a:78:11:92:35:68:53:a3:d3:8b:5d:32:f5:6d:a9:
         39:ac:22:d3:c5:69:22:1f:4d:75:fb:df:5d:a0:a7:74:d1:65:
         7e:46:3a:cb:d1:b9:36:c4:86:2e:d4:09:b6:99:a9:45:8f:e5:
         99:d3:ed:1e:fb:ed:aa:84:93:cc:73:ff:75:e0:20:ad:11:ea:
         49:2c:9f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:56:20 2026 by rpki-client