Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/1/323830343a356338383a3a2f33322d3332203d3e20323638393134.roa
File:                     323830343a356338383a3a2f33322d3332203d3e20323638393134.roa (raw, json)
Hash identifier:          z2NcFi3b0SZcVlTgdJfJfhDIzMuNKBMFbt40dGfhXyc=
Subject key identifier:   9B:A7:7C:75:8B:B4:3B:17:0B:64:46:A4:11:EB:6F:AA:19:D5:D8:59
Certificate issuer:       /CN=664ECD11C7854B58DE31D22E52A7CAC4A9DCAB5C
Certificate serial:       67B677EEF3F52D5CAA1ED962966927E107E5D098
Authority key identifier: 66:4E:CD:11:C7:85:4B:58:DE:31:D2:2E:52:A7:CA:C4:A9:DC:AB:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/664ECD11C7854B58DE31D22E52A7CAC4A9DCAB5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/1/323830343a356338383a3a2f33322d3332203d3e20323638393134.roa
Signing time:             Mon 12 Jan 2026 17:57:33 +0000
ROA not before:           Mon 12 Jan 2026 17:52:33 +0000
ROA not after:            Mon 11 Jan 2027 17:57:33 +0000
asID:                     268914
IP address blocks:        2804:5c88::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/1/664ECD11C7854B58DE31D22E52A7CAC4A9DCAB5C.crl
                          rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/1/664ECD11C7854B58DE31D22E52A7CAC4A9DCAB5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/664ECD11C7854B58DE31D22E52A7CAC4A9DCAB5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 05:27:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b6:77:ee:f3:f5:2d:5c:aa:1e:d9:62:96:69:27:e1:07:e5:d0:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=664ECD11C7854B58DE31D22E52A7CAC4A9DCAB5C
        Validity
            Not Before: Jan 12 17:52:33 2026 GMT
            Not After : Jan 11 17:57:33 2027 GMT
        Subject: CN=9BA77C758BB43B170B6446A411EB6FAA19D5D859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:87:01:71:b0:a1:e5:58:3b:3f:9e:f0:19:83:
                    8d:d1:81:43:dd:7e:34:71:03:6d:b9:13:46:bc:1e:
                    30:1f:de:e6:c2:bd:79:7e:69:04:ad:3a:18:07:ec:
                    67:cc:00:7f:ab:73:d0:70:28:a7:45:f2:43:c3:43:
                    af:a9:f2:3a:46:de:dd:c1:ed:f1:c4:87:c6:3f:6c:
                    f8:64:35:56:af:f3:f4:65:93:43:43:0f:43:ef:45:
                    fd:ba:46:5c:cb:d8:8a:84:a1:42:16:02:48:22:0f:
                    d9:2d:c7:0b:d7:c1:9c:bf:c8:15:58:b1:24:57:41:
                    81:68:4e:98:5e:3c:b6:3a:b6:8f:76:40:ed:f9:b3:
                    e4:3d:06:88:bd:30:33:53:56:44:28:16:f1:88:3f:
                    6a:f5:ce:35:96:b8:9f:d4:98:e6:1b:25:99:1a:81:
                    d7:09:87:42:90:12:dc:48:e7:d3:5e:68:2f:0a:3f:
                    f3:8b:6d:92:10:b7:b5:a9:c6:2b:20:6e:c1:4b:29:
                    bf:88:f4:75:2c:8d:27:5e:b4:3c:c4:85:a0:53:70:
                    2d:ca:db:9e:f1:b2:37:62:5d:fe:e8:a3:8f:38:ed:
                    df:a9:b1:53:dd:84:25:2c:a6:9b:d0:5e:a0:99:b2:
                    1c:19:a2:61:46:c8:1d:88:2d:5e:f6:8b:87:b8:0e:
                    05:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A7:7C:75:8B:B4:3B:17:0B:64:46:A4:11:EB:6F:AA:19:D5:D8:59
            X509v3 Authority Key Identifier:
                keyid:66:4E:CD:11:C7:85:4B:58:DE:31:D2:2E:52:A7:CA:C4:A9:DC:AB:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/1/664ECD11C7854B58DE31D22E52A7CAC4A9DCAB5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/664ECD11C7854B58DE31D22E52A7CAC4A9DCAB5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/1/323830343a356338383a3a2f33322d3332203d3e20323638393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c88::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:e0:a5:b2:ea:41:38:2c:3e:09:8d:ff:6e:ad:d3:1a:0a:d6:
         9e:34:93:4c:61:1c:1b:13:ea:e9:d6:d6:0a:34:70:79:1d:56:
         db:d5:7c:bb:85:df:16:f2:97:66:08:e0:28:8e:14:74:c1:18:
         7d:84:0a:de:83:fe:b7:70:07:46:6c:6e:b0:c5:1f:31:6a:e5:
         0e:3c:38:7d:b4:6b:4b:77:b1:c6:ef:85:52:e7:0a:06:b3:38:
         b6:fd:e5:a7:17:98:59:d4:6a:65:a2:83:f7:75:23:b8:f3:f4:
         fe:76:23:df:63:8b:02:26:3a:a6:82:ab:57:6b:f8:ad:66:56:
         cc:22:8e:1b:eb:4a:47:36:93:27:db:b0:81:46:29:f5:35:b1:
         7e:c4:32:de:37:31:13:7e:64:5d:a6:94:b5:02:0b:23:10:e6:
         53:29:47:22:7f:0b:6f:55:7e:1a:d2:e3:c5:92:fa:fb:6d:4b:
         c9:33:12:60:ef:d2:eb:1b:eb:b9:43:eb:25:c1:1e:d5:02:77:
         b6:04:a3:21:a1:f3:40:3b:86:24:81:9c:aa:4b:bf:8d:8c:ce:
         a4:5f:2c:71:b8:d7:36:e2:d7:31:4b:9d:2c:62:b1:43:aa:53:
         fc:4b:12:ee:9b:3f:20:fc:f4:ae:61:f4:db:43:d3:74:31:58:
         bf:14:6c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:45:29 2026 by rpki-client