Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/323830343a343631383a323130303a3a2f34302d3430203d3e20323636393638.roa
File:                     323830343a343631383a323130303a3a2f34302d3430203d3e20323636393638.roa (raw, json)
Hash identifier:          bUQSDlF5xwC5wT/6rIlWA5gDSSANzZDJYLvb5r1EL5Q=
Subject key identifier:   49:57:A8:BD:5B:4C:B7:46:60:1A:38:C2:00:4A:79:93:44:33:70:9F
Certificate issuer:       /CN=A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4
Certificate serial:       126D8594F8C6A22A5587041AD9B6214A2A5591A1
Authority key identifier: A6:53:12:DF:E9:3D:F2:E9:A1:10:9A:17:CD:E8:A7:C0:7F:71:F2:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/323830343a343631383a323130303a3a2f34302d3430203d3e20323636393638.roa
Signing time:             Thu 05 Feb 2026 04:46:12 +0000
ROA not before:           Thu 05 Feb 2026 04:41:12 +0000
ROA not after:            Thu 04 Feb 2027 04:46:12 +0000
asID:                     266968
IP address blocks:        2804:4618:2100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.crl
                          rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 16:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:6d:85:94:f8:c6:a2:2a:55:87:04:1a:d9:b6:21:4a:2a:55:91:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4
        Validity
            Not Before: Feb  5 04:41:12 2026 GMT
            Not After : Feb  4 04:46:12 2027 GMT
        Subject: CN=4957A8BD5B4CB746601A38C2004A79934433709F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:4b:00:5b:e5:f9:a4:c3:91:18:da:7d:45:
                    d9:0f:99:f8:69:f2:b6:67:76:12:ed:b6:ae:11:3a:
                    81:0c:c1:cb:f6:7e:5e:6e:48:54:15:80:73:1c:c2:
                    82:6c:6f:e1:88:36:7d:c6:39:e3:64:c2:f1:9c:df:
                    4b:a7:0d:ea:93:78:9f:47:8f:0a:ca:06:ec:04:c8:
                    fd:37:36:93:56:83:e0:56:43:f2:d3:33:0b:c1:ed:
                    63:e7:00:91:c0:69:48:c7:c1:97:63:6e:19:60:b4:
                    76:4a:07:55:f7:a4:30:be:02:2b:07:54:2c:c4:82:
                    e6:b7:48:04:3a:cf:4a:ac:0c:76:9b:75:b1:f0:2f:
                    c2:c2:11:fd:59:76:fb:64:80:0e:bc:11:31:c7:03:
                    ed:93:03:21:9f:d0:13:6e:a8:7c:7d:8d:98:f7:49:
                    ac:73:c1:ee:0e:de:6b:d0:5c:ea:82:5d:e1:a1:cf:
                    26:b1:bd:17:f2:af:10:e5:ca:69:83:96:bb:63:15:
                    79:2a:0b:c9:6d:07:3d:10:e3:ff:a8:cc:9a:83:6e:
                    51:b5:45:a4:c4:73:7e:5e:6d:58:85:9e:49:99:33:
                    6c:17:f4:8f:db:ff:bd:4b:bb:ce:d4:4d:98:0f:38:
                    19:61:44:ba:0f:6f:82:77:d3:f1:e0:92:17:e3:e9:
                    94:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:57:A8:BD:5B:4C:B7:46:60:1A:38:C2:00:4A:79:93:44:33:70:9F
            X509v3 Authority Key Identifier:
                keyid:A6:53:12:DF:E9:3D:F2:E9:A1:10:9A:17:CD:E8:A7:C0:7F:71:F2:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/323830343a343631383a323130303a3a2f34302d3430203d3e20323636393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4618:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5b:a0:3f:24:25:14:90:77:e7:f4:6a:fd:63:87:43:33:be:4d:
         49:39:86:4d:03:10:07:7b:cb:c4:7f:fa:7e:17:f0:bf:a3:9e:
         fd:ea:1f:11:c7:76:8f:fb:ac:47:a8:98:ea:a9:0a:91:b0:10:
         46:55:0e:d1:b5:f4:1d:3e:8b:6e:c8:63:e4:60:b4:bc:f4:88:
         b5:54:10:97:60:8b:d8:e1:70:5c:3b:20:ec:52:2e:61:e1:8d:
         d8:01:5a:af:94:14:fa:fc:bc:d7:1f:15:c0:7d:73:42:9d:a8:
         81:8e:d3:ce:87:c0:f2:2b:67:ea:90:8b:3a:3a:42:05:9b:ba:
         4f:84:a7:cf:1c:26:aa:f8:ca:ee:26:69:be:b3:c2:39:0f:ac:
         1a:7d:a0:1f:50:b8:eb:e1:aa:19:a8:48:5b:1d:1b:db:cc:0e:
         87:f2:6b:e5:4c:fb:9e:42:b5:0b:25:94:4c:24:98:0d:58:7c:
         82:86:e4:2a:bd:1c:c8:82:5d:ca:c4:4a:a0:6d:84:c1:2b:de:
         82:2c:0a:a0:f4:7e:1c:8f:14:bc:16:51:ba:f7:17:90:a6:34:
         2c:b1:9a:78:87:5b:eb:24:78:b8:c4:ed:0f:bc:28:fc:b9:c0:
         93:20:5d:4b:b4:23:ae:42:9f:58:4e:35:bf:24:3b:9b:91:79:
         6b:1e:a7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:55:31 2026 by rpki-client