Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a383030303a3a2f33342d3334203d3e20323632363432.roa
File:                     323830343a326561383a383030303a3a2f33342d3334203d3e20323632363432.roa (raw, json)
Hash identifier:          Gb64+blOhiAgqfEwT6hvuhO0eS+lJa23mjjJ9zRE3h0=
Subject key identifier:   3A:65:54:55:F2:E7:26:DD:8F:95:94:04:5A:E9:1F:AC:F7:AB:FA:7D
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       1D195AD0578C92E9CB73034428A827627EA3E850
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a383030303a3a2f33342d3334203d3e20323632363432.roa
Signing time:             Thu 05 Feb 2026 04:43:40 +0000
ROA not before:           Thu 05 Feb 2026 04:38:40 +0000
ROA not after:            Thu 04 Feb 2027 04:43:40 +0000
asID:                     262642
IP address blocks:        2804:2ea8:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:19:5a:d0:57:8c:92:e9:cb:73:03:44:28:a8:27:62:7e:a3:e8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Feb  5 04:38:40 2026 GMT
            Not After : Feb  4 04:43:40 2027 GMT
        Subject: CN=3A655455F2E726DD8F9594045AE91FACF7ABFA7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fe:b0:94:9d:3e:f4:ef:f9:9a:14:cc:ac:db:
                    be:80:0f:0d:d8:5e:1d:b7:d6:52:8f:96:60:f4:87:
                    7b:5a:29:c9:3a:0a:a0:da:fc:f8:28:9f:5b:02:3d:
                    4e:62:17:b8:ef:ea:1d:75:b7:b7:98:15:75:e0:5f:
                    3b:7a:6e:71:41:6e:50:e6:e3:bb:75:2d:df:7d:2c:
                    0c:91:81:64:25:80:67:f5:75:20:a4:3b:79:ab:be:
                    9b:fd:a8:b2:33:43:15:12:f5:5f:b3:3d:02:80:ee:
                    0e:38:e1:21:10:db:e1:04:b5:f5:d0:2e:c5:78:15:
                    5b:07:e7:d6:ab:59:0c:55:9f:52:f1:8e:c0:47:9d:
                    35:8a:c7:43:85:54:ed:69:ee:fd:3a:1d:3e:33:b9:
                    85:bc:79:f8:86:c8:cb:67:0f:53:62:8e:b1:43:e2:
                    00:e9:18:88:09:9e:30:e8:26:b1:b4:13:9d:dd:36:
                    00:0c:c0:4a:b6:32:99:7e:9a:48:72:f8:3d:46:d8:
                    05:43:82:e0:e6:0f:09:e3:db:6d:d8:a0:99:1e:6f:
                    a6:66:4d:72:95:39:97:03:ee:55:e4:83:d7:17:12:
                    35:8b:90:a8:d1:a8:48:e7:d9:57:3a:d8:cb:cf:ed:
                    1b:6a:63:e9:97:93:0e:e1:79:c7:58:59:74:51:2e:
                    33:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:65:54:55:F2:E7:26:DD:8F:95:94:04:5A:E9:1F:AC:F7:AB:FA:7D
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a383030303a3a2f33342d3334203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ea8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a9:28:59:43:6f:43:10:ef:46:b5:7c:90:c4:8e:15:d0:c5:e0:
         e1:ae:f1:85:f1:fd:70:b5:68:3e:a1:9a:49:c0:92:f7:cb:1d:
         cf:3a:07:dc:76:b5:09:c1:78:f2:10:77:b6:4c:21:98:be:b9:
         12:81:b8:a7:26:a8:a3:c1:da:0e:89:19:d8:9c:7f:0c:c1:d9:
         be:7e:95:c0:7e:b7:fb:8d:bc:7a:24:a4:c3:ec:11:c1:fe:10:
         6c:4d:f4:18:21:20:dd:8a:6c:e1:84:f1:3d:ea:a7:f9:fa:b9:
         6e:51:00:92:aa:ff:46:81:d3:48:4a:f0:88:bb:a1:d1:c1:1f:
         68:4e:a1:b5:fe:57:64:9a:fd:6e:db:2f:b7:49:0a:e8:29:f5:
         c9:80:52:39:b3:30:14:b7:e9:be:ea:73:4b:17:6f:59:92:45:
         c1:45:16:73:ab:e3:1c:9f:55:2b:2a:f0:70:bc:bf:57:17:90:
         60:b2:19:18:7a:5d:43:e9:da:f0:c0:78:f8:bd:de:f8:d0:98:
         5c:98:fb:7f:60:90:73:6d:45:d0:06:a3:49:97:77:95:23:81:
         4d:2b:38:d8:ae:3d:9e:3e:35:be:6a:ac:14:cd:05:38:8a:a6:
         61:59:5d:5c:9c:ae:82:29:4c:c4:1b:55:58:78:b2:f4:eb:fb:
         0c:f8:2a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:12:38 2026 by rpki-client