Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a3a2f33322d3332203d3e20323632363432.roa
File:                     323830343a326561383a3a2f33322d3332203d3e20323632363432.roa (raw, json)
Hash identifier:          oZp7gX/T5h0uMlkHouxijNnGnI9kb6ur+1JeJ5UssvE=
Subject key identifier:   6F:B6:BB:57:AA:B7:9E:3A:CC:E5:27:2F:AE:11:FD:3C:78:1C:CA:4B
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       61FA1E5D0E612FD0708F61C946DB89997E5E4D94
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a3a2f33322d3332203d3e20323632363432.roa
Signing time:             Thu 05 Feb 2026 04:43:35 +0000
ROA not before:           Thu 05 Feb 2026 04:38:35 +0000
ROA not after:            Thu 04 Feb 2027 04:43:35 +0000
asID:                     262642
IP address blocks:        2804:2ea8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:fa:1e:5d:0e:61:2f:d0:70:8f:61:c9:46:db:89:99:7e:5e:4d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Feb  5 04:38:35 2026 GMT
            Not After : Feb  4 04:43:35 2027 GMT
        Subject: CN=6FB6BB57AAB79E3ACCE5272FAE11FD3C781CCA4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:08:6d:2f:67:f5:d7:71:74:da:c6:06:30:c0:
                    6a:04:16:21:ff:94:41:40:9a:77:a0:8d:41:fd:bd:
                    ac:d0:2f:ea:7f:fd:a2:21:38:2c:76:70:bf:b6:03:
                    5b:20:fb:b9:12:a2:69:6d:f3:4c:1e:68:de:25:58:
                    ca:38:50:20:b7:c7:29:1a:ed:75:0e:5c:95:3f:07:
                    8e:8d:8f:5c:b3:aa:27:c8:2a:94:a3:a6:de:7e:d4:
                    81:1b:03:ab:75:ad:12:8a:a3:47:37:6f:dd:d0:c9:
                    c3:1f:fc:77:cf:8b:3c:f9:1d:7c:38:6b:e8:81:4e:
                    98:1f:f7:e7:d6:35:05:7c:48:2d:62:71:ff:28:85:
                    4c:54:fe:8b:98:a1:77:34:a0:0d:20:1e:0d:40:c3:
                    0b:40:0a:95:4c:f4:9f:8e:1d:a2:c7:ca:49:fb:79:
                    1c:26:0e:2e:2b:9f:62:cf:df:60:f6:61:89:5c:2a:
                    65:63:4b:b8:80:2e:46:0e:b2:44:4f:62:a5:19:e5:
                    3d:a3:17:cf:03:83:50:38:ef:fd:fc:4d:9f:13:da:
                    8b:e9:95:5b:67:23:e6:31:a8:74:e3:37:26:a7:e4:
                    26:63:f7:64:91:32:07:11:85:b8:69:61:de:ee:d5:
                    23:c6:9e:40:93:fc:b7:b3:79:a5:6f:51:c4:53:fc:
                    13:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B6:BB:57:AA:B7:9E:3A:CC:E5:27:2F:AE:11:FD:3C:78:1C:CA:4B
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a3a2f33322d3332203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ea8::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:5e:77:76:0a:b9:59:c5:c7:9e:94:61:48:6c:17:4c:a9:ae:
         c8:b1:67:6d:5a:b3:32:ca:eb:ab:42:06:c9:11:94:81:e6:55:
         f1:f9:21:1d:e9:53:8c:af:19:0f:0d:44:6f:8e:c8:92:af:90:
         7f:42:35:27:81:6e:f2:40:ec:ef:05:da:28:c6:0f:6d:dd:00:
         1c:8f:92:68:19:54:59:ed:a9:b9:f4:03:09:ff:2b:c9:8e:49:
         81:51:bf:b2:45:4f:67:86:88:2e:eb:c4:35:5a:f5:93:47:1b:
         dd:55:c0:ae:1d:ed:a9:05:75:62:39:2d:68:08:56:c2:da:cb:
         79:28:54:01:5c:cf:8d:ce:8e:5f:cf:34:d7:44:69:7e:bc:3d:
         12:c9:96:8c:19:82:07:22:f5:44:92:c3:04:b4:91:65:b5:cb:
         e0:10:6e:c5:72:75:23:4f:3f:5f:4c:a0:ed:11:28:48:0a:27:
         da:13:e8:0e:9b:02:12:51:82:1e:4b:4b:c4:b4:55:d1:22:97:
         55:5a:fc:ba:07:9a:ac:01:18:38:2b:9f:cd:9f:38:93:9a:70:
         04:b6:8c:65:d0:29:42:2e:49:33:bd:bf:51:b6:80:c6:92:d5:
         36:82:81:ef:9b:60:18:4b:fb:62:58:d4:31:13:93:88:b0:7b:
         11:f0:ff:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:45:38 2026 by rpki-client