Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/323830343a316538383a3a2f33322d3430203d3e20323634343334.roa
File:                     323830343a316538383a3a2f33322d3430203d3e20323634343334.roa (raw, json)
Hash identifier:          KyQNarjvDWxk/rAiPwhPt25vESkKyKgZTOAT07PMruE=
Subject key identifier:   41:AB:52:8C:6B:67:28:38:21:01:84:D4:61:48:B0:11:8D:49:44:4E
Certificate issuer:       /CN=37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3
Certificate serial:       08D63FF7B780625E0F5927BA88E7B7E12E5D8D64
Authority key identifier: 37:B0:CE:78:D8:38:B2:0B:91:5D:43:A1:A6:B7:F4:8D:3A:B1:B2:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/323830343a316538383a3a2f33322d3430203d3e20323634343334.roa
Signing time:             Thu 05 Feb 2026 04:29:14 +0000
ROA not before:           Thu 05 Feb 2026 04:24:14 +0000
ROA not after:            Thu 04 Feb 2027 04:29:14 +0000
asID:                     264434
IP address blocks:        2804:1e88::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.crl
                          rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:12:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d6:3f:f7:b7:80:62:5e:0f:59:27:ba:88:e7:b7:e1:2e:5d:8d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3
        Validity
            Not Before: Feb  5 04:24:14 2026 GMT
            Not After : Feb  4 04:29:14 2027 GMT
        Subject: CN=41AB528C6B672838210184D46148B0118D49444E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6e:32:93:45:47:7b:9f:28:37:f2:12:0a:94:
                    01:41:c7:63:3e:df:fd:f9:f6:ab:1b:e9:de:b0:3c:
                    90:45:77:96:53:70:21:2b:60:7e:05:bb:c9:3b:55:
                    15:14:d6:a1:df:51:d3:94:05:1b:9d:33:5d:c7:f9:
                    33:95:a6:78:b4:a5:e5:9b:01:46:e3:1c:f6:c5:c5:
                    0a:44:62:ce:70:43:32:4b:bd:95:cc:63:bd:07:44:
                    9b:ce:0a:ac:ca:b5:ff:43:b9:1a:ad:d8:68:8c:a7:
                    15:e4:1a:0e:f8:bc:44:a0:85:4f:7b:53:f8:49:40:
                    32:32:27:04:cf:2c:15:51:f9:24:11:47:82:a0:ac:
                    d8:e7:e4:97:6d:f0:2b:f4:78:6d:86:84:df:45:97:
                    62:3a:95:27:69:83:eb:95:db:37:92:44:53:b4:d8:
                    d5:82:25:f1:7a:be:92:f7:0f:3a:49:62:ff:95:15:
                    82:1e:5a:0c:fa:df:49:a6:df:60:c0:1f:39:aa:6d:
                    d5:9c:7e:25:1a:ee:52:3c:5a:91:b3:96:e0:65:e5:
                    0b:f4:66:bd:9e:c0:66:5e:83:51:d1:ff:2b:89:44:
                    89:26:02:8d:cd:bf:82:fc:24:a6:f6:bb:95:41:ce:
                    b5:43:8e:ee:64:36:a4:46:29:dd:17:13:51:09:13:
                    be:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AB:52:8C:6B:67:28:38:21:01:84:D4:61:48:B0:11:8D:49:44:4E
            X509v3 Authority Key Identifier:
                keyid:37:B0:CE:78:D8:38:B2:0B:91:5D:43:A1:A6:B7:F4:8D:3A:B1:B2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/323830343a316538383a3a2f33322d3430203d3e20323634343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e88::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:84:e9:e3:c9:00:de:f6:b5:29:d9:65:87:fd:82:01:7f:9d:
         2b:e0:fd:53:b6:66:df:26:24:2f:9c:bb:a5:e5:5f:18:1e:bd:
         2a:ec:6f:bb:06:3f:4d:b4:b8:8f:48:83:9c:e9:b7:82:d6:dd:
         cd:ac:3a:0d:8e:ec:03:57:f2:73:e0:d3:2a:8b:7e:d6:0b:5b:
         bc:69:bc:bc:a6:f2:b5:63:c2:67:da:dd:6a:08:2d:ec:b2:0e:
         c4:22:8d:dd:c0:fb:86:d3:43:33:51:9a:3a:7d:25:bf:ca:6c:
         27:d5:19:52:33:9a:82:bc:8c:87:7a:b3:8f:1e:b7:39:c3:27:
         1a:a6:c2:5f:92:cd:f3:05:64:a3:e7:c2:5c:db:b9:24:c6:91:
         07:a5:ef:da:9e:9f:ff:b8:18:cc:ca:3e:f8:f2:24:a2:8e:80:
         03:77:67:ea:58:3d:18:85:b6:99:88:d8:9a:d1:dd:55:ea:e5:
         f2:ca:0f:76:13:85:65:c8:91:84:43:c4:40:fa:69:14:dc:07:
         03:66:9a:40:66:bc:e0:54:6b:78:c8:f5:5b:59:3d:85:a2:5c:
         2e:f1:1d:ce:ae:ee:da:79:a9:8c:b5:c6:3b:9f:49:09:3b:d4:
         ed:95:73:24:4c:31:67:ef:ce:02:34:6b:5a:77:de:2c:64:e7:
         cf:51:1e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:23:28 2026 by rpki-client