Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a313961613a3a2f34382d3438203d3e20323636363233.roa
File:                     323830343a336564343a313961613a3a2f34382d3438203d3e20323636363233.roa (raw, json)
Hash identifier:          2xFSzgsR6WEhSihphxynjTYkEntVjk4PsMy9dZgOyKs=
Subject key identifier:   C1:84:E4:D9:20:10:10:A7:A9:51:F3:7B:57:72:70:A1:B9:FA:D8:73
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       26C58B920E03FFB3E0F9EBAE4F9019DAD337F547
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a313961613a3a2f34382d3438203d3e20323636363233.roa
Signing time:             Wed 04 Feb 2026 20:00:11 +0000
ROA not before:           Wed 04 Feb 2026 19:55:11 +0000
ROA not after:            Wed 03 Feb 2027 20:00:11 +0000
asID:                     266623
IP address blocks:        2804:3ed4:19aa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c5:8b:92:0e:03:ff:b3:e0:f9:eb:ae:4f:90:19:da:d3:37:f5:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Feb  4 19:55:11 2026 GMT
            Not After : Feb  3 20:00:11 2027 GMT
        Subject: CN=C184E4D9201010A7A951F37B577270A1B9FAD873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:95:5c:20:1b:08:56:16:5d:6d:9c:1c:14:12:
                    13:d8:ce:79:e7:30:df:ec:c5:33:f9:7a:9f:21:63:
                    0c:bb:67:88:08:24:f6:36:2d:44:11:3a:66:d0:3f:
                    3c:53:fc:bd:3c:00:51:fb:af:0a:4e:96:cd:80:5b:
                    7a:31:3d:2d:37:2c:4c:ae:e2:e4:74:06:63:cb:35:
                    b9:71:3b:1a:8c:f1:ff:1f:58:dc:1c:79:57:c6:30:
                    2f:c3:3a:a3:6a:61:8a:fa:92:33:a8:92:cb:bf:76:
                    a6:7a:31:9b:e7:7c:99:e8:ea:10:84:64:6e:2d:1b:
                    fb:ff:e3:af:a8:e6:de:53:c1:05:33:a8:51:7f:83:
                    9c:a3:76:c2:74:69:d9:fc:eb:3b:4d:52:b2:8d:d2:
                    66:86:64:3c:f6:42:43:10:50:dc:87:cb:38:0a:c0:
                    13:8d:cd:59:63:54:69:b0:aa:40:83:61:da:7c:4c:
                    05:7a:db:79:bf:d0:01:02:49:21:cd:14:73:fb:41:
                    ae:b1:d5:ec:05:e0:53:07:a2:d4:69:3e:0b:f6:4c:
                    a7:10:f3:63:00:e8:d3:0a:4b:93:e1:41:51:5b:0a:
                    2a:82:c8:ad:6e:b0:4b:67:4c:0f:9b:09:45:3e:09:
                    53:d5:8e:8f:61:0a:ca:30:d3:24:7d:52:05:64:ee:
                    d6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:84:E4:D9:20:10:10:A7:A9:51:F3:7B:57:72:70:A1:B9:FA:D8:73
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a313961613a3a2f34382d3438203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:19aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:6d:5e:23:12:50:3f:bd:eb:f5:1f:2b:47:61:6f:d7:0d:e0:
         9c:37:b4:62:4e:44:8f:18:2b:00:33:76:8d:0d:a7:cb:00:a3:
         75:0a:a3:d1:16:42:27:86:a2:94:c1:11:e9:af:03:ef:9f:fa:
         1c:ce:44:30:91:bf:c6:8d:fb:79:a2:9e:26:c5:e6:30:58:ea:
         ad:11:9c:4d:09:72:69:90:2d:05:91:2e:a4:ee:87:d2:4e:b5:
         5a:ac:c1:ac:81:d4:0e:80:9a:a3:d2:f4:af:83:28:be:53:df:
         18:2c:ca:ed:e8:d8:08:74:fc:e5:5a:4a:ee:20:c1:39:43:15:
         d2:05:07:84:9d:a6:0e:7f:07:2c:ba:49:2f:de:59:62:2a:4c:
         cb:9e:1b:0e:21:71:e5:24:4a:83:e3:ff:93:2b:cd:53:80:ff:
         8f:bb:ea:6b:ac:c1:fb:82:3e:d8:2c:44:a8:e1:10:91:da:62:
         6b:6a:5e:50:d0:d3:e1:8f:85:90:a4:ce:f3:db:6e:cc:b2:2b:
         b7:8f:ac:f5:9d:e8:0d:8f:19:49:1b:c3:91:1d:97:cf:b8:8e:
         17:52:9a:76:c1:79:f9:25:97:63:30:98:e9:e0:d5:33:7d:36:
         6c:8b:bc:02:64:96:8a:27:73:a6:e7:bc:f4:70:8b:91:09:d8:
         f4:f2:0d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:12:57 2026 by rpki-client