Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a3a2f33332d3333203d3e20323636363233.roa
File:                     323830343a336564343a3a2f33332d3333203d3e20323636363233.roa (raw, json)
Hash identifier:          Z6gUHFw70CYdsJJ2ZqaXpA2uEJVr8bUXdo4o+cyFiKQ=
Subject key identifier:   B5:A3:5C:57:F1:9D:93:E7:FD:D0:79:D3:22:4D:43:43:BF:C0:D5:18
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       4AC8E285868DBC39501DCF57927A3EB196DBCFBD
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a3a2f33332d3333203d3e20323636363233.roa
Signing time:             Wed 04 Feb 2026 20:00:14 +0000
ROA not before:           Wed 04 Feb 2026 19:55:14 +0000
ROA not after:            Wed 03 Feb 2027 20:00:14 +0000
asID:                     266623
IP address blocks:        2804:3ed4::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c8:e2:85:86:8d:bc:39:50:1d:cf:57:92:7a:3e:b1:96:db:cf:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Feb  4 19:55:14 2026 GMT
            Not After : Feb  3 20:00:14 2027 GMT
        Subject: CN=B5A35C57F19D93E7FDD079D3224D4343BFC0D518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8f:a8:63:e9:a8:c1:8e:0c:50:cb:de:cc:51:
                    07:1e:05:34:43:39:8b:21:57:67:cb:b2:cd:05:af:
                    b7:f4:6a:e4:6a:23:6a:9d:7a:7e:41:91:a1:b6:94:
                    5c:60:fe:a5:94:11:0b:ff:37:9b:fb:64:28:ea:86:
                    33:11:e7:ee:46:11:f6:c1:1c:56:af:19:e0:77:fc:
                    87:3f:e4:43:a8:57:bb:9b:ee:f9:c0:07:80:b5:09:
                    c3:e0:31:2d:67:a8:e4:6b:62:8e:5e:ca:06:b7:04:
                    a8:f3:0b:56:66:7b:97:9e:22:7e:f4:b1:7b:ee:ff:
                    25:2b:53:5a:62:7d:d1:b4:ff:e7:d8:09:95:46:33:
                    2f:3c:61:3e:ee:9d:59:31:e9:57:a1:f7:f9:4d:76:
                    e1:d2:31:8c:85:d1:36:4f:81:e5:c3:97:68:1f:d7:
                    ca:9d:3c:d9:b2:ac:65:5e:a6:e0:e0:1b:7a:60:08:
                    23:36:90:07:72:ec:3d:f4:89:39:9e:8d:69:5f:d3:
                    60:de:df:de:6b:8c:2c:7a:07:1a:08:8a:0d:3b:d5:
                    67:8b:bf:a6:e8:15:46:39:fa:13:2e:9a:67:09:a9:
                    3e:55:7f:b3:e2:91:c6:67:98:6c:d2:c6:31:73:9c:
                    5e:1d:98:c9:82:59:b6:2c:17:c7:7e:a3:79:af:e5:
                    44:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A3:5C:57:F1:9D:93:E7:FD:D0:79:D3:22:4D:43:43:BF:C0:D5:18
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a3a2f33332d3333203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4::/33

    Signature Algorithm: sha256WithRSAEncryption
         87:c1:31:80:0e:a4:dd:cb:ea:f4:cd:ca:93:44:d8:f1:bc:02:
         9a:9c:b9:2d:96:f1:00:a4:87:af:8f:42:69:12:44:94:d6:46:
         ee:78:a5:be:fb:90:4a:d6:59:7f:d0:b2:ce:93:c7:92:78:72:
         16:3a:75:e2:df:0e:a8:c3:0b:99:10:86:6d:7c:ee:9a:62:e3:
         a4:7d:73:14:0c:01:bf:cd:73:ec:9a:ba:e4:26:e2:fa:4d:85:
         c0:61:ef:62:7f:63:6b:be:11:9f:91:45:89:e0:98:2c:b8:0e:
         a5:07:00:d0:f6:44:41:ac:d8:83:55:1f:80:f8:8c:48:26:2d:
         41:0d:ea:4d:c3:9c:5b:19:e4:75:0e:fa:79:65:c2:2c:b2:7d:
         d7:41:a7:97:bd:36:1d:c5:4e:3b:22:2a:39:60:2b:6d:4d:7c:
         8d:a8:bf:b9:f2:43:f0:c4:20:d3:59:cc:eb:42:4a:e7:2d:03:
         3e:e3:41:58:06:f8:6d:a6:fb:c8:09:a4:2b:45:84:9a:5e:29:
         ed:1f:3b:6b:ff:5a:02:c6:f1:96:a0:9d:f1:51:ae:bf:12:de:
         b0:2e:77:84:1c:06:76:e1:0a:77:0b:71:72:0f:54:dd:96:60:
         39:f7:ad:3b:a8:bd:57:b0:3e:57:5c:cf:3f:5c:a7:da:63:35:
         c8:1c:9e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:49:02 2026 by rpki-client