Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a613534363a3a2f34382d3438203d3e20323636363233.roa
File:                     323830343a336564343a613534363a3a2f34382d3438203d3e20323636363233.roa (raw, json)
Hash identifier:          dlrwACLb+o4lPL9QKDDpTSFzBwQKJrQWTMSjTmuKkh4=
Subject key identifier:   38:5F:5D:3D:77:1F:EA:5E:72:A5:19:F5:FF:3A:4B:C7:55:57:EF:BC
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       3B974B2649AEB0D4FB3AB9E008461AC8A82A79D7
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a613534363a3a2f34382d3438203d3e20323636363233.roa
Signing time:             Wed 04 Feb 2026 20:00:14 +0000
ROA not before:           Wed 04 Feb 2026 19:55:14 +0000
ROA not after:            Wed 03 Feb 2027 20:00:14 +0000
asID:                     266623
IP address blocks:        2804:3ed4:a546::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:97:4b:26:49:ae:b0:d4:fb:3a:b9:e0:08:46:1a:c8:a8:2a:79:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Feb  4 19:55:14 2026 GMT
            Not After : Feb  3 20:00:14 2027 GMT
        Subject: CN=385F5D3D771FEA5E72A519F5FF3A4BC75557EFBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:da:2c:1f:30:93:5f:5e:e4:a0:7b:bf:11:fa:
                    08:a4:ff:c1:04:0d:7c:11:44:cd:68:80:25:34:73:
                    c1:44:81:ed:7f:65:46:db:f1:4d:6b:a4:51:ff:6b:
                    47:f2:e9:28:47:9e:18:56:41:c3:50:5d:f7:ea:2d:
                    9a:0d:4c:f1:39:27:41:1b:91:b4:a0:d3:be:ae:14:
                    5f:e5:11:08:24:05:8c:5f:8f:db:48:77:e1:76:d7:
                    3c:a9:2a:4e:94:87:d9:c5:56:df:b4:3f:b9:65:df:
                    29:9c:23:d4:78:54:4d:e2:8f:d3:aa:4a:ec:a7:f2:
                    f4:73:ec:e5:58:3d:63:20:1c:0a:0c:c6:97:fa:ac:
                    ec:e3:f6:ee:96:55:e5:2a:88:96:1b:df:ce:11:43:
                    c8:82:96:12:17:9d:e1:03:91:37:c8:77:87:ba:f3:
                    54:29:d2:0c:f7:f9:0a:4c:92:8f:2b:c0:35:bd:a9:
                    24:c6:a9:eb:34:bd:88:d0:3e:2a:f9:4d:4e:59:1a:
                    8b:3b:f4:8a:ff:0e:91:97:9b:38:28:ac:21:b1:5b:
                    e7:8e:26:32:2c:8a:15:65:54:9f:55:7e:30:68:ba:
                    15:02:52:7a:e5:5c:0f:b0:fe:6b:c8:0c:a1:21:ea:
                    a2:6b:1a:51:13:3f:96:59:9c:88:a2:b7:1a:3b:a0:
                    74:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5F:5D:3D:77:1F:EA:5E:72:A5:19:F5:FF:3A:4B:C7:55:57:EF:BC
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a613534363a3a2f34382d3438203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:a546::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:db:24:a3:04:76:a1:93:6f:49:d9:f3:7e:90:01:b5:69:44:
         12:ad:4f:7b:2a:48:e6:77:13:df:9d:4a:bc:72:86:f0:62:36:
         9a:53:02:02:e9:fb:50:cf:ea:65:70:48:f2:2f:7e:c5:f4:c2:
         18:a0:25:e8:a7:f6:29:56:84:93:fc:a7:33:ab:da:7f:53:66:
         23:ba:d2:e4:4f:10:26:d3:dd:29:e5:64:b1:83:f1:d1:18:30:
         56:29:29:da:be:6b:0f:a9:5b:d7:ba:4a:e7:02:ac:45:a3:e2:
         b7:83:ce:c2:2b:b7:1d:99:e3:85:a2:cc:e4:31:80:5e:ea:fa:
         41:ad:33:1c:4e:de:45:44:d2:43:6b:5f:2e:17:eb:9c:12:3c:
         db:8b:df:cf:b2:bc:75:6b:d7:74:da:c2:94:43:ab:12:6b:22:
         61:b9:9a:97:ca:af:36:99:1b:1c:ff:f7:bd:f7:13:dd:61:c8:
         a4:aa:4d:c4:69:72:28:e4:aa:50:3e:c8:11:d2:eb:2a:55:67:
         0a:7d:d0:fe:bd:af:3b:e5:e5:41:0e:74:42:e1:e3:7d:71:50:
         90:b1:5d:33:3b:d7:ac:5b:5c:d0:39:72:06:8a:45:f3:60:8d:
         b7:19:84:c0:21:ae:03:6a:5f:4c:aa:55:11:e1:8c:f2:99:ff:
         f5:05:10:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:50:46 2026 by rpki-client