Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a633030303a3a2f33342d3334203d3e20323636363233.roa
File:                     323830343a336564343a633030303a3a2f33342d3334203d3e20323636363233.roa (raw, json)
Hash identifier:          MTiQXgkBRCb3W0hltkGx5C4FkHGGB4iYD428MiHFxJg=
Subject key identifier:   B2:F8:5C:B9:58:AA:69:92:B7:E0:ED:53:4C:69:EF:46:4E:96:B4:D1
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       6A58A67908B94277727EF8534CF9B0B5B4BA0E93
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a633030303a3a2f33342d3334203d3e20323636363233.roa
Signing time:             Wed 04 Feb 2026 20:00:15 +0000
ROA not before:           Wed 04 Feb 2026 19:55:15 +0000
ROA not after:            Wed 03 Feb 2027 20:00:15 +0000
asID:                     266623
IP address blocks:        2804:3ed4:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:58:a6:79:08:b9:42:77:72:7e:f8:53:4c:f9:b0:b5:b4:ba:0e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Feb  4 19:55:15 2026 GMT
            Not After : Feb  3 20:00:15 2027 GMT
        Subject: CN=B2F85CB958AA6992B7E0ED534C69EF464E96B4D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dc:6b:e6:03:fb:42:52:ae:ea:ee:88:9e:ed:
                    49:89:f6:c9:b9:2f:ac:dd:6f:34:42:27:69:ca:c6:
                    2d:da:76:c5:d3:97:e2:15:ef:74:01:01:18:5c:83:
                    6f:f5:80:30:eb:d6:d7:5d:e7:1a:e5:36:bb:7c:a2:
                    70:bd:1a:dc:84:9b:5e:59:eb:f4:34:de:5f:08:9a:
                    7d:f3:e6:ad:6f:40:bc:cb:72:e8:69:28:1a:ac:51:
                    f6:2a:39:96:53:43:db:d7:e0:04:72:1e:7f:b7:98:
                    dc:01:c9:72:c0:45:81:a8:e4:ed:c9:5f:1f:f6:78:
                    95:d4:99:3d:24:2f:19:0c:07:7d:13:6f:06:a2:c6:
                    5f:db:2e:b2:16:fa:e4:19:a2:b7:e3:c4:8a:98:49:
                    89:cc:49:4a:2d:28:77:4b:84:81:2c:f7:77:8f:3e:
                    36:f2:6c:9b:79:e8:fa:2e:1e:67:df:e4:4a:e4:f1:
                    72:16:2f:00:94:10:ae:22:12:75:61:fc:8c:48:ba:
                    dd:a0:94:42:21:6c:f8:1a:65:bf:48:cc:af:07:2c:
                    8b:52:da:22:80:07:85:52:27:24:93:7e:e7:71:52:
                    33:7a:06:ea:1e:40:bf:a0:4a:39:92:64:7d:07:44:
                    b5:2f:8a:17:a4:d5:cb:74:b1:7f:16:1c:66:41:88:
                    78:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F8:5C:B9:58:AA:69:92:B7:E0:ED:53:4C:69:EF:46:4E:96:B4:D1
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a633030303a3a2f33342d3334203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         76:25:0b:31:19:fc:5e:6a:16:64:75:48:c3:8a:61:67:f3:3f:
         4a:7c:61:54:7e:a0:d1:a7:b3:8b:41:09:2e:4e:f1:ed:8d:7c:
         83:81:97:10:2e:c0:65:14:99:20:10:72:c7:ae:b0:9c:1f:17:
         6b:7b:fd:bf:b3:c3:de:d5:7f:47:ff:26:bf:e8:f6:78:47:79:
         a5:76:25:6a:24:b7:71:a7:29:2c:04:8e:75:49:b3:1c:d2:0e:
         c5:3c:a7:a8:08:1a:26:3d:b1:4f:52:77:c5:f4:49:7a:8e:68:
         7d:20:16:99:e5:fd:f7:97:e8:81:a4:c2:fa:e1:01:6a:22:02:
         8a:2d:a7:ab:be:57:76:58:7a:8c:0e:01:db:e4:23:1a:34:5a:
         39:ad:4c:de:38:1b:b4:c8:1d:22:90:6f:41:c8:e0:22:9e:a9:
         1a:12:e6:2b:18:4b:af:2a:97:16:ff:58:66:7e:07:1d:9f:ee:
         b4:55:4c:12:7a:e9:11:88:09:e2:f6:4d:00:06:d4:ea:51:d5:
         09:87:e6:f2:5c:e8:a3:3d:46:67:1a:18:4e:7c:66:46:a8:39:
         20:bd:f2:c1:d8:07:83:44:4a:ca:06:02:30:c5:fb:0e:0b:ee:
         6a:d2:ca:6f:d5:d5:49:ca:7f:65:aa:32:39:c7:ca:25:39:0b:
         91:22:d3:bf
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUalimeQi5QndyfvhTTPmwtbS6DpMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEzNzY2RUQ3MDNBNEE5RTlDQTQzN0YzRTdGREIyREI1
RThDOEE3ODAeFw0yNjAyMDQxOTU1MTVaFw0yNzAyMDMyMDAwMTVaMDMxMTAvBgNV
BAMTKEIyRjg1Q0I5NThBQTY5OTJCN0UwRUQ1MzRDNjlFRjQ2NEU5NkI0RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC73GvmA/tCUq7q7oie7UmJ9sm5
L6zdbzRCJ2nKxi3adsXTl+IV73QBARhcg2/1gDDr1tdd5xrlNrt8onC9GtyEm15Z
6/Q03l8Imn3z5q1vQLzLcuhpKBqsUfYqOZZTQ9vX4ARyHn+3mNwByXLARYGo5O3J
Xx/2eJXUmT0kLxkMB30Tbwaixl/bLrIW+uQZorfjxIqYSYnMSUotKHdLhIEs93eP
PjbybJt56PouHmff5Erk8XIWLwCUEK4iEnVh/IxIut2glEIhbPgaZb9IzK8HLItS
2iKAB4VSJySTfudxUjN6BuoeQL+gSjmSZH0HRLUvihek1ct0sX8WHGZBiHgBAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUsvhcuViqaZK34O1TTGnvRk6WtNEwHwYDVR0j
BBgwFoAUQTdm7XA6Sp6cpDfz5/2y216MingwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnk3OWlvcm5VWE1yTUw3VG1EcDJGdnJ6a0VuVlBDUkRmaHN2OUY1ZzN3
bUcvMS80MTM3NjZFRDcwM0E0QTlFOUNBNDM3RjNFN0ZEQjJEQjVFOEM4QTc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxMzc2NkVENzAzQTRBOUU5
Q0E0MzdGM0U3RkRCMkRCNUU4QzhBNzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ5Nzlpb3JuVVhNck1MN1RtRHAyRnZyemtFblZQQ1JEZmhzdjlGNWczd21HLzEv
MzIzODMwMzQzYTMzNjU2NDM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNjM2MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEPtTAMA0GCSqGSIb3DQEBCwUA
A4IBAQB2JQsxGfxeahZkdUjDimFn8z9KfGFUfqDRp7OLQQkuTvHtjXyDgZcQLsBl
FJkgEHLHrrCcHxdre/2/s8Pe1X9H/ya/6PZ4R3mldiVqJLdxpyksBI51SbMc0g7F
PKeoCBomPbFPUnfF9El6jmh9IBaZ5f33l+iBpML64QFqIgKKLaervld2WHqMDgHb
5CMaNFo5rUzeOBu0yB0ikG9ByOAinqkaEuYrGEuvKpcW/1hmfgcdn+60VUwSeukR
iAni9k0ABtTqUdUJh+byXOijPUZnGhhOfGZGqDkgvfLB2AeDRErKBgIwxfsOC+5q
0spv1dVJyn9lqjI5x8olOQuRItO/
-----END CERTIFICATE-----
Generated at Thu Feb 19 10:13:12 2026 by rpki-client