Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a666666663a3a2f34382d3438203d3e20323636363233.roa
File:                     323830343a336564343a666666663a3a2f34382d3438203d3e20323636363233.roa (raw, json)
Hash identifier:          uWtrs5h712k7S6d73dhXdn9cAudRnMq+S8xfvmztdU4=
Subject key identifier:   40:EA:F0:75:19:94:9B:05:E6:13:21:F7:9B:10:97:6C:CE:F5:B2:DD
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       0202CC3F8DBD9156F72DC27E2F6C490E964FD499
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a666666663a3a2f34382d3438203d3e20323636363233.roa
Signing time:             Wed 04 Feb 2026 20:00:15 +0000
ROA not before:           Wed 04 Feb 2026 19:55:15 +0000
ROA not after:            Wed 03 Feb 2027 20:00:15 +0000
asID:                     266623
IP address blocks:        2804:3ed4:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 21:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:02:cc:3f:8d:bd:91:56:f7:2d:c2:7e:2f:6c:49:0e:96:4f:d4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Feb  4 19:55:15 2026 GMT
            Not After : Feb  3 20:00:15 2027 GMT
        Subject: CN=40EAF07519949B05E61321F79B10976CCEF5B2DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cb:6e:26:46:d0:40:bc:8a:a7:24:a1:ad:90:
                    60:6a:1c:8b:81:e5:c3:08:04:bf:7b:2b:7c:94:6a:
                    a2:af:6b:a6:56:19:9c:fb:3d:06:03:29:25:97:3b:
                    dc:1a:7c:e1:5d:d7:a7:dc:95:48:ae:22:6f:ed:0f:
                    1c:04:c3:e0:8d:74:c5:af:ad:32:79:38:a2:e7:97:
                    63:f6:a6:77:bc:e6:53:49:59:cc:13:ef:c5:30:31:
                    0a:5b:c1:7b:6a:d4:88:55:e5:c4:13:46:7b:74:b0:
                    42:e6:c3:62:e7:24:a1:00:5d:a9:c4:aa:d8:4c:dc:
                    58:56:07:86:80:5c:95:46:08:f3:30:f1:9d:fa:bc:
                    7f:10:f6:88:cf:8e:35:21:17:ac:fb:93:07:00:49:
                    f3:56:a1:9c:5f:b8:0a:98:c9:25:cb:3f:5f:c7:63:
                    a6:25:f8:93:2a:83:a8:47:29:29:bf:4c:3e:28:5e:
                    78:a5:34:2d:01:c5:2e:b2:3c:4a:1d:de:37:e0:11:
                    f9:a9:a4:e1:90:86:74:44:b9:22:50:61:49:38:8e:
                    58:e7:5a:e8:a9:9f:28:67:fe:f4:3c:18:d1:ac:1a:
                    2b:e9:0a:f5:ad:96:d7:05:10:cd:e1:79:c7:b9:25:
                    b4:d5:f2:d9:09:e3:1d:87:eb:37:58:c0:87:3b:09:
                    8c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EA:F0:75:19:94:9B:05:E6:13:21:F7:9B:10:97:6C:CE:F5:B2:DD
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a666666663a3a2f34382d3438203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:92:d7:1c:e1:2e:2c:d9:2e:1f:0a:e0:f4:f5:f4:51:5b:6a:
         1a:b6:da:75:de:72:78:b2:31:43:5b:dd:59:04:3f:5f:65:f4:
         d2:52:fe:3d:e7:a1:af:f2:ab:9d:44:ec:5f:0f:8b:0f:24:50:
         36:f2:ac:1e:86:99:ff:ea:59:3a:2b:32:65:45:42:d8:75:25:
         25:21:98:54:15:30:4a:ce:2a:a6:db:28:8b:0f:dd:79:66:1d:
         7f:a1:b6:a6:41:3f:72:f5:e0:b6:43:b1:cc:79:26:c8:8b:d1:
         c0:87:d2:37:ad:21:85:a4:7e:72:34:23:b8:3b:c2:48:91:82:
         d0:39:43:b8:1e:49:29:65:91:fa:d8:8a:40:b7:57:50:0b:a4:
         b0:fc:6f:8e:5a:42:ff:d0:69:33:e6:26:fe:fc:7f:92:ee:aa:
         ca:ed:46:60:30:1e:3a:56:51:b4:d2:e1:22:74:a8:74:c1:d4:
         03:e0:04:01:b9:0b:c8:ab:f1:86:88:7f:d0:2b:6d:20:0a:1e:
         b8:6f:3c:1f:63:86:f4:f0:ef:a2:d7:13:97:d4:3f:57:4e:d4:
         8e:fd:c8:30:1e:d5:4a:f8:b8:3b:f1:67:da:61:9f:c5:6a:d5:
         a6:34:6a:8f:c8:13:00:b6:ac:d7:0d:56:dc:14:6c:23:f5:bb:
         a8:a4:d2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:58:45 2026 by rpki-client