Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/323830343a313861303a3a2f33322d3334203d3e203631393434.roa
File:                     323830343a313861303a3a2f33322d3334203d3e203631393434.roa (raw, json)
Hash identifier:          Q0hAHrZ43VNxZQNmcVTJFq8tEWGa/qFeCJNLPqPadwI=
Subject key identifier:   13:34:67:11:40:78:D2:A5:E7:F1:7B:3B:05:53:23:E8:BF:3D:73:FC
Certificate issuer:       /CN=1798EFBE5D1BCAD0E943F8010C795C1294AC2647
Certificate serial:       322510F695E1BC273A74DDF3A4146CBA03F45F75
Authority key identifier: 17:98:EF:BE:5D:1B:CA:D0:E9:43:F8:01:0C:79:5C:12:94:AC:26:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/323830343a313861303a3a2f33322d3334203d3e203631393434.roa
Signing time:             Thu 05 Feb 2026 12:01:07 +0000
ROA not before:           Thu 05 Feb 2026 11:56:07 +0000
ROA not after:            Thu 04 Feb 2027 12:01:07 +0000
asID:                     61944
IP address blocks:        2804:18a0::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.crl
                          rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:25:10:f6:95:e1:bc:27:3a:74:dd:f3:a4:14:6c:ba:03:f4:5f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1798EFBE5D1BCAD0E943F8010C795C1294AC2647
        Validity
            Not Before: Feb  5 11:56:07 2026 GMT
            Not After : Feb  4 12:01:07 2027 GMT
        Subject: CN=133467114078D2A5E7F17B3B055323E8BF3D73FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ab:b9:5d:09:5c:57:3e:84:38:bf:ca:8a:f1:
                    30:76:c9:25:19:93:36:fc:25:78:96:fa:90:3b:9b:
                    82:90:e0:2b:13:89:37:93:c9:9c:28:f1:b7:45:7b:
                    52:be:ee:b8:c8:5c:71:1e:51:22:cb:3a:67:76:8e:
                    32:e4:a0:28:71:0a:88:36:75:94:d0:71:b1:fa:f8:
                    12:57:0e:c1:05:96:9c:9c:4e:c9:ab:e6:bd:b5:00:
                    d6:17:a8:a2:22:41:d8:36:be:9d:f1:d9:4d:b6:bb:
                    e9:16:e5:af:cd:b7:3b:21:d8:8e:17:51:5f:e0:14:
                    ce:84:54:c1:50:be:02:17:c7:d8:0e:4f:9c:66:01:
                    d4:09:7e:36:84:c3:b8:f2:f3:36:44:46:e1:69:b8:
                    b5:6e:24:60:85:b2:4a:d5:cb:fc:74:34:6d:1c:a6:
                    0b:b4:66:02:b3:fe:fa:9e:9c:88:be:aa:8d:02:b5:
                    fc:09:3b:07:47:cd:00:67:d3:ec:48:e2:c2:d3:c8:
                    ad:1c:25:2e:66:bc:2f:89:ff:9c:2d:59:f7:8a:4c:
                    cb:67:c6:fc:4c:13:c6:04:f2:19:9e:f2:7c:08:6d:
                    5f:79:81:4a:90:be:c2:9f:e1:71:ff:b3:58:78:cc:
                    09:b6:2b:14:b0:01:e4:8e:b8:64:c3:2b:0d:64:43:
                    53:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:34:67:11:40:78:D2:A5:E7:F1:7B:3B:05:53:23:E8:BF:3D:73:FC
            X509v3 Authority Key Identifier:
                keyid:17:98:EF:BE:5D:1B:CA:D0:E9:43:F8:01:0C:79:5C:12:94:AC:26:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/323830343a313861303a3a2f33322d3334203d3e203631393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:29:b5:94:59:62:19:09:6d:e7:e4:c9:7f:f2:84:23:40:1a:
         af:ef:75:25:8b:80:5a:00:28:67:a0:b6:ba:a5:14:09:2e:d3:
         56:fe:7d:59:dc:12:a6:59:7e:12:de:4f:2d:55:2d:f6:d1:6b:
         2b:4f:b7:52:b6:40:fa:79:d3:48:2a:1a:3d:c2:63:d7:04:02:
         16:5b:c2:bc:40:b8:62:be:57:c7:4c:97:28:78:eb:5b:b6:e6:
         88:a3:c0:c6:92:dd:6c:f1:14:35:fc:04:f2:0e:23:99:b6:db:
         06:74:bc:47:26:0a:63:71:a9:df:60:cc:d6:2d:60:dc:e7:5a:
         56:47:f6:6b:4a:b4:cd:b5:55:23:9f:22:5b:eb:35:c5:13:d3:
         9c:70:97:61:80:3b:3b:95:6d:61:6f:ac:d7:e4:a2:45:27:94:
         b1:ea:28:96:26:fa:7d:20:d0:eb:e8:48:90:e6:25:2c:c2:17:
         e7:6e:9d:b9:c6:85:25:f7:d7:7d:83:50:f0:26:fa:38:cd:d1:
         a6:ff:a4:0d:e2:ad:e2:33:9c:74:7b:56:b3:20:e2:51:fe:b5:
         19:22:36:73:b1:14:58:e0:47:17:3c:9d:83:e5:92:a1:ca:18:
         a0:91:84:76:5e:29:78:4c:fb:e8:e3:54:59:db:3d:40:06:54:
         2b:46:a2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:33 2026 by rpki-client