Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/323830343a373938383a383030303a3a2f33332d3333203d3e20323731333131.roa
File:                     323830343a373938383a383030303a3a2f33332d3333203d3e20323731333131.roa (raw, json)
Hash identifier:          HCyQtjHU41tY2jfjWja/hiyP/kR3ExZN/m3+S2ajKvY=
Subject key identifier:   68:85:AF:2D:8C:29:5A:4F:53:68:73:2B:71:27:8F:2A:55:45:DF:65
Certificate issuer:       /CN=B6CC812D59F4308FCB1D2239555678B476218767
Certificate serial:       1251E61A79299CB7AF53EA51DB3796FE56D92142
Authority key identifier: B6:CC:81:2D:59:F4:30:8F:CB:1D:22:39:55:56:78:B4:76:21:87:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/323830343a373938383a383030303a3a2f33332d3333203d3e20323731333131.roa
Signing time:             Wed 04 Feb 2026 21:16:15 +0000
ROA not before:           Wed 04 Feb 2026 21:11:15 +0000
ROA not after:            Wed 03 Feb 2027 21:16:15 +0000
asID:                     271311
IP address blocks:        2804:7988:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.crl
                          rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 14:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:51:e6:1a:79:29:9c:b7:af:53:ea:51:db:37:96:fe:56:d9:21:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6CC812D59F4308FCB1D2239555678B476218767
        Validity
            Not Before: Feb  4 21:11:15 2026 GMT
            Not After : Feb  3 21:16:15 2027 GMT
        Subject: CN=6885AF2D8C295A4F5368732B71278F2A5545DF65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:90:f4:ff:f4:cc:4c:b0:ba:24:ed:ff:fe:ec:
                    13:68:40:fa:29:f9:78:c7:7e:c1:5f:71:6b:70:c4:
                    f3:1d:69:82:ee:33:eb:83:4a:e0:30:6f:e6:c6:0a:
                    b3:e8:92:0c:0d:10:3b:48:d4:89:64:a1:78:9b:24:
                    a2:5e:ec:d1:bd:6d:1c:98:8d:89:08:9b:88:5f:48:
                    23:27:1f:25:9c:96:6b:cb:f3:51:8e:d6:f9:03:7e:
                    e1:a2:59:fb:da:2e:d7:e3:76:d6:92:ec:42:74:b0:
                    a8:c0:b7:48:cd:df:fc:b2:f0:55:06:32:a2:14:59:
                    0c:09:54:9b:c4:1d:63:bd:87:15:1b:07:ee:bc:96:
                    0c:e7:22:8f:34:fd:82:3a:f1:55:b6:5c:cd:78:c6:
                    f7:5f:db:39:18:6f:9f:94:07:e2:58:90:c3:f8:d0:
                    b6:fd:e3:63:f7:6c:a0:de:75:56:bd:e1:58:a6:e9:
                    b9:41:52:9a:a1:bc:8a:09:af:e8:a5:2c:fc:53:1a:
                    5f:7c:98:fe:72:c9:c4:90:3c:38:88:0b:eb:fc:a1:
                    aa:fc:24:20:44:2f:74:e3:60:6c:b1:a9:70:b6:90:
                    12:60:dc:30:ad:53:b6:67:32:46:04:7f:5d:cc:c2:
                    1c:93:db:d0:3f:30:11:12:70:35:e5:eb:96:fe:6c:
                    54:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:85:AF:2D:8C:29:5A:4F:53:68:73:2B:71:27:8F:2A:55:45:DF:65
            X509v3 Authority Key Identifier:
                keyid:B6:CC:81:2D:59:F4:30:8F:CB:1D:22:39:55:56:78:B4:76:21:87:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/323830343a373938383a383030303a3a2f33332d3333203d3e20323731333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7988:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         d4:76:b8:a0:1a:8d:19:2a:1a:8f:12:da:d6:0d:1d:88:93:97:
         c5:2c:78:ec:73:84:28:01:95:50:8e:75:42:4f:9d:d6:43:88:
         7e:38:22:d0:34:2c:25:31:82:8b:18:b5:e4:b5:2b:cf:ea:73:
         ad:72:fa:c3:4a:4f:4a:a4:e0:ee:6f:a6:31:39:f1:56:c3:b1:
         e0:00:b4:1c:7f:a9:51:79:ab:ac:49:c6:f7:f2:24:5a:f0:b2:
         f9:9f:e3:88:69:3f:ad:9d:37:0b:3a:18:72:74:6a:f8:df:f7:
         52:2c:49:f7:ad:c5:88:a9:fc:39:da:a6:0f:0b:1c:ad:15:ae:
         58:64:cf:ea:c9:82:41:a1:c8:0f:c5:44:e6:f7:59:cc:af:60:
         d3:22:e8:94:01:70:c8:88:2b:52:82:56:4b:1c:4f:e8:bd:fc:
         2c:3a:ff:50:66:7b:c9:e9:0b:9e:2c:7f:b7:64:23:15:f9:55:
         82:18:24:8f:03:37:76:dc:0e:21:7b:b5:91:95:d2:6a:db:7b:
         8f:6c:06:a5:fd:c3:8a:60:38:cb:5e:a9:eb:d0:5a:20:d9:5d:
         65:86:b9:1d:e8:f2:0a:77:26:76:46:87:b8:b3:ef:1b:e7:43:
         0e:e0:43:3f:47:c5:79:e4:93:31:67:17:92:e4:24:1c:50:2c:
         15:f9:40:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:35:54 2026 by rpki-client