Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e20323633353835.roa
File:                     323830343a6636633a3a2f33322d3438203d3e20323633353835.roa (raw, json)
Hash identifier:          OaDogUAmRu7veymUpX94ok1uaNO5nGtEUzhi4er2Uk0=
Subject key identifier:   52:13:2A:6C:99:DC:80:7B:57:50:AE:CB:EE:69:D7:59:63:1E:D0:1F
Certificate issuer:       /CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
Certificate serial:       62FC3B1B503A9D601C1916E40C501D5121ECDC89
Authority key identifier: 1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e20323633353835.roa
Signing time:             Fri 06 Feb 2026 20:00:00 +0000
ROA not before:           Fri 06 Feb 2026 19:55:00 +0000
ROA not after:            Sat 06 Feb 2027 20:00:00 +0000
asID:                     263585
IP address blocks:        2804:f6c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:fc:3b:1b:50:3a:9d:60:1c:19:16:e4:0c:50:1d:51:21:ec:dc:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
        Validity
            Not Before: Feb  6 19:55:00 2026 GMT
            Not After : Feb  6 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:46:e5:38:69:39:65:f4:d8:f9:c5:34:39:f2:
                    8b:88:84:42:b0:2c:04:0c:7e:aa:a6:28:7b:57:b4:
                    43:6b:34:57:22:02:1b:b7:b1:97:c0:ba:1c:65:81:
                    d8:d3:cf:59:3d:00:da:fb:c8:ea:16:4e:89:ea:b4:
                    f6:03:f5:9e:95:b4:f4:bb:f4:16:0b:85:b5:6e:e9:
                    55:72:ee:ce:dc:12:b8:f9:fe:84:ba:00:01:4c:83:
                    88:3c:6a:43:50:1b:8c:dd:fc:05:bb:f5:00:94:f6:
                    a0:e2:a2:65:38:06:a8:c6:0a:2c:94:3b:6c:07:1f:
                    f5:51:6f:b6:5c:42:5a:e7:14:12:3b:c1:94:4a:fa:
                    1a:4b:7f:46:e0:fc:c2:94:9c:e7:90:8e:0b:b7:2b:
                    e3:c1:37:b8:73:b6:ca:a1:31:a4:eb:4d:56:06:7f:
                    46:2e:fb:fc:b2:0b:b8:00:74:93:bd:7c:17:ef:27:
                    c1:37:b6:2d:95:cf:cc:52:a1:55:c8:6b:0c:94:67:
                    93:bd:5b:e8:ab:19:9e:9c:ba:1b:3f:92:62:4a:b8:
                    1a:1a:e0:93:17:0a:c1:56:95:25:c3:7f:f8:9a:22:
                    62:33:1a:71:6d:e0:b9:67:da:4b:22:01:01:35:3c:
                    c9:23:b0:75:cc:55:fc:03:96:3c:42:75:c0:58:1f:
                    fd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:13:2A:6C:99:DC:80:7B:57:50:AE:CB:EE:69:D7:59:63:1E:D0:1F
            X509v3 Authority Key Identifier:
                keyid:1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e20323633353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:58:78:ac:fc:b9:0e:f8:15:a0:2e:0e:5c:4d:f7:85:99:4f:
         2b:3a:cb:ee:3e:e2:52:40:8a:37:aa:f9:5c:04:a7:c1:83:38:
         86:cb:e3:c6:63:20:f7:c7:5a:25:92:9f:e8:2d:f8:79:9a:04:
         62:2c:c8:d0:6f:3c:6b:a2:c6:1f:c7:8d:b2:1a:d8:c9:41:84:
         69:9d:6d:53:a0:fe:52:22:68:01:ae:05:1d:c1:28:63:08:b3:
         0a:15:f2:64:7b:64:53:7f:a6:39:ae:a7:a4:03:0c:49:b7:5a:
         1a:b5:76:4a:57:cc:d1:a0:c5:e2:f2:30:8b:d1:d1:1b:e3:03:
         dd:a8:41:fb:bd:3f:1a:40:d7:5a:7c:de:18:a0:ee:38:73:e2:
         36:6c:cb:85:8a:6e:aa:fb:f5:55:c0:7f:01:9f:9e:43:1b:06:
         8f:50:28:82:8a:0b:6f:08:d8:5d:27:46:87:93:cd:97:45:e5:
         51:b0:7e:08:10:d0:d6:b1:7a:40:08:a4:bf:6c:50:e3:e2:09:
         1a:3d:6c:cc:f5:65:a4:c7:2a:1a:de:5d:31:22:01:fe:a5:3b:
         f5:b2:83:c4:80:5f:2b:eb:99:52:d5:04:f7:d5:7d:21:39:0c:
         4e:99:28:1a:e3:9b:dc:25:3f:0e:5b:56:93:91:a2:85:43:f6:
         44:27:22:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:14:43 2026 by rpki-client