Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e203238323130.roa
File:                     323830343a6636633a3a2f33322d3438203d3e203238323130.roa (raw, json)
Hash identifier:          Mqimws2TQWCPA5F/7wpIJOMBPnWpwLVBbDEeT4H7eMk=
Subject key identifier:   75:F1:32:18:55:7E:59:36:73:7D:9B:3C:52:F5:A5:14:50:FF:04:F4
Certificate issuer:       /CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
Certificate serial:       6C228BDF2FC669C32D287288B7F0E2C047B31B63
Authority key identifier: 1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e203238323130.roa
Signing time:             Fri 06 Feb 2026 19:00:00 +0000
ROA not before:           Fri 06 Feb 2026 18:55:00 +0000
ROA not after:            Sat 06 Feb 2027 19:00:00 +0000
asID:                     28210
IP address blocks:        2804:f6c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:22:8b:df:2f:c6:69:c3:2d:28:72:88:b7:f0:e2:c0:47:b3:1b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
        Validity
            Not Before: Feb  6 18:55:00 2026 GMT
            Not After : Feb  6 19:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5b:46:8c:ac:87:a0:ff:61:69:da:ca:f0:0b:
                    84:80:d9:f6:8f:08:b9:11:a9:b7:61:f2:2a:8a:28:
                    46:96:58:e5:32:58:3d:a2:f1:ec:f6:4c:44:fc:55:
                    ab:67:76:c5:9a:3b:09:3b:92:69:22:b1:b3:b6:aa:
                    ed:2c:90:61:16:3d:d8:31:a0:32:67:5b:d4:7f:8b:
                    b6:03:56:3a:11:86:d0:b0:9e:c9:f6:83:1e:b3:52:
                    74:81:61:bf:c6:e3:8b:a6:08:86:7e:9b:68:37:a8:
                    17:a1:86:cf:57:52:b6:87:b3:77:82:37:c8:6d:da:
                    67:d2:7f:cd:94:7b:7d:6a:42:8c:8c:7a:ae:5b:54:
                    4d:1a:34:06:92:d8:d1:51:06:ac:f8:1b:6c:67:8e:
                    4a:c4:f1:51:eb:03:4a:59:11:b4:65:9f:5e:89:0c:
                    45:97:24:86:fa:1a:b8:8f:e6:00:9a:57:f4:42:e2:
                    91:ce:fe:e0:6a:bf:9f:56:75:17:2f:97:5e:8e:9a:
                    ff:63:a8:23:f5:c9:40:6e:a1:6b:a7:36:48:2f:5d:
                    c8:2d:3f:b6:62:59:fd:ac:9d:c2:dc:5e:fe:97:cd:
                    63:00:b4:fd:74:0c:4e:8b:75:c9:5f:a8:01:9d:df:
                    ae:9f:6d:aa:2a:9e:f5:bb:66:d1:1e:99:c7:b2:99:
                    a2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F1:32:18:55:7E:59:36:73:7D:9B:3C:52:F5:A5:14:50:FF:04:F4
            X509v3 Authority Key Identifier:
                keyid:1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:73:cd:52:66:31:ef:9c:2a:e8:80:4b:6e:e5:da:2a:84:b0:
         ae:fd:ec:92:ed:fc:67:38:d5:6c:b7:48:6e:0b:14:dd:3f:4d:
         9b:b1:79:a2:e5:ab:37:54:b5:89:40:bd:ca:e5:f4:64:6c:80:
         59:b6:45:02:0c:60:6e:c6:d7:93:be:99:8d:a9:f7:3c:2f:22:
         4e:50:3a:b5:b2:33:ab:1d:8a:cf:96:8b:d8:bf:82:1a:9e:6a:
         44:6e:b9:a7:0a:46:94:4a:76:bc:b0:99:26:4f:e2:bf:7b:88:
         6b:6c:04:cb:47:fc:e8:c0:26:5c:0b:1a:71:71:3a:d0:5b:61:
         58:31:df:4c:67:88:a3:20:e0:8d:60:e0:4e:78:5e:46:02:41:
         7a:63:f0:10:20:fd:9f:e9:7c:83:f6:68:1a:41:75:11:29:6f:
         ec:b1:e5:82:9f:dc:40:e0:7b:04:3e:be:1a:db:bd:2c:b0:23:
         1b:05:fc:ed:a6:a7:0e:25:76:fa:af:a8:73:fb:60:f9:6c:72:
         ad:74:b6:c3:eb:7f:74:3a:b0:cc:df:79:cb:6c:7f:fd:7f:05:
         ff:05:8b:71:98:b3:45:8d:d6:e1:d6:13:bf:fd:4d:18:1c:9a:
         ef:27:8c:4f:7b:fe:89:18:3b:01:4e:05:94:43:3e:9a:ba:e8:
         90:c9:c6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:42:45 2026 by rpki-client