Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e203533313831.roa
File:                     323830343a6636633a3a2f33322d3438203d3e203533313831.roa (raw, json)
Hash identifier:          mnm9WSwQ3TxdVeK4VO9PfDzOF719lvrC1cAl6J07Soo=
Subject key identifier:   65:A3:45:F0:EC:CC:52:D5:6E:C7:9F:C3:8A:F3:37:59:88:65:7D:FA
Certificate issuer:       /CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
Certificate serial:       44E00B9D126574E25F3233A6A86DE2DF5150400A
Authority key identifier: 1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e203533313831.roa
Signing time:             Fri 06 Feb 2026 20:00:00 +0000
ROA not before:           Fri 06 Feb 2026 19:55:00 +0000
ROA not after:            Sat 06 Feb 2027 20:00:00 +0000
asID:                     53181
IP address blocks:        2804:f6c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e0:0b:9d:12:65:74:e2:5f:32:33:a6:a8:6d:e2:df:51:50:40:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
        Validity
            Not Before: Feb  6 19:55:00 2026 GMT
            Not After : Feb  6 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5c:f9:93:9a:7e:ce:7e:06:29:1b:b1:9e:c6:
                    69:e0:95:07:91:12:f5:bf:45:d3:5f:46:0f:81:d6:
                    06:cf:ce:bc:d4:2f:41:c9:69:f4:6e:6f:2c:14:fb:
                    db:29:02:91:d2:97:1c:97:69:b6:d2:be:25:b2:90:
                    b1:87:3c:f5:fe:b6:42:fb:ca:cb:76:1a:cb:4d:60:
                    2f:09:2e:5b:4b:92:15:18:6f:ff:00:3a:12:c6:12:
                    5f:49:ce:68:3e:f1:65:d7:4a:e5:b8:34:67:ed:d3:
                    84:bd:c6:e8:6d:c2:5f:67:85:22:73:d1:93:eb:d5:
                    2c:36:2d:f7:7b:63:a4:c6:52:3d:11:dc:98:89:77:
                    ee:01:2e:e6:b1:0a:f8:68:ee:a0:60:e9:13:3a:8c:
                    45:05:4e:c6:06:6e:11:81:56:ac:c4:3d:d9:0c:b1:
                    0b:6d:3e:76:d9:0b:05:4b:86:53:90:54:2c:39:c7:
                    c0:c8:22:f2:71:a3:f7:f1:48:ff:b4:59:d9:42:2f:
                    87:7c:7e:8c:ac:7d:ec:cc:dd:42:82:97:63:d1:03:
                    25:d6:a7:8c:d2:6c:4d:d3:47:09:ab:4e:b8:b9:dd:
                    eb:21:42:ef:28:56:d9:f4:34:4d:77:20:d9:ac:86:
                    69:1e:54:f6:3c:63:59:0c:cc:89:66:2b:8c:25:4d:
                    ee:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A3:45:F0:EC:CC:52:D5:6E:C7:9F:C3:8A:F3:37:59:88:65:7D:FA
            X509v3 Authority Key Identifier:
                keyid:1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/323830343a6636633a3a2f33322d3438203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:b1:9d:2a:40:c4:50:4a:76:3a:32:47:bd:cc:05:6a:c4:b9:
         29:11:aa:26:0c:38:2d:78:6e:b3:d7:bd:de:7f:f0:0b:69:98:
         8b:30:bc:bb:f1:8b:7d:7e:e0:94:93:07:6e:89:02:da:27:07:
         5a:21:61:09:41:a6:4b:76:59:5d:b1:25:ae:28:01:3b:88:16:
         85:7c:d2:a9:d9:4c:ae:3c:6c:08:03:7b:68:73:32:96:83:cf:
         bb:22:e9:f6:8f:dc:f7:e1:63:cf:f3:0c:79:73:e8:2b:37:72:
         d9:c3:de:21:ca:0a:22:60:95:e2:f5:1d:6a:76:9e:3f:d0:67:
         47:a0:e5:83:57:f5:7c:90:a0:f9:48:d8:7f:29:15:21:5f:5b:
         1f:39:91:7a:06:41:df:63:fb:b4:fd:68:22:fe:dd:9b:93:0a:
         f1:f3:0d:60:dd:d5:7a:e7:31:57:58:2f:73:07:e5:dc:46:81:
         29:15:80:9b:9b:9d:d5:7b:ac:90:e9:ef:f2:90:d0:b5:e4:b4:
         b1:30:54:39:d8:8b:d7:1d:f7:6c:50:22:de:36:c6:e2:6c:3d:
         f1:76:f1:4c:73:79:54:fd:1e:74:a6:42:c2:b5:d9:b6:32:18:
         e2:b2:01:ee:d9:90:a0:c5:e9:00:31:26:14:e9:c7:99:cf:0b:
         d4:ed:df:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:42:09 2026 by rpki-client