Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/323830343a316163343a3a2f33322d3438203d3e203631383834.roa
File:                     323830343a316163343a3a2f33322d3438203d3e203631383834.roa (raw, json)
Hash identifier:          hhP8Yr/IEqRFEGBkrzxn8/3bDeZ1QId7TUnzvAAUVtw=
Subject key identifier:   1C:0C:CD:DD:E6:7D:AB:1A:13:AB:82:24:A4:BA:BB:C8:A7:79:6C:D1
Certificate issuer:       /CN=65266773FE30988C76975E1CA92521B7BCB5897A
Certificate serial:       53600CF8108CBFF673DEA412B1F1CE397C62BB86
Authority key identifier: 65:26:67:73:FE:30:98:8C:76:97:5E:1C:A9:25:21:B7:BC:B5:89:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65266773FE30988C76975E1CA92521B7BCB5897A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/323830343a316163343a3a2f33322d3438203d3e203631383834.roa
Signing time:             Thu 05 Feb 2026 19:23:11 +0000
ROA not before:           Thu 05 Feb 2026 19:18:11 +0000
ROA not after:            Thu 04 Feb 2027 19:23:11 +0000
asID:                     61884
IP address blocks:        2804:1ac4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/65266773FE30988C76975E1CA92521B7BCB5897A.crl
                          rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/65266773FE30988C76975E1CA92521B7BCB5897A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65266773FE30988C76975E1CA92521B7BCB5897A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:38:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:60:0c:f8:10:8c:bf:f6:73:de:a4:12:b1:f1:ce:39:7c:62:bb:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65266773FE30988C76975E1CA92521B7BCB5897A
        Validity
            Not Before: Feb  5 19:18:11 2026 GMT
            Not After : Feb  4 19:23:11 2027 GMT
        Subject: CN=1C0CCDDDE67DAB1A13AB8224A4BABBC8A7796CD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:95:2a:b5:5e:bf:af:73:9c:13:f7:1d:8b:69:
                    62:36:2b:33:ab:63:31:ee:84:c2:39:74:e3:7f:bb:
                    4c:c9:11:32:87:34:8d:6e:9e:71:9d:74:df:29:ca:
                    9f:0d:28:51:61:15:b2:8f:53:9b:c1:3f:50:e8:d4:
                    36:a0:a5:f8:86:64:0e:73:73:cb:a3:ce:32:80:5f:
                    90:5e:0f:71:0b:84:d4:1b:c7:d2:8d:65:ef:d3:4d:
                    f0:97:ba:6a:15:3b:82:0e:59:8a:fe:f6:0d:dc:ac:
                    d4:c6:b8:8c:c1:11:74:3f:f9:eb:02:59:3e:b4:0e:
                    fe:d6:b5:32:96:97:e1:e9:13:85:03:dc:3e:be:74:
                    14:d7:07:d4:7e:e4:06:44:00:76:27:56:26:7b:a1:
                    da:73:7a:b1:f3:c7:11:16:04:98:35:ef:6d:46:1a:
                    8c:5c:36:ca:4b:0e:fb:a0:2c:f8:ce:a3:bb:a2:4e:
                    aa:62:b9:7e:75:e1:f6:bb:fd:79:1f:49:22:e2:08:
                    88:d2:9f:14:1f:b0:96:24:f8:b5:d8:91:8c:9c:a7:
                    e4:e5:1e:b3:8e:23:4e:7d:65:86:a3:cf:ca:f5:de:
                    d6:b5:25:33:a2:74:38:70:c8:d0:70:6b:41:f8:a1:
                    be:d6:f8:c2:00:6b:11:27:bb:e7:3e:ea:07:f1:25:
                    2f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0C:CD:DD:E6:7D:AB:1A:13:AB:82:24:A4:BA:BB:C8:A7:79:6C:D1
            X509v3 Authority Key Identifier:
                keyid:65:26:67:73:FE:30:98:8C:76:97:5E:1C:A9:25:21:B7:BC:B5:89:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/65266773FE30988C76975E1CA92521B7BCB5897A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65266773FE30988C76975E1CA92521B7BCB5897A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/323830343a316163343a3a2f33322d3438203d3e203631383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ac4::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:4e:a2:ae:1d:99:70:b5:98:da:fa:50:5d:94:5e:e0:12:5d:
         c2:76:05:e5:b2:a1:4f:4e:80:fe:d7:ad:b9:79:55:1a:92:11:
         a2:a3:a5:dc:81:ec:99:91:c1:a9:cc:a0:9e:50:3d:c2:13:e6:
         94:09:b5:d3:a7:b9:9b:e3:3d:3a:f7:f9:56:dc:dc:f9:05:a1:
         f9:02:04:01:47:40:ae:5d:49:27:b7:76:17:a3:47:98:1c:10:
         9f:a4:d2:b6:47:94:9f:f6:94:bc:cc:09:71:ab:37:e6:d0:2e:
         50:57:89:26:48:94:b2:38:09:55:d2:79:b2:55:b2:96:67:56:
         35:39:26:b8:86:bb:bb:09:ab:b5:bb:24:d1:fe:0f:e6:64:c4:
         09:19:40:3c:3c:75:52:d0:ff:47:c4:5a:b5:2f:bb:67:50:e6:
         21:b2:0e:da:f6:2e:5f:1d:28:30:40:0b:41:c1:ce:66:2f:7c:
         fc:af:e8:45:dc:42:f9:4a:2b:dd:81:56:5b:8b:e7:5a:43:98:
         f6:60:af:be:b1:3d:9c:a6:32:77:8b:b6:b5:a7:3f:2b:36:52:
         ff:2e:47:1f:13:3f:c4:ff:59:1e:5a:cd:2d:e8:4a:2b:c0:c4:
         ec:56:d0:4d:3e:2f:7e:2c:6b:db:d7:3f:a6:e6:9a:e8:d4:a2:
         06:a7:fb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:06:00 2026 by rpki-client