Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/323830343a326265343a3a2f33322d313238203d3e20323633303034.roa
File:                     323830343a326265343a3a2f33322d313238203d3e20323633303034.roa (raw, json)
Hash identifier:          ynyHF4Ric93DF0RyBskBd8RghuNgDZVqq0ZBGUMP8wA=
Subject key identifier:   E7:D0:48:22:2D:F9:D2:3C:7C:44:EE:F7:95:A2:12:CF:4C:2D:EA:95
Certificate issuer:       /CN=71E336AA1EADBE4A610866EDB4141D36A5B77C52
Certificate serial:       496BD354492045DFD379F5D182C7738FD869B458
Authority key identifier: 71:E3:36:AA:1E:AD:BE:4A:61:08:66:ED:B4:14:1D:36:A5:B7:7C:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/323830343a326265343a3a2f33322d313238203d3e20323633303034.roa
Signing time:             Thu 05 Feb 2026 20:04:53 +0000
ROA not before:           Thu 05 Feb 2026 19:59:53 +0000
ROA not after:            Thu 04 Feb 2027 20:04:53 +0000
asID:                     263004
IP address blocks:        2804:2be4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.crl
                          rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6b:d3:54:49:20:45:df:d3:79:f5:d1:82:c7:73:8f:d8:69:b4:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71E336AA1EADBE4A610866EDB4141D36A5B77C52
        Validity
            Not Before: Feb  5 19:59:53 2026 GMT
            Not After : Feb  4 20:04:53 2027 GMT
        Subject: CN=E7D048222DF9D23C7C44EEF795A212CF4C2DEA95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:08:ce:5b:dc:a8:26:58:20:e0:2e:59:21:7c:
                    db:73:c1:df:f9:c5:53:7b:c8:46:df:1a:89:5a:73:
                    ce:ea:6d:01:00:2f:6c:d4:c8:cb:31:c8:bf:0d:6f:
                    e6:b1:7f:d2:67:df:c2:ed:d2:1d:29:e2:71:cc:09:
                    f7:6b:51:ad:6d:50:08:ce:d7:61:d5:b5:dc:31:0c:
                    f6:ea:1d:c9:ed:55:d0:af:8e:89:a6:2f:3b:9f:ff:
                    78:2d:6e:78:b6:d4:66:15:6e:e9:ad:82:a2:10:05:
                    44:55:d5:07:be:a7:a8:e1:35:07:1b:5c:15:15:83:
                    42:1a:f3:70:5e:75:44:21:d8:5b:2d:40:cd:f3:c0:
                    31:af:b0:6f:7f:d8:78:55:af:a3:74:80:4c:ed:89:
                    a5:c8:05:e6:0c:0e:0e:57:e8:b9:ad:d2:c9:63:ce:
                    49:1f:01:67:53:00:34:6d:27:b5:65:85:85:dc:b6:
                    8d:f4:b7:a4:07:68:aa:35:9c:ad:e7:27:14:aa:2e:
                    48:cc:c4:49:e9:82:08:fb:a8:25:f3:ae:52:df:ca:
                    e5:f2:82:59:a9:6b:eb:30:a8:f5:3a:a4:51:d1:f5:
                    11:c3:0e:06:90:a2:3b:dc:1f:2c:b1:a3:13:1e:fd:
                    9f:a3:2a:d4:12:e2:c2:f7:bf:82:a1:2f:3d:27:7b:
                    0a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D0:48:22:2D:F9:D2:3C:7C:44:EE:F7:95:A2:12:CF:4C:2D:EA:95
            X509v3 Authority Key Identifier:
                keyid:71:E3:36:AA:1E:AD:BE:4A:61:08:66:ED:B4:14:1D:36:A5:B7:7C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/323830343a326265343a3a2f33322d313238203d3e20323633303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2be4::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:65:a1:83:f6:5a:86:0d:18:62:07:ca:34:12:2d:f6:2e:14:
         57:61:e8:c2:52:dd:06:bd:64:a4:10:43:00:5c:5a:57:81:e8:
         60:7f:36:6d:aa:eb:fc:5a:1b:37:f3:f1:16:dc:d9:3b:8b:a4:
         69:ec:f4:ce:0a:c1:78:e3:b8:9d:bc:d6:29:20:06:80:3b:fc:
         45:17:49:cf:69:34:d5:43:cf:1c:13:84:4b:fb:61:d5:e8:74:
         21:e8:c5:32:b7:0d:74:bd:f6:0e:e7:93:11:20:4c:5d:e8:1c:
         36:1b:86:1a:b2:75:a6:08:fc:b9:aa:78:f5:4b:4e:81:4a:22:
         aa:99:b5:a5:5a:f7:e0:13:36:fe:24:84:79:89:bc:79:b9:d8:
         b0:6b:57:8d:06:db:60:1f:79:53:a1:ff:0a:93:65:d4:0e:18:
         8c:4a:40:99:46:33:41:8e:62:2b:cf:13:2c:4b:0b:63:fb:a8:
         25:0a:b1:ee:94:77:24:b7:a3:9f:82:0a:31:05:a5:f5:2c:4a:
         b6:04:0a:7f:b5:7a:ee:8e:9c:61:37:e1:4d:f3:89:ae:8a:47:
         1e:01:7b:48:6e:77:ca:85:7c:38:d9:49:ae:79:e9:cc:40:25:
         85:d9:85:a1:95:ba:bd:6e:1c:cd:e1:c5:92:b7:d1:9e:e3:84:
         ad:1b:24:02
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUSWvTVEkgRd/TefXRgsdzj9hptFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFFMzM2QUExRUFEQkU0QTYxMDg2NkVEQjQxNDFEMzZB
NUI3N0M1MjAeFw0yNjAyMDUxOTU5NTNaFw0yNzAyMDQyMDA0NTNaMDMxMTAvBgNV
BAMTKEU3RDA0ODIyMkRGOUQyM0M3QzQ0RUVGNzk1QTIxMkNGNEMyREVBOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6CM5b3KgmWCDgLlkhfNtzwd/5
xVN7yEbfGolac87qbQEAL2zUyMsxyL8Nb+axf9Jn38Lt0h0p4nHMCfdrUa1tUAjO
12HVtdwxDPbqHcntVdCvjommLzuf/3gtbni21GYVbumtgqIQBURV1Qe+p6jhNQcb
XBUVg0Ia83BedUQh2FstQM3zwDGvsG9/2HhVr6N0gEztiaXIBeYMDg5X6Lmt0slj
zkkfAWdTADRtJ7VlhYXcto30t6QHaKo1nK3nJxSqLkjMxEnpggj7qCXzrlLfyuXy
glmpa+swqPU6pFHR9RHDDgaQojvcHyyxoxMe/Z+jKtQS4sL3v4KhLz0newodAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU59BIIi350jx8RO73laISz0wt6pUwHwYDVR0j
BBgwFoAUceM2qh6tvkphCGbttBQdNqW3fFIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUc2aHduWGN4b0dWak4xWWtmVVdyYjNVeWhLQXB0R0w5cFlqM3dCOWo5
Q3QvMS83MUUzMzZBQTFFQURCRTRBNjEwODY2RURCNDE0MUQzNkE1Qjc3QzUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxRTMzNkFBMUVBREJFNEE2
MTA4NjZFREI0MTQxRDM2QTVCNzdDNTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlHNmh3blhjeG9HVmpOMVlrZlVXcmIzVXloS0FwdEdMOXBZajN3QjlqOUN0LzEv
MzIzODMwMzQzYTMyNjI2NTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzMzMDMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCvkMA0GCSqGSIb3DQEBCwUAA4IBAQBkZaGD
9lqGDRhiB8o0Ei32LhRXYejCUt0GvWSkEEMAXFpXgehgfzZtquv8Whs38/EW3Nk7
i6Rp7PTOCsF447idvNYpIAaAO/xFF0nPaTTVQ88cE4RL+2HV6HQh6MUytw10vfYO
55MRIExd6Bw2G4YasnWmCPy5qnj1S06BSiKqmbWlWvfgEzb+JIR5ibx5udiwa1eN
BttgH3lTof8Kk2XUDhiMSkCZRjNBjmIrzxMsSwtj+6glCrHulHckt6OfggoxBaX1
LEq2BAp/tXrujpxhN+FN84muikceAXtIbnfKhXw42UmueenMQCWF2YWhlbq9bhzN
4cWSt9Ge44StGyQC
-----END CERTIFICATE-----
Generated at Thu Feb 19 07:43:26 2026 by rpki-client