Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/323830343a336561303a383030303a3a2f34302d3430203d3e20323636363130.roa
File:                     323830343a336561303a383030303a3a2f34302d3430203d3e20323636363130.roa (raw, json)
Hash identifier:          0hTzfHA6/82gDPZXa3ZorKj+V5B8/WXGLEfEYw8p0tU=
Subject key identifier:   69:B3:B8:1B:A6:8D:22:BA:CE:74:02:4D:4C:3E:C3:78:DC:7E:3E:13
Certificate issuer:       /CN=6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6
Certificate serial:       2006A59521B65B8333F617833765DCF15533FE7B
Authority key identifier: 6F:9D:7C:16:F6:F1:19:AD:3C:95:41:A0:F9:81:AB:ED:6F:D2:85:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/323830343a336561303a383030303a3a2f34302d3430203d3e20323636363130.roa
Signing time:             Thu 05 Feb 2026 09:46:17 +0000
ROA not before:           Thu 05 Feb 2026 09:41:17 +0000
ROA not after:            Thu 04 Feb 2027 09:46:17 +0000
asID:                     266610
IP address blocks:        2804:3ea0:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.crl
                          rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 14:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:06:a5:95:21:b6:5b:83:33:f6:17:83:37:65:dc:f1:55:33:fe:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6
        Validity
            Not Before: Feb  5 09:41:17 2026 GMT
            Not After : Feb  4 09:46:17 2027 GMT
        Subject: CN=69B3B81BA68D22BACE74024D4C3EC378DC7E3E13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:62:22:e9:c1:dc:8e:c5:57:32:3c:5f:7a:5b:
                    6a:d1:37:ba:56:ae:83:e5:f9:96:40:5d:0f:9a:b1:
                    6b:28:da:27:26:72:72:73:dc:d2:86:6c:cb:22:64:
                    ba:4b:82:19:22:80:70:84:f9:2a:89:35:8f:46:40:
                    ae:a1:06:63:45:b6:57:c3:b4:1e:bb:14:b7:00:f2:
                    e2:59:d0:d6:6c:5e:56:3c:61:c4:86:35:b7:74:db:
                    c0:56:95:13:0f:12:2a:9d:0c:ce:d6:9e:e1:72:b6:
                    29:7c:41:eb:54:af:2e:b4:3e:1a:ba:0b:9b:13:84:
                    c7:73:a9:4b:23:b4:58:ad:25:cc:44:de:91:e4:4d:
                    9f:b0:47:05:6f:3e:22:7c:e0:2d:33:48:4b:af:99:
                    c6:50:6e:c4:34:48:d7:a1:8a:27:1b:0f:27:b5:d5:
                    88:f8:51:62:b8:b3:ac:ed:f6:49:4a:91:93:ec:b6:
                    f7:da:96:94:ba:8c:ce:5a:99:3a:b1:ac:d3:64:c8:
                    53:e0:e0:8e:21:9d:c9:4f:6b:75:6e:00:e7:0c:7e:
                    2b:42:0c:1a:61:3a:40:1d:5b:62:21:fa:25:4f:76:
                    b8:38:73:21:19:54:55:c8:b5:bc:b2:a7:86:e0:45:
                    20:f0:dc:eb:87:e7:0a:95:ac:79:00:18:24:35:ad:
                    f3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B3:B8:1B:A6:8D:22:BA:CE:74:02:4D:4C:3E:C3:78:DC:7E:3E:13
            X509v3 Authority Key Identifier:
                keyid:6F:9D:7C:16:F6:F1:19:AD:3C:95:41:A0:F9:81:AB:ED:6F:D2:85:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/323830343a336561303a383030303a3a2f34302d3430203d3e20323636363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ea0:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:b9:75:64:bf:e2:dd:6d:5d:9c:5a:14:85:65:fb:45:4e:e0:
         97:9c:cc:89:c6:28:c5:16:bb:79:84:91:7a:8d:18:2b:59:07:
         63:c3:bf:f5:b6:28:c6:79:45:97:ba:7c:06:e8:6f:60:46:79:
         b7:4d:b7:b7:b2:a0:2b:92:b8:7a:b3:4d:61:c3:32:fd:1e:37:
         21:97:40:44:4b:a2:9d:1c:ba:e5:92:9f:03:8e:84:e5:6f:cb:
         57:9e:8f:7e:4f:a1:2a:2d:e0:fe:4f:7e:3c:2d:8a:13:9a:43:
         85:f2:75:a1:5a:1a:2c:5d:91:62:7f:9b:b4:9a:d6:94:e5:66:
         8f:09:bc:a2:f8:40:db:f9:92:5d:fc:cd:ab:ad:72:ee:d6:b6:
         e8:94:54:01:50:de:25:cd:13:59:1d:02:5f:6d:b8:9d:86:fe:
         f7:fb:51:18:50:5c:3d:b6:0f:de:85:9d:3d:59:d7:67:b9:07:
         31:b0:0e:3e:91:b2:30:1b:e3:c0:a1:1f:af:28:fc:27:b6:15:
         66:e7:5b:0c:11:3b:9e:c9:3b:87:a7:0e:1d:cf:3b:72:12:84:
         d1:82:18:66:f3:41:51:e2:97:ee:70:16:46:32:5e:63:f5:99:
         86:c5:21:41:9d:85:cb:08:c5:76:27:4a:fb:64:52:5b:da:8b:
         42:9c:39:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:36:02 2026 by rpki-client