Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a343030303a3a2f33342d3334203d3e203631363337.roa
File:                     323830343a316331383a343030303a3a2f33342d3334203d3e203631363337.roa (raw, json)
Hash identifier:          uLGf4AxA4AHZh8i/e3luuSkTvemwv8XE3j+E4MlgOlY=
Subject key identifier:   01:36:B3:D2:22:E6:70:6F:F5:44:1B:D4:88:99:6C:C4:1D:85:A9:DA
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       585FA8FA43485273361DEE06D8214BEFD60D8E0D
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a343030303a3a2f33342d3334203d3e203631363337.roa
Signing time:             Thu 05 Feb 2026 01:01:01 +0000
ROA not before:           Thu 05 Feb 2026 00:56:01 +0000
ROA not after:            Thu 04 Feb 2027 01:01:01 +0000
asID:                     61637
IP address blocks:        2804:1c18:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:36:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5f:a8:fa:43:48:52:73:36:1d:ee:06:d8:21:4b:ef:d6:0d:8e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Feb  5 00:56:01 2026 GMT
            Not After : Feb  4 01:01:01 2027 GMT
        Subject: CN=0136B3D222E6706FF5441BD488996CC41D85A9DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:56:7f:34:57:52:9e:08:81:dd:76:5f:21:0a:
                    09:e8:78:12:98:73:7d:98:98:7f:ca:75:ac:90:e6:
                    ea:be:cb:c6:80:49:c2:6a:1d:22:d2:92:2d:25:b7:
                    a9:24:c5:ca:8d:f7:5d:c9:e5:c7:36:cd:e0:7b:b4:
                    5f:f0:06:ec:e8:b3:1a:cb:23:24:59:89:80:ff:7e:
                    4a:1a:0e:b5:1e:36:6f:6e:13:b5:60:22:63:9a:ea:
                    bd:fe:e4:68:a4:2d:1d:47:75:3a:08:03:ef:b0:6c:
                    b3:aa:1a:37:01:1c:4e:63:3f:1d:6c:e8:90:5a:42:
                    6b:09:03:87:4a:0e:36:23:f9:b7:52:ce:a5:85:94:
                    60:e2:97:fe:e1:66:59:dc:48:6e:23:ea:f6:98:61:
                    eb:ca:76:70:7c:a4:c5:a6:13:26:0b:68:54:6e:6b:
                    dd:fe:31:49:cd:0e:d5:a0:87:21:2c:14:19:cf:39:
                    8f:c2:1d:2e:42:71:c1:2f:98:b2:7f:7f:52:09:d2:
                    a8:7b:d6:ea:65:c5:26:11:ae:5d:a1:30:29:f3:59:
                    54:bf:97:dd:0f:40:42:f6:97:dc:d9:91:6a:e2:a2:
                    f5:ae:41:84:d5:51:da:3f:88:0a:33:c3:92:08:47:
                    0b:8e:9c:75:a5:63:e4:4f:c5:f3:17:4b:93:0e:e7:
                    d6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:36:B3:D2:22:E6:70:6F:F5:44:1B:D4:88:99:6C:C4:1D:85:A9:DA
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a343030303a3a2f33342d3334203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4e:ff:56:10:61:6b:7e:dd:42:87:2c:b6:fe:9c:42:9b:e6:95:
         ba:6d:e7:cf:52:4c:51:25:49:80:b0:b1:78:da:9e:fe:6c:73:
         ac:d5:ac:fd:3a:87:b8:9c:38:3c:c3:b7:32:90:f1:02:fa:01:
         89:c7:c8:f4:e2:05:62:3e:8c:50:00:c9:06:4a:6b:df:c8:1f:
         33:a0:f6:8e:5c:09:fb:76:df:24:ac:ff:da:3a:0d:5f:fc:43:
         8d:db:5b:20:bf:a6:ed:f6:78:ba:d1:ed:46:8a:7a:b1:d9:bd:
         a3:f0:5c:44:ae:94:11:7c:b8:30:8e:bb:41:0c:57:c2:0b:8f:
         a1:a5:98:27:51:ea:8b:70:e2:09:f0:23:c1:60:83:45:c9:ee:
         7a:48:41:5f:81:1e:3e:43:bb:4a:54:75:c4:09:d0:81:2e:41:
         d6:c0:44:c1:17:3b:13:df:7f:4e:d5:5a:c7:78:9e:96:0a:62:
         cc:15:a2:00:96:cb:4a:b6:cc:49:6d:ac:0c:31:86:78:a3:d2:
         77:90:d3:b7:c6:14:3a:47:34:97:2d:cd:72:a2:9c:85:4f:1f:
         87:88:ae:1c:49:c4:9b:be:26:40:6d:5c:55:93:44:31:71:ee:
         95:2c:58:14:ee:29:9c:6e:c8:78:f1:b1:59:ff:89:a7:87:fb:
         f7:61:eb:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWF+o+kNIUnM2He4G2CFL79YNjg0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE5RkJBRTVCRjYyMDBGNjBFRjA5Q0RCQzFCOTAwNTBB
N0MwNUUwQTAeFw0yNjAyMDUwMDU2MDFaFw0yNzAyMDQwMTAxMDFaMDMxMTAvBgNV
BAMTKDAxMzZCM0QyMjJFNjcwNkZGNTQ0MUJENDg4OTk2Q0M0MUQ4NUE5REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoVn80V1KeCIHddl8hCgnoeBKY
c32YmH/KdayQ5uq+y8aAScJqHSLSki0lt6kkxcqN913J5cc2zeB7tF/wBuzosxrL
IyRZiYD/fkoaDrUeNm9uE7VgImOa6r3+5GikLR1HdToIA++wbLOqGjcBHE5jPx1s
6JBaQmsJA4dKDjYj+bdSzqWFlGDil/7hZlncSG4j6vaYYevKdnB8pMWmEyYLaFRu
a93+MUnNDtWghyEsFBnPOY/CHS5CccEvmLJ/f1IJ0qh71uplxSYRrl2hMCnzWVS/
l90PQEL2l9zZkWriovWuQYTVUdo/iAozw5IIRwuOnHWlY+RPxfMXS5MO59aJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUATaz0iLmcG/1RBvUiJlsxB2FqdowHwYDVR0j
BBgwFoAUMZ+65b9iAPYO8JzbwbkAUKfAXgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXNTcmY3cGZYTVA3c0Z6M3FSYzY2Y2FkUFp0SFVWd014RGlQazR2eGFk
ckYvMS8zMTlGQkFFNUJGNjIwMEY2MEVGMDlDREJDMUI5MDA1MEE3QzA1RTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxOUZCQUU1QkY2MjAwRjYw
RUYwOUNEQkMxQjkwMDUwQTdDMDVFMEEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlzU3JmN3BmWE1QN3NGejNxUmM2NmNhZFBadEhVVndNeERpUGs0dnhhZHJGLzEv
MzIzODMwMzQzYTMxNjMzMTM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDM2MzEzNjMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBBwYQDANBgkqhkiG9w0BAQsFAAOC
AQEATv9WEGFrft1Chyy2/pxCm+aVum3nz1JMUSVJgLCxeNqe/mxzrNWs/TqHuJw4
PMO3MpDxAvoBicfI9OIFYj6MUADJBkpr38gfM6D2jlwJ+3bfJKz/2joNX/xDjdtb
IL+m7fZ4utHtRop6sdm9o/BcRK6UEXy4MI67QQxXwguPoaWYJ1Hqi3DiCfAjwWCD
RcnuekhBX4EePkO7SlR1xAnQgS5B1sBEwRc7E99/TtVax3ielgpizBWiAJbLSrbM
SW2sDDGGeKPSd5DTt8YUOkc0ly3NcqKchU8fh4iuHEnEm74mQG1cVZNEMXHulSxY
FO4pnG7IePGxWf+Jp4f792Hr2g==
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:24:13 2026 by rpki-client