Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a383030303a3a2f33332d3333203d3e203631363337.roa
File:                     323830343a316331383a383030303a3a2f33332d3333203d3e203631363337.roa (raw, json)
Hash identifier:          5iHxzpMta7ghOjwKvz7r79woLBA8aYwN6IHwCm6gZUU=
Subject key identifier:   14:11:32:E0:32:BC:EA:78:1C:DE:BE:5B:23:6B:20:28:B9:2D:21:63
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       0FA779C8271E09AA0CD6CBC335DD40EDDC0D6EC4
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a383030303a3a2f33332d3333203d3e203631363337.roa
Signing time:             Thu 05 Feb 2026 01:01:04 +0000
ROA not before:           Thu 05 Feb 2026 00:56:04 +0000
ROA not after:            Thu 04 Feb 2027 01:01:04 +0000
asID:                     61637
IP address blocks:        2804:1c18:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:36:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a7:79:c8:27:1e:09:aa:0c:d6:cb:c3:35:dd:40:ed:dc:0d:6e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Feb  5 00:56:04 2026 GMT
            Not After : Feb  4 01:01:04 2027 GMT
        Subject: CN=141132E032BCEA781CDEBE5B236B2028B92D2163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5a:94:cd:0f:6b:89:55:28:fa:f2:41:58:7b:
                    ad:93:39:d9:6e:08:4d:6c:2c:6f:ac:8c:1d:a6:67:
                    f5:04:ed:29:56:31:ad:19:2e:2c:11:9d:2b:95:ac:
                    b3:6e:73:f9:94:ed:fe:2b:51:2b:7c:01:08:ea:ac:
                    b6:63:46:51:64:72:41:e2:f6:b7:02:d1:a4:8f:ea:
                    69:03:cb:f4:49:42:a0:39:49:c5:38:15:92:3b:6b:
                    44:bf:23:e0:f4:73:85:cb:60:39:39:ea:94:2d:2a:
                    0d:69:be:7f:b6:35:bd:67:21:7f:fe:fe:99:81:83:
                    5a:63:21:40:7c:74:6e:d1:66:6f:56:26:fc:1c:ee:
                    03:79:85:16:4a:6c:8a:04:25:85:3f:a7:da:f9:32:
                    79:77:c2:43:63:14:45:e2:5c:39:1c:da:c6:19:9b:
                    3d:7a:cf:ab:52:89:b3:ca:9b:f9:1f:14:63:07:7d:
                    ce:04:52:6a:f6:21:33:4a:00:e9:ac:fc:11:b7:88:
                    ff:da:01:d2:00:77:80:80:2c:c6:16:41:95:f8:3f:
                    8d:ee:8f:73:f4:52:8c:09:c0:9a:fb:8e:44:2c:fc:
                    89:11:4e:86:79:cd:ab:60:73:17:e8:bf:29:83:89:
                    98:0d:30:fc:f3:48:6d:7b:52:e6:2c:ac:2e:4b:d4:
                    90:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:11:32:E0:32:BC:EA:78:1C:DE:BE:5B:23:6B:20:28:B9:2D:21:63
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a383030303a3a2f33332d3333203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         3a:a4:12:1a:77:01:d4:64:ea:75:cd:f8:c2:c5:0d:95:db:6c:
         3a:31:6c:1a:f0:fb:c8:97:e0:0d:43:70:1e:81:ac:b6:c1:ca:
         7b:43:d3:30:9b:6f:09:f4:77:86:d4:11:f7:b1:a6:84:61:2b:
         da:c3:fd:bf:be:2f:44:2a:a9:88:10:3f:c7:28:5d:9d:df:e3:
         32:69:44:99:34:78:f0:c3:f8:24:60:91:4e:b0:98:97:7f:e2:
         ed:6e:54:3b:1b:ea:83:3d:4a:57:20:a6:7a:43:f9:ac:4f:98:
         4d:ec:b9:b5:de:c4:ee:28:b7:3a:b9:72:9d:52:4e:7e:7d:d1:
         a6:28:c1:df:e9:16:bc:6a:a4:be:97:f6:77:14:3e:2f:8c:6d:
         21:f0:eb:dc:ee:bb:ca:40:81:94:a9:fa:a5:ca:1e:15:13:38:
         b9:09:73:d4:1e:58:c7:d2:91:4c:68:e1:8f:aa:b7:2f:f5:cb:
         f7:50:66:eb:2e:f7:5b:90:22:e4:56:a3:77:da:c3:91:80:d7:
         2b:98:6e:c1:61:57:09:4a:90:e1:f0:d1:b3:30:8b:95:c4:d7:
         29:f9:23:ab:07:a2:b3:8c:9c:b8:6a:08:c3:9c:ca:d1:e7:5b:
         90:18:80:32:08:72:dc:2c:69:65:3b:52:c7:91:a1:d5:4e:23:
         f6:02:1d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:47 2026 by rpki-client