Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a383030303a3a2f33352d3335203d3e203631363337.roa
File:                     323830343a316331383a383030303a3a2f33352d3335203d3e203631363337.roa (raw, json)
Hash identifier:          6/qCrLYW8mwdg9EbYVRU7SGdemCR6zDkmHMAgtwN3Wg=
Subject key identifier:   D5:28:92:17:A8:47:7B:F8:4E:5F:2B:DC:E0:B0:7A:D7:75:57:48:10
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       4A0380F99C0228A8E3A98A083EA9570F9FE1B245
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a383030303a3a2f33352d3335203d3e203631363337.roa
Signing time:             Thu 05 Feb 2026 01:01:03 +0000
ROA not before:           Thu 05 Feb 2026 00:56:03 +0000
ROA not after:            Thu 04 Feb 2027 01:01:03 +0000
asID:                     61637
IP address blocks:        2804:1c18:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:36:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:03:80:f9:9c:02:28:a8:e3:a9:8a:08:3e:a9:57:0f:9f:e1:b2:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Feb  5 00:56:03 2026 GMT
            Not After : Feb  4 01:01:03 2027 GMT
        Subject: CN=D5289217A8477BF84E5F2BDCE0B07AD775574810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f9:a5:18:e1:f1:07:fd:a0:34:57:ff:49:24:
                    4e:68:1c:ce:0e:44:52:d3:11:7f:1b:ce:e3:af:1a:
                    0e:9e:78:94:90:00:3f:29:ab:f0:7c:00:54:d0:7e:
                    3a:62:e5:16:77:e3:7b:72:31:d3:d6:aa:7d:d7:77:
                    24:cb:85:64:88:7b:11:ff:76:33:d5:5e:ca:76:61:
                    d4:7e:50:52:a4:fd:ee:46:35:e5:7b:84:25:69:45:
                    8d:d5:50:d5:23:3d:28:92:a0:d2:96:74:fe:95:ce:
                    6e:72:f7:97:db:4d:1b:ce:18:b7:32:31:08:6f:3c:
                    94:06:74:9c:f3:dc:cb:2f:4e:72:39:82:bf:f4:af:
                    11:c2:0c:58:ba:a1:46:7f:d7:d9:58:69:dd:a3:28:
                    37:f9:73:99:47:c4:31:08:a1:49:83:2b:25:2d:86:
                    ae:53:fb:56:73:06:82:05:c4:6e:be:ca:7d:ff:c4:
                    1a:2e:90:1b:4e:b6:15:7c:79:b3:df:0e:f2:df:05:
                    a4:da:1b:09:eb:f7:cb:2f:f4:83:5c:e6:49:aa:a4:
                    49:21:39:0b:86:77:a9:16:ab:9c:fa:d3:4a:ff:aa:
                    ad:24:60:1e:ae:61:f2:c5:19:bb:04:c4:75:08:8e:
                    6c:81:4b:be:df:d6:46:fa:97:dd:25:9b:df:f6:67:
                    ee:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:28:92:17:A8:47:7B:F8:4E:5F:2B:DC:E0:B0:7A:D7:75:57:48:10
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a383030303a3a2f33352d3335203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         3c:c2:98:36:49:bb:d0:b8:2b:40:f8:e1:88:22:14:f3:0d:03:
         c5:16:48:71:1a:6c:b0:c8:5c:39:6e:30:bd:da:e6:32:b3:2e:
         f6:39:93:9e:14:f4:d6:ac:25:fd:57:a9:3c:ea:72:4d:01:4b:
         58:fb:36:8a:80:56:a5:42:0b:38:9b:8c:bf:1a:16:01:68:9f:
         c5:06:71:1f:c7:ee:82:6b:25:01:83:32:20:8d:95:28:e4:44:
         2d:2c:57:e1:7d:cd:ee:98:52:86:06:5c:ec:4c:79:83:f1:a5:
         eb:23:b5:3a:24:30:c1:ff:25:b3:11:da:d2:e2:7b:82:4c:2e:
         0d:d0:bf:b6:21:44:9c:a3:58:5b:ee:8f:c8:05:bc:d2:b9:16:
         49:ff:35:81:2a:eb:89:62:73:c3:25:d4:c1:84:47:bc:fe:aa:
         cd:43:e2:91:45:fe:0e:5d:b8:da:c2:75:2a:f3:5d:55:da:33:
         33:b7:27:f4:6e:59:28:41:2e:71:09:81:3b:7b:7b:89:d8:0c:
         06:57:3f:61:78:44:a5:05:d3:cf:8a:aa:21:a4:c3:8c:30:da:
         2a:a8:be:e7:88:bd:ca:30:b0:9e:ca:06:e9:07:26:d6:cb:5a:
         08:ac:29:95:bb:c3:99:b8:7f:f5:bc:2b:55:67:19:20:ab:28:
         7b:83:08:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:24:09 2026 by rpki-client