Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a383030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a383030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          0tht2POZ2dyXH6W4Ov+MShfeAhLNyMNQlSEPTLPXQ+I=
Subject key identifier:   DC:0C:22:D9:DD:35:64:F5:26:CB:8A:6B:AC:64:D6:0A:C5:53:39:E2
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       35AEC9C81EEA40ADEF2A27CC776E97BD107146FF
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a383030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Thu 05 Feb 2026 01:01:07 +0000
ROA not before:           Thu 05 Feb 2026 00:56:07 +0000
ROA not after:            Thu 04 Feb 2027 01:01:07 +0000
asID:                     61637
IP address blocks:        2804:1c18:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:36:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ae:c9:c8:1e:ea:40:ad:ef:2a:27:cc:77:6e:97:bd:10:71:46:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Feb  5 00:56:07 2026 GMT
            Not After : Feb  4 01:01:07 2027 GMT
        Subject: CN=DC0C22D9DD3564F526CB8A6BAC64D60AC55339E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7f:34:7e:0d:9e:36:75:94:3e:d5:13:8e:c1:
                    e2:a6:75:1f:dc:19:c5:c0:14:eb:dd:33:f9:0f:c7:
                    54:e6:e9:c7:54:10:80:e9:69:fc:3e:fb:19:3f:d5:
                    1c:6f:81:e7:72:dd:76:5a:3d:77:ad:49:79:a5:00:
                    09:e7:55:0b:62:88:24:60:7d:df:f0:d6:58:2e:20:
                    d0:02:e7:f8:73:21:da:b7:41:07:e8:ee:3a:01:e7:
                    30:b9:da:62:6c:c1:a5:0a:f2:1e:25:c6:f9:41:9e:
                    8a:17:25:37:33:20:66:5b:d1:09:e8:db:ad:24:97:
                    d7:bd:c8:14:64:13:2d:76:7e:2d:90:3c:87:36:4f:
                    c7:88:fb:51:9d:a1:51:06:a6:f6:a4:75:04:7e:4e:
                    ca:1f:5d:e7:43:bf:a4:fe:44:e0:43:92:cd:d3:2e:
                    ee:1c:f5:d9:87:70:76:38:89:cd:b7:d8:83:fe:c5:
                    76:56:f2:6c:48:73:c8:e1:3d:dc:d9:7b:f3:f1:1e:
                    53:8c:b5:48:78:76:80:e9:62:28:27:67:99:d9:78:
                    fb:8e:a3:5a:bf:59:22:10:03:69:eb:fd:6f:fa:5b:
                    6e:86:3d:a3:61:11:40:ff:04:b6:fa:4e:6f:9b:cf:
                    c9:3b:29:60:f6:87:37:21:45:92:5f:91:4b:74:b1:
                    84:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0C:22:D9:DD:35:64:F5:26:CB:8A:6B:AC:64:D6:0A:C5:53:39:E2
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a383030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         34:d1:69:e5:b4:3b:1a:d4:2f:28:ed:a7:74:d9:dd:9d:54:9f:
         d9:97:59:cb:09:6d:99:cf:91:76:bf:20:54:c5:bc:f8:79:c2:
         fb:25:d3:2e:18:63:0c:77:c2:ef:b7:ca:b7:d2:a4:23:8f:21:
         9f:3c:05:51:d9:6e:8d:48:8d:0a:6c:d6:dc:e9:61:37:a8:a3:
         cd:8a:45:d5:87:4e:9a:2f:53:31:9b:a8:e6:5f:d3:9c:eb:59:
         b6:5e:91:62:6c:3d:69:04:1e:9d:02:e5:f7:6d:4c:6b:ed:b4:
         d4:3b:1e:1f:ff:04:04:e2:3b:ec:8f:ef:67:b8:f4:86:05:c2:
         dc:18:44:29:89:13:ee:3f:e0:84:30:79:99:63:da:45:65:7a:
         60:11:f8:33:ba:6a:c2:8d:e6:72:74:07:44:ab:1b:e2:9e:c2:
         2e:55:87:19:3f:8e:4b:04:ec:e1:4e:6e:65:04:92:bf:fe:5f:
         1a:61:8e:34:96:f3:21:88:d6:9c:84:b6:6d:59:77:2a:08:f0:
         86:b2:6e:17:be:11:b4:7b:d2:43:01:a0:4f:14:e1:ba:d7:5c:
         7c:5d:45:11:da:75:6f:49:f4:34:b5:55:2c:04:4d:bf:3c:35:
         2d:10:35:4a:c0:09:0b:bf:05:2a:2f:64:26:da:c8:e3:bc:a6:
         2c:a0:ab:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:15:34 2026 by rpki-client