Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a633030303a3a2f33342d3334203d3e203631363337.roa
File:                     323830343a316331383a633030303a3a2f33342d3334203d3e203631363337.roa (raw, json)
Hash identifier:          iZe5pDRpuQ2VdihJg2HwDXwCw7bGNokT0ur3VD2j2AE=
Subject key identifier:   70:93:82:A2:8F:A4:00:94:C2:AF:E1:01:2C:1A:40:35:44:56:04:01
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       258D4035F5607578CB9906150DA89CD18271EDC6
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a633030303a3a2f33342d3334203d3e203631363337.roa
Signing time:             Thu 05 Feb 2026 01:01:05 +0000
ROA not before:           Thu 05 Feb 2026 00:56:05 +0000
ROA not after:            Thu 04 Feb 2027 01:01:05 +0000
asID:                     61637
IP address blocks:        2804:1c18:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:36:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:8d:40:35:f5:60:75:78:cb:99:06:15:0d:a8:9c:d1:82:71:ed:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Feb  5 00:56:05 2026 GMT
            Not After : Feb  4 01:01:05 2027 GMT
        Subject: CN=709382A28FA40094C2AFE1012C1A403544560401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4e:23:5d:11:0f:2c:5c:27:22:8d:14:6a:9b:
                    17:d0:d9:38:93:5b:f5:72:fd:a3:7e:a0:5a:a7:9c:
                    2d:bb:ea:96:3c:b4:ef:2b:e5:5a:4d:52:97:96:2b:
                    5b:0f:39:11:0b:61:06:a2:17:99:ca:9f:39:86:70:
                    fa:87:cb:b1:a7:56:08:69:7a:fa:f8:bb:fa:08:4f:
                    c8:e3:2e:a1:2f:0f:d2:ba:ee:ce:ba:35:27:1d:96:
                    19:6d:a5:ea:9d:d6:c8:c8:ac:9b:6a:82:c8:67:7e:
                    ef:40:6e:9f:8e:50:04:77:72:69:51:9b:d0:5f:d3:
                    59:86:a8:a3:81:12:ef:41:fa:03:4a:2b:fd:b0:48:
                    38:4a:39:f4:4d:f7:0a:26:59:9f:ce:11:5b:4c:80:
                    d7:cc:af:e2:4a:08:31:90:fc:42:0f:f3:90:ca:55:
                    f2:35:c9:41:65:51:a7:8f:f4:a5:6e:a8:9f:6d:70:
                    46:26:0c:8f:bd:32:a2:bd:cb:62:ea:9e:27:53:36:
                    90:0b:9f:f7:52:b0:d1:3a:c4:48:49:c9:d4:fe:65:
                    d6:c5:47:bb:7b:6d:cc:6f:39:36:a3:97:d2:1d:83:
                    7b:4f:c3:a6:01:8e:e7:f0:af:1a:3f:b2:ba:27:39:
                    2d:a9:fe:6d:a4:4c:97:b6:e3:51:a6:9d:dc:ba:2b:
                    6a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:93:82:A2:8F:A4:00:94:C2:AF:E1:01:2C:1A:40:35:44:56:04:01
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a633030303a3a2f33342d3334203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         83:7b:1c:ff:52:14:b7:4c:cc:06:79:fc:c4:81:3e:71:a7:b1:
         c0:e3:14:4c:b7:94:6a:ea:08:6d:ab:da:63:d3:e4:63:31:0b:
         d8:db:f9:4e:e1:3f:6b:10:79:b2:a9:ad:90:7b:d4:ce:76:b9:
         ad:3e:1f:df:25:ff:fa:ac:2d:38:be:f3:e0:3a:5d:04:54:a7:
         ee:c2:42:6f:1a:c1:50:0f:06:8f:eb:3f:13:d9:34:ea:00:ca:
         87:52:f5:a0:5d:3c:90:2e:08:6c:34:f6:26:19:28:c7:68:a0:
         95:1d:8b:65:b1:26:27:17:79:80:85:f4:c6:a3:e2:3c:38:92:
         f5:b4:03:6c:d1:17:2f:d0:40:75:d1:58:77:1b:95:db:67:04:
         ab:4c:83:53:44:5a:7c:79:71:22:31:8b:8f:e1:ee:5f:63:4e:
         c4:42:4b:0f:03:7c:fb:e1:68:ac:4e:83:aa:20:a2:e0:e9:c5:
         be:20:78:b4:50:35:77:d1:8c:73:9f:de:8a:89:5f:9a:84:b0:
         86:76:1f:39:3f:4d:b6:8d:bf:b8:cf:fc:09:40:98:ff:22:40:
         4c:cb:6a:11:b7:8b:e4:40:0a:c4:4b:29:4b:e3:ab:78:d2:49:
         1b:40:5f:df:d5:c2:7f:de:cc:bb:04:ff:d9:03:fd:47:65:02:
         d3:a9:f0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:15:35 2026 by rpki-client