Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a3a2f33332d3333203d3e20323731313137.roa
File:                     323830343a373638343a3a2f33332d3333203d3e20323731313137.roa (raw, json)
Hash identifier:          VyKBSnbi0K2gwa+cfh1lVE9bLSE4sJcI/tKNhtVRcvs=
Subject key identifier:   BE:E6:5C:EE:A8:EC:43:4B:26:D1:59:DB:68:E1:BB:C9:56:D5:F6:38
Certificate issuer:       /CN=62D01A32125D7B1F626C38C25BC340B899793CFA
Certificate serial:       3EB88F846EA8D5F1218E1E58A2FF431AC4C5E506
Authority key identifier: 62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a3a2f33332d3333203d3e20323731313137.roa
Signing time:             Thu 05 Feb 2026 22:12:19 +0000
ROA not before:           Thu 05 Feb 2026 22:07:19 +0000
ROA not after:            Thu 04 Feb 2027 22:12:19 +0000
asID:                     271117
IP address blocks:        2804:7684::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl
                          rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b8:8f:84:6e:a8:d5:f1:21:8e:1e:58:a2:ff:43:1a:c4:c5:e5:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62D01A32125D7B1F626C38C25BC340B899793CFA
        Validity
            Not Before: Feb  5 22:07:19 2026 GMT
            Not After : Feb  4 22:12:19 2027 GMT
        Subject: CN=BEE65CEEA8EC434B26D159DB68E1BBC956D5F638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:65:38:b1:d0:e3:99:4c:54:41:c7:3f:92:b4:
                    0f:59:84:f5:b0:e1:1b:d7:81:e6:06:0d:88:7d:c4:
                    86:c1:f5:da:96:e4:0f:57:06:a1:43:ed:ee:24:24:
                    41:49:3a:74:1f:6d:cb:5a:9a:b7:d0:25:71:e7:e2:
                    78:b7:dc:40:20:5d:5a:4b:f1:5c:42:e7:f8:34:b1:
                    a5:29:f2:09:1f:7b:c1:ce:3e:95:14:6c:46:61:20:
                    c5:8a:60:0a:db:96:99:7e:77:88:61:f3:a3:82:28:
                    93:f3:79:aa:68:4c:6b:46:79:28:88:2c:6e:34:3a:
                    e1:12:e6:66:a2:47:1e:9f:eb:c5:39:cf:bf:52:d6:
                    44:54:c8:de:45:ef:d7:6c:1b:7d:77:5d:0e:95:6b:
                    b5:5e:b8:0f:77:32:3c:ea:a4:3e:cc:b1:35:c4:26:
                    b0:94:1b:52:33:d1:e2:98:ea:b9:c1:4d:4c:91:7f:
                    b0:94:8b:8d:32:ca:23:0c:59:dc:9c:2a:25:ba:f2:
                    90:02:76:aa:a8:97:4e:5e:50:e5:b6:37:49:65:e2:
                    58:eb:b1:6e:77:00:cd:0e:70:25:0a:b1:e2:a2:ce:
                    f6:23:40:1e:11:a7:3d:45:90:c9:74:e9:02:50:2e:
                    35:5c:f3:f6:09:b7:cb:5c:ff:16:46:4d:78:c9:63:
                    8a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E6:5C:EE:A8:EC:43:4B:26:D1:59:DB:68:E1:BB:C9:56:D5:F6:38
            X509v3 Authority Key Identifier:
                keyid:62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a3a2f33332d3333203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7684::/33

    Signature Algorithm: sha256WithRSAEncryption
         58:b4:5c:95:1e:5b:7c:c7:bb:ec:16:6d:c5:34:1f:04:7b:7c:
         78:5e:e1:61:e0:04:f5:82:ac:96:78:c4:d8:b1:9d:e0:9c:75:
         1e:ed:a3:df:19:2b:48:e6:96:13:c0:b9:88:35:e7:41:f0:dc:
         0e:fc:2b:cb:84:d4:c7:54:7d:b7:88:af:52:8c:77:b9:72:ef:
         69:59:2a:1d:7f:96:67:ff:73:7d:dc:60:03:9a:44:35:56:93:
         c3:6b:16:28:1c:83:45:7c:7f:28:b2:02:9b:0d:83:d4:77:e3:
         cd:db:84:57:91:4e:51:02:c7:be:e2:0d:7a:56:b6:f1:87:68:
         2b:a0:23:b7:75:5a:cd:94:0e:1f:43:54:ef:c8:8e:96:9a:3c:
         63:28:34:e1:45:02:86:f9:5e:63:f2:fc:a1:e5:c6:59:f2:1c:
         30:82:c5:7f:8d:03:c9:b9:97:e4:66:55:ea:d7:ff:d2:7c:7e:
         60:a2:b8:7a:57:a8:a5:54:5b:e0:c5:2e:e8:5e:ec:36:77:7d:
         27:af:cc:97:4b:b1:b4:90:f1:95:8c:4a:d6:e2:a4:1f:e0:5c:
         75:b2:fc:73:06:5d:41:21:f3:2d:84:b3:6f:71:f3:08:9b:af:
         c8:2c:8d:1b:ff:9f:9e:31:93:31:b4:0f:d3:89:6d:db:01:dc:
         4d:1d:55:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:27 2026 by rpki-client