Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/1/323830343a363132343a3a2f33322d3334203d3e20323639323135.roa
File:                     323830343a363132343a3a2f33322d3334203d3e20323639323135.roa (raw, json)
Hash identifier:          6D00Hx/ww1Qvi9Rg5dHZwKdWOLBF0wKRc3I7KQUnDFM=
Subject key identifier:   AA:81:99:E8:7B:C4:11:DB:AF:DA:B0:F1:26:EE:6A:2D:E1:19:12:CE
Certificate issuer:       /CN=1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B
Certificate serial:       396D6ED45C2D5F37A59879C576024D8FDE903C2B
Authority key identifier: 1E:6B:79:5E:AD:69:C5:E9:30:00:2F:4C:84:E8:CB:AC:16:DD:A2:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/1/323830343a363132343a3a2f33322d3334203d3e20323639323135.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     269215
IP address blocks:        2804:6124::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/1/1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B.crl
                          rsync://rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/1/1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:6d:6e:d4:5c:2d:5f:37:a5:98:79:c5:76:02:4d:8f:de:90:3c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=AA8199E87BC411DBAFDAB0F126EE6A2DE11912CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2a:b7:21:51:2a:42:b7:6f:a4:18:74:d0:24:
                    9b:30:13:6e:1a:2d:c1:13:f0:4c:2b:b4:2e:60:37:
                    dd:2a:67:e7:b2:0b:65:87:d6:91:06:40:67:d4:86:
                    d9:4f:72:88:c9:52:8b:af:c1:f3:a3:16:92:62:c2:
                    07:46:ac:46:1b:1f:1d:ab:22:2e:13:7b:43:ec:23:
                    87:35:9a:85:d4:70:1f:51:2c:6d:8f:af:88:44:6a:
                    37:bf:ab:81:f5:4e:f3:33:8d:6c:ed:34:0d:0c:82:
                    1f:43:32:20:a8:a8:70:43:56:a1:30:a9:fd:80:90:
                    5d:87:c1:dd:8b:cc:71:48:78:0a:45:f2:08:c7:e6:
                    84:18:64:22:5f:e3:13:fc:5d:0a:c7:41:1f:fb:fd:
                    1b:7e:71:06:6b:09:1c:89:d2:51:fb:44:74:2e:bd:
                    fe:bb:20:fb:fd:3a:b0:b4:59:a7:68:da:dd:6f:45:
                    18:3b:7f:80:ee:62:41:60:14:53:b1:cb:f7:69:48:
                    9d:a8:b4:ed:e3:a0:3f:6f:25:d2:4e:08:9c:3f:0d:
                    d1:7b:a5:93:e4:0d:1d:b9:93:28:db:38:f6:f5:30:
                    ac:29:35:3a:ac:7d:46:09:5e:91:2e:e7:86:27:ad:
                    f9:5b:aa:3e:f9:54:6e:2d:fd:a0:63:84:18:65:9e:
                    27:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:81:99:E8:7B:C4:11:DB:AF:DA:B0:F1:26:EE:6A:2D:E1:19:12:CE
            X509v3 Authority Key Identifier:
                keyid:1E:6B:79:5E:AD:69:C5:E9:30:00:2F:4C:84:E8:CB:AC:16:DD:A2:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/1/1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/1/323830343a363132343a3a2f33322d3334203d3e20323639323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6124::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:be:d1:3e:e8:cb:dc:8a:45:66:2a:66:b8:a6:9d:59:90:ae:
         f7:5e:b6:27:1b:6c:fd:42:69:17:81:78:ae:92:d0:e7:2b:72:
         af:45:16:28:ce:73:4e:d9:b8:8b:80:6b:04:fc:d8:05:51:13:
         1e:e2:4e:38:a4:c6:67:9c:a8:b4:2f:f3:ba:89:72:41:7b:06:
         07:b4:af:98:67:9d:b4:b2:26:6d:82:ad:a6:8b:ca:c7:80:6a:
         18:43:7e:63:9d:81:78:9a:ad:a2:e7:26:66:e9:ee:b7:3e:cb:
         08:81:56:cd:dd:02:cf:f3:bf:8b:bd:3b:5d:dd:ab:5a:ae:53:
         60:f2:ad:f7:d9:cc:4e:99:52:00:f4:a4:a7:29:cf:4f:0c:58:
         40:eb:a8:8c:a6:ec:4f:c1:4d:80:fa:9d:d9:b5:de:ac:59:c8:
         db:82:30:de:5e:ec:2b:24:7f:1c:b3:c9:36:14:89:63:ca:c1:
         81:46:7d:62:cb:aa:70:f5:c0:d0:83:50:b8:5d:31:6e:d3:1b:
         88:95:09:5f:d3:d0:c9:e9:61:ec:7f:57:6b:c4:fe:5e:e4:e6:
         19:fb:38:94:42:66:ec:84:35:8a:16:02:7b:09:ed:c4:df:8c:
         47:f3:7d:98:e5:32:6d:35:07:33:24:19:8e:38:4c:9b:be:db:
         4a:7a:10:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:24:11 2026 by rpki-client