Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/323830343a333634343a3a2f3336203d3e20323636333338.roa
File:                     323830343a333634343a3a2f3336203d3e20323636333338.roa (raw, json)
Hash identifier:          iuJ5CKitN1sF2bjzuJHA1FoJXfzvbE6hyhcyO0UFics=
Subject key identifier:   CE:23:60:E4:F1:E1:60:16:F3:3F:2C:7A:41:02:3B:63:5F:BB:1D:20
Certificate issuer:       /CN=4EE0AA39E5673205B615B1337C24E86FBCD3C635
Certificate serial:       59BAC58E5B5EF370B243F5536C7C4149DBC45267
Authority key identifier: 4E:E0:AA:39:E5:67:32:05:B6:15:B1:33:7C:24:E8:6F:BC:D3:C6:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/323830343a333634343a3a2f3336203d3e20323636333338.roa
Signing time:             Fri 06 Feb 2026 19:00:00 +0000
ROA not before:           Fri 06 Feb 2026 18:55:00 +0000
ROA not after:            Sat 06 Feb 2027 19:00:00 +0000
asID:                     266338
IP address blocks:        2804:3644::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.crl
                          rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ba:c5:8e:5b:5e:f3:70:b2:43:f5:53:6c:7c:41:49:db:c4:52:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EE0AA39E5673205B615B1337C24E86FBCD3C635
        Validity
            Not Before: Feb  6 18:55:00 2026 GMT
            Not After : Feb  6 19:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3d:6f:72:47:88:52:25:a1:d7:09:87:bd:95:
                    04:26:da:23:21:64:bf:e8:6e:ff:da:5b:d2:d2:44:
                    e4:a8:66:98:c6:d4:3f:e5:73:57:a9:cd:30:76:89:
                    de:c0:64:c3:f0:a3:b2:84:dd:50:11:9a:d2:d4:b4:
                    e7:87:e1:7d:fc:78:48:04:8d:10:18:ce:c7:6a:2a:
                    0a:36:79:54:a0:c3:28:2f:a1:4b:22:b9:18:94:1d:
                    7c:90:b0:52:87:40:ed:8a:b5:71:8c:85:90:8c:9b:
                    5d:40:8d:02:92:94:bf:f8:f6:d5:55:4b:b7:da:98:
                    cc:d3:2e:24:ef:bb:df:3f:56:65:53:c6:da:00:5f:
                    47:5c:51:8a:83:56:ad:53:72:ef:d3:28:c8:3e:ef:
                    a4:09:3d:51:05:73:e1:da:7c:12:e7:b0:a7:6f:46:
                    ee:ce:2e:6e:15:80:90:6e:6a:9c:3f:a6:5a:ef:77:
                    2f:48:a6:09:cd:44:fc:ac:f2:56:eb:fa:98:d1:97:
                    e2:a3:b7:0d:80:17:58:12:1a:69:9a:e5:62:45:7f:
                    89:bf:96:37:29:5a:98:a3:7c:43:84:ec:46:4d:29:
                    e9:12:68:5c:c7:fe:dc:e6:d3:be:85:bb:1d:c9:d0:
                    b8:80:00:76:94:1b:db:eb:c3:f9:f9:6f:0e:57:ac:
                    4b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:23:60:E4:F1:E1:60:16:F3:3F:2C:7A:41:02:3B:63:5F:BB:1D:20
            X509v3 Authority Key Identifier:
                keyid:4E:E0:AA:39:E5:67:32:05:B6:15:B1:33:7C:24:E8:6F:BC:D3:C6:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/323830343a333634343a3a2f3336203d3e20323636333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3644::/36

    Signature Algorithm: sha256WithRSAEncryption
         3d:c2:6e:b7:f8:3d:57:c4:cb:b8:f0:de:30:0c:14:06:98:18:
         8a:6e:72:31:35:e9:fa:fd:80:71:13:2a:50:ff:8b:e7:c2:ed:
         58:8b:b8:8c:8a:e2:0c:ab:80:c8:a4:39:b6:b1:6d:c3:b4:1c:
         dd:63:4f:51:3b:03:34:e9:13:83:82:7e:87:66:05:8d:4d:83:
         bd:da:ff:39:31:8e:1a:e3:6c:46:a5:6a:7d:13:da:3e:95:d8:
         48:31:e1:d3:ca:23:c7:9f:9b:28:ed:37:55:61:cb:b9:bf:1a:
         e6:36:49:d1:47:ad:ce:f7:22:ac:1f:b7:f0:ee:e8:e7:6e:41:
         20:f3:43:86:14:2d:0c:2c:04:39:45:b0:7a:4c:fb:50:61:cf:
         50:72:0d:40:b4:64:cb:26:a5:73:fa:46:1f:0b:9b:1c:af:be:
         20:02:14:2a:34:6a:6f:f5:c0:90:a8:01:5f:40:31:46:5c:58:
         5f:47:42:08:25:37:42:0b:c1:f4:2f:86:cb:fa:50:31:86:8c:
         12:15:7b:a9:8b:6e:09:f6:a4:93:87:98:47:13:36:98:c1:3d:
         29:ba:06:01:ca:5a:ca:38:da:ab:6d:c7:fd:de:52:83:91:ad:
         1b:c9:e4:ef:c5:6d:e1:48:13:57:52:9d:c6:13:fe:92:41:47:
         59:74:cc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:46 2026 by rpki-client