Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/323830343a313936343a383030303a3a2f33332d3333203d3e203631373932.roa
File:                     323830343a313936343a383030303a3a2f33332d3333203d3e203631373932.roa (raw, json)
Hash identifier:          jQn6bNShNRccKfizsl/8A30O75ibJQDVEx9YPr3zU38=
Subject key identifier:   C4:D8:DE:6B:A4:24:61:12:0D:D1:E0:19:3D:08:F8:36:1B:14:52:C9
Certificate issuer:       /CN=CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018
Certificate serial:       10B358B3B219F26D0A4709990474475F6D4022A6
Authority key identifier: CF:3A:0F:4D:CF:62:E8:BC:D4:1F:46:B5:74:F7:A5:5C:04:2E:E0:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/323830343a313936343a383030303a3a2f33332d3333203d3e203631373932.roa
Signing time:             Thu 05 Feb 2026 21:20:25 +0000
ROA not before:           Thu 05 Feb 2026 21:15:25 +0000
ROA not after:            Thu 04 Feb 2027 21:20:25 +0000
asID:                     61792
IP address blocks:        2804:1964:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.crl
                          rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 14:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b3:58:b3:b2:19:f2:6d:0a:47:09:99:04:74:47:5f:6d:40:22:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018
        Validity
            Not Before: Feb  5 21:15:25 2026 GMT
            Not After : Feb  4 21:20:25 2027 GMT
        Subject: CN=C4D8DE6BA42461120DD1E0193D08F8361B1452C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:9f:e5:f0:7a:70:e0:4a:ae:f1:3c:9f:5b:
                    ad:1e:63:87:05:6e:2e:7b:21:17:03:ec:0d:7e:6d:
                    34:33:58:e3:3f:ad:89:bc:4b:a5:80:97:ef:b1:47:
                    6a:c1:10:17:f4:1c:38:19:a3:66:2c:e7:83:92:98:
                    ad:59:83:7f:a3:6e:53:d4:7b:90:27:4f:11:eb:7a:
                    cc:34:81:3f:81:71:ac:83:89:d2:e1:e7:44:bc:65:
                    d3:32:c1:ae:c3:9e:5d:86:02:5e:fc:e8:9a:8c:29:
                    3e:f2:1d:7c:df:b9:88:e7:f4:29:4b:c9:f6:c5:8b:
                    f5:e2:0e:d1:c9:d1:ff:e9:2c:0b:c0:b0:ae:23:8d:
                    6f:7c:13:97:01:de:87:3b:b2:7f:55:8d:5e:a8:2f:
                    5b:06:b0:c2:0d:b4:77:46:c2:3d:a3:f9:e5:9b:99:
                    00:61:c9:2e:42:12:8d:0c:a9:7a:23:72:2f:b8:ab:
                    c7:11:46:19:0b:4f:8d:21:c9:d0:ea:8d:b4:50:88:
                    8c:0a:73:cf:14:53:c9:b6:06:b1:05:b4:76:6f:6f:
                    2e:84:e4:a9:52:10:a1:9e:5e:70:c9:28:98:a5:f9:
                    af:09:de:6c:ef:54:3b:55:05:7c:d7:22:47:f0:56:
                    bc:24:6e:5d:f9:0a:92:77:24:86:ab:1d:3a:c2:ea:
                    2a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D8:DE:6B:A4:24:61:12:0D:D1:E0:19:3D:08:F8:36:1B:14:52:C9
            X509v3 Authority Key Identifier:
                keyid:CF:3A:0F:4D:CF:62:E8:BC:D4:1F:46:B5:74:F7:A5:5C:04:2E:E0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/323830343a313936343a383030303a3a2f33332d3333203d3e203631373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1964:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         86:6b:1b:44:7e:7e:15:97:70:a1:69:78:b2:7c:61:24:55:f0:
         75:ce:62:c6:47:3d:17:59:8b:97:93:33:d0:dc:ae:28:b5:ee:
         85:6a:49:bd:8e:d4:55:7f:b3:d5:db:3e:f1:7a:6a:cb:e9:65:
         07:47:5b:4a:c9:fc:67:b6:f9:c4:03:5c:03:d0:6b:29:e5:38:
         cc:57:df:c7:e8:cb:02:ba:72:c8:04:e5:ab:a8:7d:00:f3:70:
         5b:91:1a:4a:70:e3:4f:06:fe:b6:1a:29:fc:0c:52:10:08:73:
         23:ec:00:56:37:08:f1:fd:6a:62:f3:d0:df:8a:67:0b:fe:d2:
         7d:ef:69:3d:7b:88:1d:28:9a:09:7d:79:df:03:71:0c:ca:82:
         5f:d2:88:b0:1d:f7:f6:15:10:6e:c7:1d:1b:63:ec:13:c5:69:
         70:90:3d:92:ea:e1:7d:1c:cd:b0:40:a9:d2:93:92:c0:2e:6d:
         ad:8d:ea:3c:4e:b3:c6:c8:bf:88:b6:7a:af:05:64:1b:8e:60:
         65:65:10:6b:6e:cf:97:3c:47:15:f2:f3:3f:a6:9f:36:a6:a3:
         b3:63:2f:7f:72:a5:57:2a:1d:be:4d:ef:82:da:d0:8a:37:7c:
         f7:54:88:7b:85:ce:7e:90:37:bf:fa:c3:b8:31:f5:bb:bb:cb:
         02:52:1f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:38 2026 by rpki-client