Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a3a2f33322d3332203d3e203631393531.roa
File:                     323830343a313863303a3a2f33322d3332203d3e203631393531.roa (raw, json)
Hash identifier:          tKqIKMQC2BI8/UcIhV3V3XYBHU0u+LLp4Kaw6O+a+ek=
Subject key identifier:   1F:A4:31:35:94:0A:67:24:F7:3D:10:36:FC:E1:90:27:0C:6F:27:B9
Certificate issuer:       /CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
Certificate serial:       5F3CE1B5EE6AD7BC9D35C4EF18E2DEC2507A0A7E
Authority key identifier: D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a3a2f33322d3332203d3e203631393531.roa
Signing time:             Wed 04 Feb 2026 22:28:53 +0000
ROA not before:           Wed 04 Feb 2026 22:23:53 +0000
ROA not after:            Wed 03 Feb 2027 22:28:53 +0000
asID:                     61951
IP address blocks:        2804:18c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl
                          rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:3c:e1:b5:ee:6a:d7:bc:9d:35:c4:ef:18:e2:de:c2:50:7a:0a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
        Validity
            Not Before: Feb  4 22:23:53 2026 GMT
            Not After : Feb  3 22:28:53 2027 GMT
        Subject: CN=1FA43135940A6724F73D1036FCE190270C6F27B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8a:4b:e4:1f:9c:08:2b:cc:bc:4b:ff:2d:e6:
                    b0:fe:69:0d:45:20:55:9a:36:e4:e5:ae:43:b7:4e:
                    5b:7d:b5:22:2c:e1:c3:82:a3:5d:02:c2:d6:03:63:
                    f3:57:18:23:8a:a6:ce:ea:ca:15:70:39:0a:96:76:
                    96:17:11:b8:e7:46:a8:e3:f4:6f:3f:38:77:6b:02:
                    a6:b5:d4:c5:00:50:35:58:8f:e2:f5:6a:a0:94:25:
                    06:89:af:55:ae:5c:07:04:56:d3:c8:5f:f8:2c:7c:
                    7b:d0:9b:95:40:07:58:a7:4a:44:7a:a1:c5:b4:9b:
                    c8:9b:a1:42:8a:b2:d0:53:0d:26:8d:ed:1f:84:c9:
                    08:12:a8:e9:a6:4e:1a:d5:ff:50:20:da:3d:e3:12:
                    41:9c:2d:e8:a1:34:50:68:98:af:b2:32:95:3d:75:
                    ad:f1:52:a3:c2:9f:b1:ef:5c:1c:8a:c9:af:52:a0:
                    5c:77:03:c0:68:4c:b8:44:85:4d:f7:94:73:e7:a8:
                    21:af:62:2f:a4:3a:e9:19:d4:aa:41:e4:41:10:22:
                    e5:6b:9b:70:8f:c0:e7:2d:c1:35:55:d8:19:82:b4:
                    ad:58:23:6b:52:2e:4f:79:38:e9:f3:81:34:f5:97:
                    0b:b0:e9:7d:9d:bc:33:a8:34:e9:c2:14:c8:eb:bf:
                    0a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A4:31:35:94:0A:67:24:F7:3D:10:36:FC:E1:90:27:0C:6F:27:B9
            X509v3 Authority Key Identifier:
                keyid:D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a3a2f33322d3332203d3e203631393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:84:04:52:58:dc:fd:10:25:2a:7d:78:29:fe:aa:de:5c:7c:
         02:45:7e:52:27:00:74:e9:66:3c:72:91:db:91:ae:37:ac:00:
         8d:67:27:20:e6:0e:ca:80:dc:94:5f:dd:7a:06:62:aa:7e:30:
         0c:49:51:59:84:cc:e4:36:e4:2a:b3:80:34:02:94:0d:a7:e6:
         77:cd:0a:83:02:05:a8:90:a1:31:57:dd:1f:9e:27:a0:08:48:
         c1:04:d4:0b:f4:ac:00:0c:97:b3:2c:c6:56:06:e6:c7:20:d6:
         14:ca:5b:9b:05:43:83:47:01:d4:e8:7c:5c:3e:a3:e1:d7:80:
         9b:96:59:b3:20:e2:17:5f:e1:fa:ff:cd:b7:e0:43:73:c1:74:
         ed:72:f4:1e:4f:b2:a8:9a:2d:34:44:0b:29:c2:b6:38:8b:9f:
         5a:c4:31:8b:99:de:45:3c:ee:a6:ed:a0:6b:89:8d:14:dd:47:
         8b:10:e2:cf:a3:0d:3a:86:f0:66:c1:f1:60:ed:a9:f5:01:ca:
         52:21:2e:e2:72:f7:9c:e1:19:e2:03:86:b9:47:be:0d:de:ad:
         2d:45:53:9a:b3:16:fe:96:40:dc:6b:e0:2e:26:b8:e1:26:c7:
         35:67:ab:00:a6:2c:a7:0b:1e:7b:cc:df:9b:be:2d:09:e6:3f:
         50:bb:b3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:20:09 2026 by rpki-client