Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/323830343a363262383a3a2f33322d3334203d3e20323639333134.roa
File:                     323830343a363262383a3a2f33322d3334203d3e20323639333134.roa (raw, json)
Hash identifier:          VOoS2rIR2u5mGkfmhZ5MbBu6mdLIkn2AnpGufi3llEc=
Subject key identifier:   82:8E:9C:26:0F:6C:B4:A6:70:8F:BF:D1:7B:24:20:F7:70:E7:D0:8D
Certificate issuer:       /CN=2A6491204C711A84AD522B857DDD79956488BAA2
Certificate serial:       60E11FC6B63A814D9AAE982AEDBE32CC13D83B0D
Authority key identifier: 2A:64:91:20:4C:71:1A:84:AD:52:2B:85:7D:DD:79:95:64:88:BA:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6491204C711A84AD522B857DDD79956488BAA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/323830343a363262383a3a2f33322d3334203d3e20323639333134.roa
Signing time:             Thu 05 Feb 2026 13:26:15 +0000
ROA not before:           Thu 05 Feb 2026 13:21:15 +0000
ROA not after:            Thu 04 Feb 2027 13:26:15 +0000
asID:                     269314
IP address blocks:        2804:62b8::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/2A6491204C711A84AD522B857DDD79956488BAA2.crl
                          rsync://rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/2A6491204C711A84AD522B857DDD79956488BAA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6491204C711A84AD522B857DDD79956488BAA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e1:1f:c6:b6:3a:81:4d:9a:ae:98:2a:ed:be:32:cc:13:d8:3b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6491204C711A84AD522B857DDD79956488BAA2
        Validity
            Not Before: Feb  5 13:21:15 2026 GMT
            Not After : Feb  4 13:26:15 2027 GMT
        Subject: CN=828E9C260F6CB4A6708FBFD17B2420F770E7D08D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b4:43:94:71:b5:7a:4c:2e:eb:fc:54:90:50:
                    4e:21:5b:30:3d:58:57:14:83:75:fe:a1:29:e2:a7:
                    d5:43:ba:24:21:93:02:1c:56:11:a9:f8:92:1d:d2:
                    a1:b1:c3:e0:d9:05:44:31:41:0f:90:74:66:1c:27:
                    c1:82:5c:91:16:82:be:b7:c0:40:61:79:c1:4f:8e:
                    0c:0d:ea:08:80:9a:87:cb:85:c8:62:ec:31:53:07:
                    ab:da:85:b8:87:1b:67:7f:ce:86:67:24:1d:be:76:
                    a0:35:88:91:7b:95:86:ed:5f:19:68:8b:b4:65:3c:
                    64:d3:47:54:fc:64:1d:5a:d7:a7:3e:66:fc:62:6c:
                    7f:b3:fe:0f:67:5f:0f:16:c0:d9:17:5b:f2:18:da:
                    1c:69:6d:b7:08:c8:ae:e5:d4:d9:e3:52:d2:bc:a1:
                    c8:d5:e9:79:14:ab:b5:e8:5d:db:96:e3:3d:d6:0a:
                    23:1d:e0:41:7e:0c:94:ae:ef:f2:94:71:db:4c:c0:
                    2d:a9:57:be:e9:32:4d:80:79:6d:52:46:f4:62:96:
                    bc:56:d8:ca:68:6c:df:2f:2d:f0:ac:e6:68:6a:a9:
                    9b:09:02:50:b4:f4:77:45:75:a3:7b:31:43:a3:cc:
                    9a:60:34:77:7e:c9:63:a1:4c:5e:f4:5d:23:b6:a4:
                    9a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8E:9C:26:0F:6C:B4:A6:70:8F:BF:D1:7B:24:20:F7:70:E7:D0:8D
            X509v3 Authority Key Identifier:
                keyid:2A:64:91:20:4C:71:1A:84:AD:52:2B:85:7D:DD:79:95:64:88:BA:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/2A6491204C711A84AD522B857DDD79956488BAA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6491204C711A84AD522B857DDD79956488BAA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/323830343a363262383a3a2f33322d3334203d3e20323639333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:62b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:ac:c6:8b:87:86:0a:88:a5:d2:1f:06:cf:47:e5:25:a8:c7:
         1d:23:ae:90:1f:41:44:68:27:09:5d:e8:1d:db:83:93:c7:10:
         ff:bf:ec:af:3d:8a:81:db:89:ed:2d:d2:85:23:78:b6:99:ad:
         98:d9:ce:74:db:70:fb:1d:22:0b:cf:2d:49:65:96:93:1b:1c:
         38:24:12:3c:1e:f1:8f:0c:4e:01:02:b6:1d:23:d1:28:44:01:
         ac:b9:26:2f:e7:90:57:d4:c2:9d:68:c7:5d:6d:76:27:56:8b:
         6f:e5:4c:64:5b:1b:da:a8:b1:85:bb:8a:31:a2:31:9c:a7:36:
         1a:4b:bf:12:40:63:d1:10:3f:39:bf:f9:d8:91:17:94:5d:07:
         19:19:bb:10:5d:b1:b1:c2:64:0b:5a:16:61:c1:16:cd:a3:d3:
         b9:44:ef:2a:3c:5a:50:79:9e:e2:6a:36:fb:04:84:ed:51:4a:
         9c:88:3a:d0:83:e8:ee:6c:c0:a6:fe:d8:3d:af:b0:03:0c:a7:
         10:d2:13:3c:00:7b:ea:ec:6e:d3:c6:2f:76:f0:e3:67:e8:4f:
         39:12:c6:a2:18:7c:4b:6f:8d:3d:30:a3:57:cd:15:5e:59:a5:
         ed:94:3d:66:79:64:2f:71:fd:f7:26:2b:bf:c7:96:c7:26:a7:
         ca:59:15:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:22:53 2026 by rpki-client