Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/323830343a313638343a3a2f33322d313238203d3e203533313639.roa
File:                     323830343a313638343a3a2f33322d313238203d3e203533313639.roa (raw, json)
Hash identifier:          dsO1r8hQH7gsFKwD9XIlB3eI3pgXMQe/Jv3bXDbBorw=
Subject key identifier:   32:2D:52:A0:6B:ED:59:23:14:E1:11:75:57:6E:A8:E8:7E:1F:A6:A7
Certificate issuer:       /CN=14DABC9061A328905E8120751E9528DFE978C501
Certificate serial:       6B30FD825029C723D3ACFAB9BB18ECB8D6D77837
Authority key identifier: 14:DA:BC:90:61:A3:28:90:5E:81:20:75:1E:95:28:DF:E9:78:C5:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DABC9061A328905E8120751E9528DFE978C501.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/323830343a313638343a3a2f33322d313238203d3e203533313639.roa
Signing time:             Wed 04 Feb 2026 22:01:44 +0000
ROA not before:           Wed 04 Feb 2026 21:56:44 +0000
ROA not after:            Wed 03 Feb 2027 22:01:44 +0000
asID:                     53169
IP address blocks:        2804:1684::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/14DABC9061A328905E8120751E9528DFE978C501.crl
                          rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/14DABC9061A328905E8120751E9528DFE978C501.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DABC9061A328905E8120751E9528DFE978C501.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:10:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:30:fd:82:50:29:c7:23:d3:ac:fa:b9:bb:18:ec:b8:d6:d7:78:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14DABC9061A328905E8120751E9528DFE978C501
        Validity
            Not Before: Feb  4 21:56:44 2026 GMT
            Not After : Feb  3 22:01:44 2027 GMT
        Subject: CN=322D52A06BED592314E11175576EA8E87E1FA6A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7c:7a:a3:63:36:f9:fd:a0:9c:1b:41:f2:7d:
                    48:39:e3:fe:b8:e1:cd:76:e6:8b:ae:3f:90:94:48:
                    19:3b:cd:10:a1:7c:15:2b:18:30:3e:0f:a2:62:ed:
                    1a:7f:4e:24:2f:7e:a5:c6:e8:1a:06:d3:49:65:0d:
                    ff:6c:89:ea:57:40:fe:78:77:7f:20:b3:3c:77:19:
                    84:fd:32:27:11:f1:6c:6a:94:f4:ad:89:b4:8c:5c:
                    ac:72:9c:1c:fd:b9:d8:8e:4d:72:0f:0e:e8:41:1c:
                    46:9f:a8:b6:e3:61:ed:20:b6:27:2b:53:27:8c:5d:
                    f0:86:d0:63:b2:4b:2b:dd:e9:c0:a9:f0:00:f9:2f:
                    72:6e:7a:1b:30:08:92:7b:c2:6e:8f:f6:27:ca:8c:
                    11:11:97:50:86:02:b3:48:87:e3:dc:e8:90:40:50:
                    8f:cf:e2:d7:b5:d0:a6:70:e5:ba:69:94:c3:35:41:
                    23:ad:81:21:b2:d8:81:ad:5f:78:d1:1d:0f:59:b7:
                    6f:b5:df:54:df:c7:2f:be:58:90:89:e0:2a:77:ca:
                    98:5c:be:a9:97:02:ca:f6:0c:56:71:02:83:05:9b:
                    a2:0f:b9:38:3c:1e:59:08:ae:d6:6c:51:e0:77:09:
                    44:dd:75:88:d8:47:5f:bd:0a:2f:9b:fc:de:27:e8:
                    22:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2D:52:A0:6B:ED:59:23:14:E1:11:75:57:6E:A8:E8:7E:1F:A6:A7
            X509v3 Authority Key Identifier:
                keyid:14:DA:BC:90:61:A3:28:90:5E:81:20:75:1E:95:28:DF:E9:78:C5:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/14DABC9061A328905E8120751E9528DFE978C501.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DABC9061A328905E8120751E9528DFE978C501.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/323830343a313638343a3a2f33322d313238203d3e203533313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1684::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:2f:47:2c:bd:0d:aa:64:de:2c:c0:5b:9e:55:bf:6d:73:52:
         bb:64:38:77:d1:d4:a1:1b:cd:e6:80:68:50:6e:7f:ed:a4:0a:
         be:8c:76:cd:41:4c:dc:c5:98:5b:51:4d:d0:66:0c:48:f5:e7:
         8a:34:d4:2c:72:fc:2f:1d:04:65:7d:d9:99:d8:c6:f4:d7:92:
         b6:86:37:4e:be:ca:9f:97:e9:c6:9a:e1:a6:2f:fa:d0:6f:e1:
         39:05:06:ac:3e:fa:6f:2d:40:80:e5:0b:f3:bf:19:78:9f:0c:
         64:8a:78:74:15:65:c2:6f:46:86:4d:46:e5:0e:36:a4:ed:4a:
         3e:2f:1f:52:e6:de:10:5d:d5:09:56:29:dc:07:a4:a8:e5:c0:
         45:04:22:31:e8:fe:ca:2d:60:c8:18:3f:71:c0:6d:04:57:a7:
         b5:47:82:f3:35:78:2c:78:86:88:66:54:8a:6d:6c:33:8e:b4:
         93:fc:c9:49:b2:f6:53:ef:46:57:e6:c9:dd:f3:99:9e:42:a2:
         d0:9a:e9:3d:2e:b7:67:70:72:01:61:a9:92:de:f2:b7:b3:22:
         0d:b1:5c:0a:52:58:15:7f:5d:37:b8:cc:c4:4a:73:39:48:78:
         c0:d7:4b:ea:23:30:9b:77:83:69:b8:c8:7c:3d:bc:ca:77:3a:
         e5:84:a5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:45:07 2026 by rpki-client