Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/1/323830343a356537303a3a2f33322d313238203d3e20323639303333.roa
File:                     323830343a356537303a3a2f33322d313238203d3e20323639303333.roa (raw, json)
Hash identifier:          HQG+yHGTGV1VgbYAYKkFEGzSdKeqg638r6YmbonCKGk=
Subject key identifier:   82:66:31:00:CC:8A:92:FA:E6:6E:15:7C:B8:F5:98:A0:D2:AA:5B:40
Certificate issuer:       /CN=996BFE16B00A8EF9DDE555A91330A0BC74A38162
Certificate serial:       6FB8819D3150846EC0541D5CD61E0E7955D65753
Authority key identifier: 99:6B:FE:16:B0:0A:8E:F9:DD:E5:55:A9:13:30:A0:BC:74:A3:81:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996BFE16B00A8EF9DDE555A91330A0BC74A38162.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/1/323830343a356537303a3a2f33322d313238203d3e20323639303333.roa
Signing time:             Thu 05 Feb 2026 04:09:21 +0000
ROA not before:           Thu 05 Feb 2026 04:04:21 +0000
ROA not after:            Thu 04 Feb 2027 04:09:21 +0000
asID:                     269033
IP address blocks:        2804:5e70::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/1/996BFE16B00A8EF9DDE555A91330A0BC74A38162.crl
                          rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/1/996BFE16B00A8EF9DDE555A91330A0BC74A38162.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996BFE16B00A8EF9DDE555A91330A0BC74A38162.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:47:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b8:81:9d:31:50:84:6e:c0:54:1d:5c:d6:1e:0e:79:55:d6:57:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=996BFE16B00A8EF9DDE555A91330A0BC74A38162
        Validity
            Not Before: Feb  5 04:04:21 2026 GMT
            Not After : Feb  4 04:09:21 2027 GMT
        Subject: CN=82663100CC8A92FAE66E157CB8F598A0D2AA5B40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f2:53:cc:36:8a:ef:49:4d:a4:d5:84:e2:1f:
                    0a:a6:0f:87:80:10:1e:ae:57:84:81:16:b4:6c:8a:
                    c7:be:33:10:56:f1:e1:f7:f1:ef:e0:63:aa:95:e6:
                    11:4e:06:9a:68:c2:6e:49:e8:ab:1b:6e:4a:6d:5d:
                    14:b0:12:33:ce:9c:a4:85:19:ed:6d:0f:66:26:5b:
                    47:68:4f:5b:bd:b4:b1:fe:61:3d:34:bd:97:6c:21:
                    55:31:b7:d5:2a:af:16:a0:c1:08:35:8c:df:da:c6:
                    65:7b:fa:8e:0b:c0:1c:a9:61:09:91:15:00:84:9c:
                    df:8c:3f:ff:4b:58:21:6d:b9:cb:6e:99:ac:02:07:
                    89:dc:3d:21:d0:98:e6:1a:7d:07:d3:72:23:06:3a:
                    68:04:ab:d4:3a:17:fe:f4:74:85:67:f9:40:29:f5:
                    3d:1e:26:28:74:99:74:d0:4f:50:f7:85:79:39:bf:
                    af:5a:e5:ab:6a:e3:32:26:2c:ab:88:37:f0:7e:31:
                    45:62:8c:58:99:ff:f1:49:66:ff:2a:86:ee:85:2d:
                    64:e5:c3:7c:cc:f2:96:4e:6f:b3:7b:ff:f1:a6:a9:
                    ad:e1:98:36:a0:77:93:18:f5:64:d1:4f:a7:60:bc:
                    ed:56:6c:c1:84:31:05:5b:9b:c4:fc:bc:11:1c:77:
                    c0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:66:31:00:CC:8A:92:FA:E6:6E:15:7C:B8:F5:98:A0:D2:AA:5B:40
            X509v3 Authority Key Identifier:
                keyid:99:6B:FE:16:B0:0A:8E:F9:DD:E5:55:A9:13:30:A0:BC:74:A3:81:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/1/996BFE16B00A8EF9DDE555A91330A0BC74A38162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996BFE16B00A8EF9DDE555A91330A0BC74A38162.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/1/323830343a356537303a3a2f33322d313238203d3e20323639303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e70::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:cc:d6:2f:04:a4:90:f6:42:18:a2:74:3e:72:be:6b:9f:90:
         68:23:72:67:ee:a4:dd:c7:94:3a:47:65:1c:77:0b:10:ca:e4:
         65:e2:e5:c8:85:96:df:f6:f9:87:84:84:19:af:cb:96:ef:d0:
         97:4f:78:aa:ba:25:5f:77:5a:25:4c:0a:b1:15:df:f3:9e:d2:
         a3:39:7f:ac:2a:df:c4:ab:b1:29:e6:67:9d:14:af:61:e7:6c:
         fd:18:51:ce:e4:78:58:97:87:09:06:c5:35:a9:f2:ea:58:44:
         ff:4c:72:1b:21:8b:c0:19:26:77:40:28:26:8c:97:5f:ba:b6:
         e0:61:4f:d1:5d:c3:62:9a:36:f4:57:26:eb:0d:4d:1b:b4:5b:
         7b:b1:17:64:e3:a2:25:14:7e:18:28:0f:75:ea:9b:47:8b:49:
         18:d1:37:bf:17:db:d2:a5:41:53:85:f1:11:54:d0:0d:21:42:
         3a:59:25:60:5b:fd:b7:b4:b4:08:b8:ea:eb:73:5f:97:57:87:
         38:a2:74:73:ac:26:63:23:39:7f:d4:09:e9:ab:a2:ce:eb:76:
         46:1d:b0:6f:25:c3:42:1e:d1:c7:9c:b3:ed:c1:46:c7:5d:7a:
         26:b5:50:31:cd:dc:03:33:9c:de:e3:94:c6:77:b7:b6:c8:cb:
         0b:1f:29:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:19:28 2026 by rpki-client