Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/323830343a323366633a3a2f33322d3438203d3e20323634313936.roa
File:                     323830343a323366633a3a2f33322d3438203d3e20323634313936.roa (raw, json)
Hash identifier:          rfZGH25q51CNYLfSmIxoGFPHqDv/D46uQDFF2hx2HsM=
Subject key identifier:   7D:68:F9:78:92:69:88:0B:99:61:8B:58:A3:42:4E:EB:96:BD:1F:9B
Certificate issuer:       /CN=42361EAB494B759A64EFEB313189F9E2DF6603C8
Certificate serial:       274C260177C6D39CE442A9860A1C7EF792990869
Authority key identifier: 42:36:1E:AB:49:4B:75:9A:64:EF:EB:31:31:89:F9:E2:DF:66:03:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/323830343a323366633a3a2f33322d3438203d3e20323634313936.roa
Signing time:             Wed 04 Feb 2026 22:42:43 +0000
ROA not before:           Wed 04 Feb 2026 22:37:43 +0000
ROA not after:            Wed 03 Feb 2027 22:42:43 +0000
asID:                     264196
IP address blocks:        2804:23fc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.crl
                          rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:4c:26:01:77:c6:d3:9c:e4:42:a9:86:0a:1c:7e:f7:92:99:08:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42361EAB494B759A64EFEB313189F9E2DF6603C8
        Validity
            Not Before: Feb  4 22:37:43 2026 GMT
            Not After : Feb  3 22:42:43 2027 GMT
        Subject: CN=7D68F9789269880B99618B58A3424EEB96BD1F9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a3:65:99:f2:d9:07:0c:a1:27:17:e8:7f:c4:
                    e0:fd:41:88:b4:54:fe:5d:79:bb:34:59:55:3c:49:
                    23:f5:87:85:22:8f:fd:fc:7b:5a:aa:06:cb:b9:d3:
                    92:8d:3b:ca:31:f3:96:fd:e6:23:97:37:a0:3d:8d:
                    48:d1:30:60:e0:e9:6c:26:e1:24:d2:f0:ee:36:23:
                    e9:5c:e6:08:b9:12:84:ca:23:c9:1c:8b:52:4c:d1:
                    d4:e8:28:70:73:e9:ab:8c:6d:99:f2:70:0e:d4:6d:
                    4f:78:61:54:76:d8:3c:49:a1:95:e2:71:a1:70:eb:
                    45:1c:09:7a:e4:6e:e3:cb:b7:63:7c:3d:63:fa:2d:
                    fa:e5:42:8d:89:97:da:00:c6:ee:7e:22:70:19:09:
                    7b:9e:5b:cc:30:43:05:6b:7e:e1:0a:0a:7c:97:5e:
                    ed:0d:13:1e:39:89:20:62:e5:97:83:cb:13:95:be:
                    fd:4b:34:3a:3f:73:33:d5:5e:14:94:23:3c:32:3f:
                    df:6d:98:60:e2:a4:35:e5:78:f5:15:32:2b:92:8e:
                    24:80:2d:a2:5a:ae:b2:ca:98:4b:88:68:43:fe:d6:
                    6a:30:47:f5:a5:2e:b9:b8:64:8f:97:aa:7a:60:0c:
                    80:57:eb:f8:8a:b5:79:13:8d:49:c0:a6:7a:f2:b0:
                    38:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:68:F9:78:92:69:88:0B:99:61:8B:58:A3:42:4E:EB:96:BD:1F:9B
            X509v3 Authority Key Identifier:
                keyid:42:36:1E:AB:49:4B:75:9A:64:EF:EB:31:31:89:F9:E2:DF:66:03:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/323830343a323366633a3a2f33322d3438203d3e20323634313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:49:56:24:8d:23:56:1d:db:17:7d:ca:0c:55:81:fd:3e:34:
         20:0c:8d:43:fe:72:a6:31:68:53:f4:3d:1d:9f:0a:e2:ee:35:
         14:ed:3f:98:35:64:07:d4:a6:e5:69:c6:5b:92:a1:3b:f4:9a:
         24:c9:2b:cd:4f:9a:10:61:a6:fa:d1:1c:84:a8:76:2b:47:49:
         fb:29:76:03:0d:ba:18:fc:a7:eb:48:8c:f6:79:86:f3:33:0c:
         e6:f1:c9:48:eb:76:61:b6:ce:8c:9c:43:93:a3:4d:a8:78:89:
         c3:fd:12:4f:06:78:c5:77:6f:41:31:4e:ec:0d:62:bf:ec:c3:
         2f:13:9d:97:03:37:78:c1:2c:a0:77:2f:c4:eb:0b:3b:43:80:
         e3:f1:24:8e:04:b4:9c:f9:b6:6b:60:72:a4:bb:40:98:61:69:
         75:b5:d8:43:75:3f:43:ff:5a:c0:c2:83:6c:2b:c2:66:4d:fc:
         4b:42:26:e9:a6:87:e7:8c:e4:38:bf:99:05:3e:02:ab:5f:43:
         4c:f5:d8:51:cc:48:a6:33:bf:96:67:99:02:d1:e3:1e:c8:18:
         8f:03:52:34:06:a3:10:c1:41:99:84:84:51:cc:56:99:ba:c1:
         06:1c:81:86:0d:37:d5:5d:63:e0:a1:66:95:78:3d:99:61:18:
         7d:33:38:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:12 2026 by rpki-client