Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/323830343a323461633a383030303a3a2f33332d3333203d3e20323634323337.roa
File:                     323830343a323461633a383030303a3a2f33332d3333203d3e20323634323337.roa (raw, json)
Hash identifier:          SPOWT5DVdkWw800TtKJj51MjNnbIBdPHvOi5aRCjPGo=
Subject key identifier:   E7:34:8F:CC:48:47:88:52:34:85:20:C6:E7:CE:79:99:27:0C:18:DD
Certificate issuer:       /CN=66D5AB14A687F80E7A5A3698F13E2B2421405A11
Certificate serial:       6A355F5AE4C83C80C3AFE6C692F30FCB481532F9
Authority key identifier: 66:D5:AB:14:A6:87:F8:0E:7A:5A:36:98:F1:3E:2B:24:21:40:5A:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/323830343a323461633a383030303a3a2f33332d3333203d3e20323634323337.roa
Signing time:             Wed 04 Feb 2026 20:00:25 +0000
ROA not before:           Wed 04 Feb 2026 19:55:25 +0000
ROA not after:            Wed 03 Feb 2027 20:00:25 +0000
asID:                     264237
IP address blocks:        2804:24ac:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.crl
                          rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:07:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:35:5f:5a:e4:c8:3c:80:c3:af:e6:c6:92:f3:0f:cb:48:15:32:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66D5AB14A687F80E7A5A3698F13E2B2421405A11
        Validity
            Not Before: Feb  4 19:55:25 2026 GMT
            Not After : Feb  3 20:00:25 2027 GMT
        Subject: CN=E7348FCC48478852348520C6E7CE7999270C18DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:72:1b:97:19:30:c6:84:3d:7c:68:a1:10:68:
                    3a:f8:ad:8b:d9:0c:b9:73:4d:5a:f7:02:81:e9:2f:
                    a2:12:75:cd:4e:8e:96:2c:f1:f2:9f:1e:cb:22:0d:
                    0e:d0:60:3b:df:4d:56:fa:94:5e:14:af:3f:11:f7:
                    73:ed:38:80:c5:32:8f:9b:3a:06:61:ce:48:c1:16:
                    60:52:f4:ef:31:e3:47:a3:58:ca:0d:37:e1:44:27:
                    09:39:99:74:f3:34:5b:de:25:fd:5c:5b:ba:ac:c4:
                    8e:4f:35:cf:88:77:28:a9:f5:62:5e:9b:1f:24:6c:
                    38:63:d5:e1:07:4a:46:56:b8:32:bf:9e:04:b6:fd:
                    80:59:5c:7e:df:a7:a0:70:61:9b:04:8d:69:0e:ed:
                    54:d1:9c:d5:0e:42:cf:90:3d:e4:ac:79:12:af:a2:
                    4c:5f:e0:6e:48:62:d1:27:2a:e5:6c:01:2a:6e:6f:
                    ab:db:05:d5:ac:84:54:00:50:52:3f:6b:40:dc:83:
                    bf:ff:72:0f:d7:c8:0e:2a:6e:bf:b3:f2:e0:70:27:
                    3c:44:52:9a:ee:ea:24:f5:84:e8:88:dc:07:23:6e:
                    cc:d2:9a:2b:2b:2a:d9:15:32:c3:cb:3d:f3:8c:a6:
                    43:2c:e6:c6:21:70:03:16:f0:32:c5:90:72:bd:d4:
                    98:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:34:8F:CC:48:47:88:52:34:85:20:C6:E7:CE:79:99:27:0C:18:DD
            X509v3 Authority Key Identifier:
                keyid:66:D5:AB:14:A6:87:F8:0E:7A:5A:36:98:F1:3E:2B:24:21:40:5A:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/323830343a323461633a383030303a3a2f33332d3333203d3e20323634323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24ac:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         18:dd:e7:fd:88:35:ea:85:67:f3:a5:b1:08:29:23:a7:c8:5a:
         56:91:47:1f:10:e6:ff:f5:14:08:01:3b:31:0b:af:98:ec:16:
         c0:a9:7e:55:9a:9d:65:45:9f:a7:0e:db:8c:00:de:9c:b3:ad:
         d3:9b:cd:7d:1b:87:97:86:d9:67:36:10:50:d0:0b:ce:a4:f2:
         f3:20:e6:18:8d:2b:fa:c3:72:c6:69:bc:d9:bf:06:44:da:0d:
         1e:a9:7d:d5:84:12:bf:bd:ce:8c:00:df:b5:ae:0f:49:c3:85:
         6b:e2:92:33:e8:00:85:d7:a0:e9:f0:9e:29:83:eb:27:c9:42:
         87:2f:b4:c5:1d:92:6e:8a:36:7b:c4:f7:53:52:73:cc:4b:12:
         0f:02:e9:b7:d4:d8:49:f3:bb:f6:e0:e6:97:2e:8c:43:8d:d6:
         81:97:b7:aa:60:66:4c:1a:90:fc:a5:7e:c5:65:5c:36:63:f5:
         89:8f:c1:33:7e:05:62:9b:e0:e1:25:a1:59:c8:18:a5:9e:99:
         d8:d1:54:a5:54:ce:fe:e0:93:df:be:7a:5e:95:3f:5a:e0:04:
         fa:e8:dd:30:9e:00:9b:61:a5:b1:ab:f8:d1:cb:d9:31:a4:01:
         41:27:a0:1f:e0:c2:0d:64:4a:20:14:86:40:5d:37:ad:f2:23:
         76:78:51:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:51 2026 by rpki-client