Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a33303a3a2f34342d3434203d3e20323639363938.roa
File:                     323830343a363838343a33303a3a2f34342d3434203d3e20323639363938.roa (raw, json)
Hash identifier:          1fgKO80FB4ABL5+b2C+NPG36fsWYtxanVGjxKe312KQ=
Subject key identifier:   14:EE:1F:DF:BE:1C:C6:D1:EC:F2:13:9F:B6:0E:65:24:2F:10:BA:38
Certificate issuer:       /CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Certificate serial:       02CE4DB76E182185843DDAD6F56944E2F4C70F74
Authority key identifier: F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a33303a3a2f34342d3434203d3e20323639363938.roa
Signing time:             Thu 05 Feb 2026 05:53:50 +0000
ROA not before:           Thu 05 Feb 2026 05:48:50 +0000
ROA not after:            Thu 04 Feb 2027 05:53:50 +0000
asID:                     269698
IP address blocks:        2804:6884:30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
                          rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 17:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ce:4d:b7:6e:18:21:85:84:3d:da:d6:f5:69:44:e2:f4:c7:0f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
        Validity
            Not Before: Feb  5 05:48:50 2026 GMT
            Not After : Feb  4 05:53:50 2027 GMT
        Subject: CN=14EE1FDFBE1CC6D1ECF2139FB60E65242F10BA38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ec:99:1a:81:63:b3:e4:ae:b2:18:fa:14:57:
                    43:50:30:dc:3e:d8:7f:09:16:2f:93:86:4f:d5:d7:
                    ee:f9:d0:ee:88:0b:9f:f5:fa:e4:e3:0e:e2:7a:c3:
                    67:86:b0:1c:b0:83:81:35:0f:1a:fd:32:89:bd:5e:
                    cd:be:52:1a:d6:98:c1:9d:02:18:6f:90:17:b5:9a:
                    6d:bc:a4:08:8b:f3:98:35:11:3b:26:35:b9:c0:d4:
                    b2:a3:75:62:e3:8e:44:ca:b5:52:3c:83:8f:63:7f:
                    dc:e7:27:a4:56:cd:4c:63:e4:56:2d:2c:98:85:4f:
                    a6:21:ff:c1:3a:a2:0c:d7:57:69:f2:63:05:6e:ac:
                    cc:fa:23:59:d4:6c:82:27:e0:45:6b:e3:dc:f9:a9:
                    14:7a:0b:3f:f6:23:07:46:9a:c4:c1:e2:74:68:4c:
                    23:dd:4e:7a:8f:d3:44:d5:ef:51:b6:4a:65:f9:de:
                    7e:f3:82:a4:b2:43:cd:6a:20:63:c7:d1:bb:1d:0f:
                    80:b5:21:63:31:9f:bb:bf:80:12:0f:e0:11:be:76:
                    ce:36:4b:e2:83:21:1e:64:3f:95:d7:42:ec:95:c8:
                    03:6e:f4:53:99:95:92:8d:ff:4f:26:02:82:c9:ab:
                    e7:44:ba:35:aa:d3:03:d3:81:7f:a9:14:c4:21:2b:
                    09:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EE:1F:DF:BE:1C:C6:D1:EC:F2:13:9F:B6:0E:65:24:2F:10:BA:38
            X509v3 Authority Key Identifier:
                keyid:F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a33303a3a2f34342d3434203d3e20323639363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6884:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         ac:ba:f1:f2:ac:11:ed:5a:39:85:83:33:e8:d1:f3:26:ec:c5:
         34:d9:b0:31:9f:c9:e8:6d:32:ee:71:b3:69:82:fb:ff:69:6f:
         4a:fb:58:06:9a:8b:cd:9e:19:a2:1f:b2:f0:6f:c5:5d:a5:8f:
         da:30:48:28:b0:1e:a4:f2:b9:c0:5b:45:21:4d:79:07:3e:ad:
         9d:cb:78:c0:ab:ca:f5:7f:10:d1:57:0d:55:44:de:34:2f:be:
         9d:55:9f:c7:ec:9f:dc:88:d3:be:79:58:b6:2f:a0:f7:c2:89:
         9b:14:39:0e:e3:20:af:9b:6e:41:49:03:5c:a4:59:6c:bc:d5:
         91:8b:aa:c0:6d:41:00:41:e8:b4:e7:a0:be:28:75:99:7a:48:
         5f:64:c7:48:9f:7c:7f:02:c9:f1:ff:40:b6:07:fe:88:91:52:
         25:65:5e:d0:dc:c5:41:8e:48:63:87:ee:42:e6:04:81:30:75:
         e9:dd:63:1d:7a:c8:d5:1f:d0:29:c5:32:96:34:5e:e0:c0:ad:
         89:dc:fe:c5:3e:dd:2a:4d:14:28:85:24:81:8d:7c:86:20:97:
         9a:5d:9a:7f:79:4a:ca:cd:81:79:ff:65:42:2a:cd:c0:a2:ab:
         ef:98:3b:de:02:63:b9:32:e7:fb:82:3f:32:72:bd:1e:de:aa:
         e2:55:9a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:00 2026 by rpki-client