Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a343030303a3a2f33342d3334203d3e20323639363938.roa
File:                     323830343a363838343a343030303a3a2f33342d3334203d3e20323639363938.roa (raw, json)
Hash identifier:          +7fdmHrVXXTuZCTniFykVc2VsYq63R69rYZzhIGxaUY=
Subject key identifier:   60:49:17:9D:42:3D:0F:1A:0E:F4:27:36:23:3C:0A:77:EE:3E:D8:88
Certificate issuer:       /CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Certificate serial:       5D9DF9F2011B96B1C15FAC06B1B2FB14CCC65E18
Authority key identifier: F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a343030303a3a2f33342d3334203d3e20323639363938.roa
Signing time:             Thu 05 Feb 2026 05:53:50 +0000
ROA not before:           Thu 05 Feb 2026 05:48:50 +0000
ROA not after:            Thu 04 Feb 2027 05:53:50 +0000
asID:                     269698
IP address blocks:        2804:6884:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
                          rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 17:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:9d:f9:f2:01:1b:96:b1:c1:5f:ac:06:b1:b2:fb:14:cc:c6:5e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
        Validity
            Not Before: Feb  5 05:48:50 2026 GMT
            Not After : Feb  4 05:53:50 2027 GMT
        Subject: CN=6049179D423D0F1A0EF42736233C0A77EE3ED888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c2:36:c0:2c:e0:56:18:91:7f:2c:5d:bd:a5:
                    24:0e:34:73:0e:3f:80:90:c1:47:58:5c:8f:0b:bd:
                    c6:21:8d:e8:7e:65:58:cb:50:6a:b5:08:c9:2a:e0:
                    20:86:d3:1f:be:8d:2e:9b:fa:20:f7:5a:79:e3:44:
                    83:c8:fe:1b:02:52:4b:61:8b:f2:58:cd:16:9e:cc:
                    c8:5f:45:ff:1b:9d:25:c8:ca:8d:98:77:55:71:a8:
                    18:d7:8a:1e:81:1d:1f:fe:da:69:28:17:18:59:4c:
                    c4:0a:b2:2b:f5:a9:7b:82:36:d6:55:42:6d:1e:68:
                    86:9a:47:f1:aa:c2:c5:93:4d:1d:60:69:c1:de:6e:
                    e1:13:8c:89:db:3a:68:1d:21:a4:60:60:e6:b4:e5:
                    03:64:08:0b:d9:15:b2:6e:b2:4d:58:ab:19:25:f8:
                    12:2e:13:67:6f:4a:4b:27:51:ac:be:d6:ca:1f:80:
                    50:38:b1:e4:62:d8:88:2c:c0:2f:64:df:c9:9f:20:
                    63:7d:f4:ad:27:16:72:6a:55:f1:60:61:44:92:a2:
                    53:f9:56:24:5f:4b:d4:4a:82:0a:4e:c5:89:0c:d5:
                    8b:5a:e7:e8:7d:21:ae:77:6a:40:ef:5d:d3:1b:be:
                    8d:95:a3:88:ac:4f:f8:f3:4e:4c:d2:68:c0:fa:b4:
                    87:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:49:17:9D:42:3D:0F:1A:0E:F4:27:36:23:3C:0A:77:EE:3E:D8:88
            X509v3 Authority Key Identifier:
                keyid:F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a343030303a3a2f33342d3334203d3e20323639363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6884:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         77:cd:dd:b2:ac:18:25:51:79:29:b0:02:7f:10:cb:ee:ed:2b:
         08:23:a5:01:7f:8b:03:49:44:ae:99:4e:6d:9c:0d:a2:19:16:
         3e:21:2c:ea:93:02:55:1c:d4:2b:5b:78:22:97:bf:73:db:1a:
         38:b1:7b:c2:06:a2:61:0b:4f:fc:27:29:b2:13:25:a7:87:49:
         82:76:e9:e0:b2:b0:02:b2:af:55:3e:d6:99:a2:40:be:11:94:
         9e:00:6b:51:00:be:78:d3:90:a4:cf:d0:b4:e9:2d:91:80:67:
         a6:a3:0c:e5:09:31:9a:7f:86:e6:9d:92:32:a7:01:ad:a3:17:
         4a:6a:e3:a9:ea:33:2f:ef:aa:49:cb:5d:a0:c9:d1:8c:9a:3d:
         56:12:3f:3a:41:4e:6d:e0:ef:6f:23:67:3f:f4:2f:21:05:b2:
         a6:a1:1b:10:19:0d:cc:83:33:08:e3:4b:0b:d4:dd:5a:31:85:
         56:8d:54:a3:b6:c9:c1:98:1a:1b:59:7a:27:8f:19:93:a7:da:
         3b:54:cb:42:61:d1:48:6b:46:ba:d0:21:c7:66:8f:a4:ee:ea:
         50:9f:0e:9a:b1:1f:18:ce:d5:ad:cc:7c:0f:cd:23:b5:4d:93:
         66:29:f1:8f:2c:7b:c0:fe:b0:ca:2d:1b:78:34:b0:3c:c7:7b:
         91:ea:7b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:40 2026 by rpki-client