Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a3a2f33342d3334203d3e20323639363938.roa
File:                     323830343a363838343a3a2f33342d3334203d3e20323639363938.roa (raw, json)
Hash identifier:          TddILuuim6wsiPeHbiytUjZF+ec63qkswvVMnYreFdA=
Subject key identifier:   12:1D:37:5A:A5:75:27:6C:80:16:4A:37:61:D9:3F:3C:AF:C7:F5:2E
Certificate issuer:       /CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Certificate serial:       27A464A1693FA0F8AAF31C3DC15C302DB912BA7A
Authority key identifier: F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a3a2f33342d3334203d3e20323639363938.roa
Signing time:             Thu 05 Feb 2026 05:53:52 +0000
ROA not before:           Thu 05 Feb 2026 05:48:52 +0000
ROA not after:            Thu 04 Feb 2027 05:53:52 +0000
asID:                     269698
IP address blocks:        2804:6884::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
                          rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a4:64:a1:69:3f:a0:f8:aa:f3:1c:3d:c1:5c:30:2d:b9:12:ba:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
        Validity
            Not Before: Feb  5 05:48:52 2026 GMT
            Not After : Feb  4 05:53:52 2027 GMT
        Subject: CN=121D375AA575276C80164A3761D93F3CAFC7F52E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6c:a2:1a:fd:a4:9e:39:43:2e:9e:75:3a:23:
                    da:ee:90:53:8d:9b:d8:ad:e2:90:96:15:78:cf:dd:
                    64:d3:09:6c:a0:fc:14:22:1d:e8:46:a9:a2:d3:2e:
                    b3:fa:3d:cb:c4:86:37:a8:98:e1:90:a6:3f:77:5c:
                    12:e9:dd:54:83:54:74:09:b5:49:b3:ca:7f:70:fb:
                    fd:c1:90:75:7d:84:a5:ea:c3:fd:ba:52:2f:8c:64:
                    c5:72:a4:57:d5:d4:ca:22:2a:d7:9a:4d:70:ec:64:
                    12:d8:ba:4a:28:57:0c:38:33:dd:94:e7:63:f5:c5:
                    13:56:92:6a:ad:45:9d:20:51:6b:73:a8:68:3a:3c:
                    d1:87:42:9e:7f:a1:e8:4f:31:ec:0a:bc:a2:62:1b:
                    b7:54:99:48:bf:a3:2f:5f:88:fe:03:34:f7:da:ad:
                    9a:9b:d4:aa:1e:16:e6:58:61:a7:2a:13:f9:e0:10:
                    9a:46:75:b3:7f:98:cc:9a:1e:b2:df:3e:3c:86:d7:
                    28:35:0c:cb:75:1d:3e:8a:94:7b:6d:0e:37:cb:5c:
                    4c:01:34:5b:93:03:a3:38:d5:22:9f:da:2a:78:04:
                    1a:53:66:6a:8e:95:9a:ad:10:26:51:21:c7:fd:6a:
                    04:99:e7:c3:3e:4b:98:3d:31:fd:40:a1:a3:1d:cc:
                    cf:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1D:37:5A:A5:75:27:6C:80:16:4A:37:61:D9:3F:3C:AF:C7:F5:2E
            X509v3 Authority Key Identifier:
                keyid:F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a3a2f33342d3334203d3e20323639363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6884::/34

    Signature Algorithm: sha256WithRSAEncryption
         26:44:0e:f4:0d:80:91:4c:cb:6f:1b:50:cf:63:f2:0e:55:06:
         db:b7:01:1e:04:24:2f:ef:1f:f2:27:5c:ba:52:e4:5a:b1:69:
         14:70:c9:86:9f:2e:58:78:e2:5c:1b:21:1e:9a:d7:d3:09:90:
         24:06:9e:1e:6e:c2:dd:16:62:5b:7f:32:64:f1:3a:90:e0:82:
         fb:31:5e:b6:a2:ab:19:74:df:0a:63:b4:55:5d:04:0b:1e:03:
         50:21:7a:ff:01:7b:03:9f:89:c5:55:ec:ef:d2:44:0d:dd:60:
         c2:a9:83:8f:19:73:63:08:e5:e7:82:83:d2:57:c5:c1:d4:d1:
         fc:e2:d4:4a:21:d4:d9:8a:11:90:30:e4:bb:97:94:f6:dd:57:
         ac:9a:b0:74:64:ee:7a:f9:14:db:47:34:d1:d6:e1:27:1d:71:
         fd:fe:f4:b9:44:71:83:f7:c5:3d:c8:fc:37:63:9f:2d:ec:ed:
         a6:03:9e:fe:22:62:66:4a:39:35:a6:1f:c7:41:98:27:71:d7:
         35:2f:82:fd:d1:2c:09:4b:13:16:de:7b:4e:b6:21:15:30:1a:
         9c:d3:ca:cc:2c:c9:f4:3a:d1:9f:64:8c:5d:95:06:9d:e2:8a:
         ef:0b:f5:b5:f7:0f:cb:5b:50:a9:8c:0c:0c:22:a3:3f:7d:8f:
         ca:14:16:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:38:36 2026 by rpki-client