Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a633030303a3a2f33342d3334203d3e20323639363938.roa
File:                     323830343a363838343a633030303a3a2f33342d3334203d3e20323639363938.roa (raw, json)
Hash identifier:          67NOM4bbT34r60p8Pdul0dsIk/9gxLuYlexifRJExYc=
Subject key identifier:   6A:38:2D:FD:96:C4:3D:66:EE:65:74:7A:46:F2:CD:B0:D1:43:6D:7E
Certificate issuer:       /CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Certificate serial:       6449B34D2B21A09C1BAC6621633A970B5ED06343
Authority key identifier: F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a633030303a3a2f33342d3334203d3e20323639363938.roa
Signing time:             Thu 05 Feb 2026 05:53:51 +0000
ROA not before:           Thu 05 Feb 2026 05:48:51 +0000
ROA not after:            Thu 04 Feb 2027 05:53:51 +0000
asID:                     269698
IP address blocks:        2804:6884:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
                          rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 17:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:49:b3:4d:2b:21:a0:9c:1b:ac:66:21:63:3a:97:0b:5e:d0:63:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
        Validity
            Not Before: Feb  5 05:48:51 2026 GMT
            Not After : Feb  4 05:53:51 2027 GMT
        Subject: CN=6A382DFD96C43D66EE65747A46F2CDB0D1436D7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f7:66:9a:87:0a:66:2f:9a:34:3f:53:51:4b:
                    96:16:79:d5:60:80:71:c2:4b:ed:07:7f:00:8f:9d:
                    c6:d4:a7:63:83:49:03:e3:70:38:4e:b5:f2:7f:42:
                    c5:16:21:e7:f6:7f:c5:98:b0:ce:6a:23:6a:68:83:
                    51:ee:47:5a:a7:ef:f2:6a:58:17:e7:87:f7:61:40:
                    e1:ee:18:73:05:ce:cd:fd:1b:1d:7e:37:eb:6e:07:
                    bf:23:a2:34:ce:60:d6:9d:f8:ea:ea:eb:aa:44:72:
                    aa:7e:01:df:92:2a:d6:57:4f:5f:85:1e:f4:7b:89:
                    81:f2:fc:45:0e:a7:9b:27:61:f3:f2:fe:7e:f8:63:
                    de:a0:2d:0f:86:d6:4c:04:93:df:ea:6d:b3:5a:f3:
                    4f:be:e8:05:64:6d:f5:20:21:ad:34:76:31:43:a2:
                    af:52:e4:9b:94:dd:30:4c:d3:c6:ad:6d:af:6a:fd:
                    30:25:40:5b:96:98:ae:29:57:93:6f:eb:4d:4b:95:
                    1b:29:dd:73:42:e6:33:b9:4b:ce:2a:ff:db:a1:c2:
                    17:82:de:8c:de:c9:85:9f:9a:ca:1a:9f:bf:34:d9:
                    ad:1f:8a:df:57:cd:83:2a:dc:07:0b:bf:40:4e:7f:
                    39:b8:9f:be:b5:fa:78:b3:5f:72:17:fa:bc:ed:60:
                    44:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:38:2D:FD:96:C4:3D:66:EE:65:74:7A:46:F2:CD:B0:D1:43:6D:7E
            X509v3 Authority Key Identifier:
                keyid:F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a633030303a3a2f33342d3334203d3e20323639363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6884:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         11:1b:e1:f1:1b:b6:31:00:af:c0:53:d7:4b:47:e7:8e:c3:64:
         c9:54:89:17:61:1e:60:8a:45:64:b4:b7:cc:3b:f2:5f:53:62:
         c6:fa:db:10:a2:32:09:c5:e0:7c:59:01:20:63:4a:99:b1:b2:
         4d:f5:b1:04:d4:ad:09:82:a3:7b:3d:5c:ee:3f:20:a5:66:c6:
         5b:97:4a:af:d0:ce:41:72:73:94:64:eb:62:64:7d:18:7a:dc:
         a7:1e:0d:07:f7:d8:03:66:bb:1a:d2:7a:56:b6:95:b4:ce:74:
         42:c9:58:7f:de:91:08:89:1a:f2:cd:22:d9:49:f0:30:e4:66:
         bf:9a:07:e9:2f:78:cf:7f:41:d9:c8:db:84:52:66:f5:d4:dc:
         20:14:84:b5:af:fe:f0:da:91:6d:43:df:3d:8d:44:0c:9d:d3:
         eb:71:de:10:16:f3:8c:60:d4:57:0e:be:01:62:ca:4e:94:b0:
         9b:b4:10:f1:d1:7b:c2:d0:ad:cc:e0:70:85:a1:c9:ec:cb:b7:
         d7:de:9e:1a:ff:d0:b8:8b:26:39:9b:41:90:eb:f9:6b:b9:66:
         2f:52:0f:a2:98:0d:33:64:72:86:44:8a:66:20:31:a7:62:9c:
         c1:47:76:b0:8a:57:57:e1:60:20:f9:19:d2:cb:94:3e:a9:17:
         e0:2d:92:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:40 2026 by rpki-client