Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/323830343a363061303a383030303a3a2f33342d3438203d3e20323639313831.roa
File:                     323830343a363061303a383030303a3a2f33342d3438203d3e20323639313831.roa (raw, json)
Hash identifier:          kyMpcC4Rsn5kWeyZZenBdEW9iAueMXuaDo6+3UOcrUk=
Subject key identifier:   BA:2F:98:2B:10:95:C7:40:91:A3:20:F8:FE:83:D6:42:54:C8:99:95
Certificate issuer:       /CN=585B464DD14FF8DEED6908CBFA9AAE5AAA748C23
Certificate serial:       57B1D10F6257A6AAC3701CF2D4F9C9F95F57121B
Authority key identifier: 58:5B:46:4D:D1:4F:F8:DE:ED:69:08:CB:FA:9A:AE:5A:AA:74:8C:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/323830343a363061303a383030303a3a2f33342d3438203d3e20323639313831.roa
Signing time:             Thu 05 Feb 2026 09:05:43 +0000
ROA not before:           Thu 05 Feb 2026 09:00:43 +0000
ROA not after:            Thu 04 Feb 2027 09:05:43 +0000
asID:                     269181
IP address blocks:        2804:60a0:8000::/34 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.crl
                          rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:54:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b1:d1:0f:62:57:a6:aa:c3:70:1c:f2:d4:f9:c9:f9:5f:57:12:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=585B464DD14FF8DEED6908CBFA9AAE5AAA748C23
        Validity
            Not Before: Feb  5 09:00:43 2026 GMT
            Not After : Feb  4 09:05:43 2027 GMT
        Subject: CN=BA2F982B1095C74091A320F8FE83D64254C89995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ce:86:71:de:90:3b:e9:8b:04:7b:4d:50:67:
                    cb:bc:de:3e:09:2e:3d:57:7f:22:09:12:1a:b6:c1:
                    f4:63:35:d6:11:b2:80:d1:75:4f:6d:78:31:6d:59:
                    1c:13:81:02:4d:f2:ee:30:f8:79:5e:c4:dd:c6:0c:
                    9d:4b:59:41:a4:ee:f3:5b:dd:5c:90:5b:eb:ce:f2:
                    cf:33:56:05:fd:62:1a:3c:0f:a2:63:ae:6e:f5:45:
                    1d:4f:3d:3b:40:4d:69:3d:35:0d:55:1d:e0:71:c9:
                    f5:11:1a:51:ac:15:93:8b:d7:88:3f:20:22:03:99:
                    7a:69:4b:ae:68:79:8a:2e:e1:da:de:ef:10:90:32:
                    88:83:d8:26:18:7f:62:b1:75:4c:1d:b5:0a:d5:30:
                    0e:c0:a5:47:50:e6:88:3e:a9:b8:f5:e8:21:6b:24:
                    70:64:b7:b5:7c:56:e2:fc:4e:26:6b:ba:b3:e4:fa:
                    16:0d:63:72:09:cc:bc:33:1c:87:2d:4b:b0:86:92:
                    a2:03:7e:47:5a:9f:71:3a:d8:cb:ea:dd:97:43:6d:
                    4c:9e:01:6a:19:fa:09:a3:18:93:c6:4c:5d:d9:8f:
                    e6:6a:43:47:04:a9:62:83:58:41:c5:f7:b7:ae:20:
                    47:93:69:06:b2:d3:03:cf:80:a9:ee:c3:59:7a:a0:
                    64:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2F:98:2B:10:95:C7:40:91:A3:20:F8:FE:83:D6:42:54:C8:99:95
            X509v3 Authority Key Identifier:
                keyid:58:5B:46:4D:D1:4F:F8:DE:ED:69:08:CB:FA:9A:AE:5A:AA:74:8C:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/323830343a363061303a383030303a3a2f33342d3438203d3e20323639313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60a0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6b:f4:10:1e:71:7b:99:e8:11:f0:f5:73:7e:23:2c:d2:5b:95:
         67:d8:76:86:1f:b0:e6:26:53:9e:41:91:03:a7:b9:c1:f8:f5:
         56:01:21:4e:e3:79:ed:5e:52:fe:c0:55:57:3f:e8:1d:35:28:
         92:f2:3d:81:a5:ba:c0:16:1c:2c:bd:24:07:66:8a:fb:a1:14:
         a2:88:8f:33:3f:b5:6f:cf:c1:8c:82:e9:f8:22:18:8f:75:db:
         49:3d:09:19:5f:da:7f:d2:00:2e:dd:d8:1d:5c:ba:6e:29:0f:
         8d:ba:de:5c:ea:f7:03:08:90:86:78:b9:90:31:13:5d:bf:de:
         a5:1e:87:8b:61:cf:b6:2d:97:ca:4a:14:b6:d6:db:c3:69:b2:
         19:63:64:b8:53:52:17:67:03:1f:02:75:dd:33:b8:6a:48:45:
         f0:96:a9:58:4f:56:52:90:e3:04:32:92:c0:2c:56:41:55:64:
         cf:18:ba:4e:66:cf:d8:39:a5:5c:e2:9e:d8:df:c6:85:9c:35:
         1a:3d:fe:c1:d5:1c:d6:bb:dc:ef:a2:2b:7d:bd:88:b7:4c:9f:
         89:5a:20:58:54:00:bd:a6:d0:df:0d:90:2c:32:73:c4:70:37:
         62:31:d3:e8:ba:5d:58:fc:1c:79:34:01:cd:be:77:e3:ee:f8:
         f1:87:68:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:02:25 2026 by rpki-client