Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/323830343a373163383a3a2f33322d3430203d3e20323730383131.roa
File:                     323830343a373163383a3a2f33322d3430203d3e20323730383131.roa (raw, json)
Hash identifier:          pULFOrA//MCpuD+s4Ri3Zb/NstaSQxW5b4FbulkeFIk=
Subject key identifier:   85:2F:EE:0B:B3:A4:5F:8B:FC:7E:B8:AE:23:C3:1A:C8:43:A8:6B:00
Certificate issuer:       /CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
Certificate serial:       067D4C79EEFCDCDD354B0A8E260FD012AFD5A197
Authority key identifier: 68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/323830343a373163383a3a2f33322d3430203d3e20323730383131.roa
Signing time:             Wed 04 Feb 2026 19:28:46 +0000
ROA not before:           Wed 04 Feb 2026 19:23:46 +0000
ROA not after:            Wed 03 Feb 2027 19:28:46 +0000
asID:                     270811
IP address blocks:        2804:71c8::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.crl
                          rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7d:4c:79:ee:fc:dc:dd:35:4b:0a:8e:26:0f:d0:12:af:d5:a1:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
        Validity
            Not Before: Feb  4 19:23:46 2026 GMT
            Not After : Feb  3 19:28:46 2027 GMT
        Subject: CN=852FEE0BB3A45F8BFC7EB8AE23C31AC843A86B00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:47:00:2d:51:ba:17:3d:32:03:7d:75:8f:6b:
                    9f:ee:6d:df:a5:7b:db:bc:50:60:71:9b:42:e2:35:
                    97:80:84:11:57:2e:70:6f:90:23:24:48:eb:99:5a:
                    c6:e8:d1:8f:32:15:92:f9:ec:1b:69:f9:cb:10:1a:
                    62:88:58:35:42:94:01:44:f0:65:d2:b5:5a:05:23:
                    c3:9e:4b:1b:db:17:d7:23:cd:5c:f4:28:c3:76:0d:
                    18:bb:46:8b:5c:d3:81:f6:67:66:c2:a0:13:55:b7:
                    48:73:4c:67:ee:75:bd:b8:62:ce:27:73:de:3e:47:
                    3f:4f:68:0c:e5:ff:6d:04:f8:dc:de:7b:20:b6:20:
                    43:f0:ab:22:97:e3:47:59:6b:bd:0e:36:08:3b:58:
                    22:a4:bb:f7:0b:be:e8:fd:40:1c:93:b5:d5:42:91:
                    4b:cd:bf:f0:d1:a5:e1:3f:6b:7b:5a:ab:de:59:05:
                    04:2b:d4:e7:0e:3f:e2:45:4e:4c:6f:8b:b1:7f:e8:
                    20:c0:a8:6f:31:6b:6b:3c:05:36:f9:2f:07:85:7d:
                    5e:14:03:19:b7:12:ea:08:d5:ca:31:87:92:98:aa:
                    27:c5:3e:e8:65:a3:f4:2e:9f:ce:d6:74:27:f3:b8:
                    d8:68:42:c8:07:f9:7b:50:da:87:47:7f:b7:da:4a:
                    83:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2F:EE:0B:B3:A4:5F:8B:FC:7E:B8:AE:23:C3:1A:C8:43:A8:6B:00
            X509v3 Authority Key Identifier:
                keyid:68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/323830343a373163383a3a2f33322d3430203d3e20323730383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:59:d3:8b:3a:ee:d5:a2:a4:84:e2:ee:53:54:d8:1a:92:49:
         d4:9b:02:a8:ca:be:a3:99:fe:97:ad:b5:90:4d:d1:6f:43:36:
         ab:1b:bb:c6:2c:06:ab:bf:a8:8d:f0:56:f6:d8:37:37:a8:3d:
         f4:37:50:d5:94:6a:63:a5:5f:69:2c:2e:ab:dc:36:7b:0d:86:
         48:e6:98:cf:a7:5d:d6:66:63:b9:11:1f:b7:11:71:a3:7e:04:
         f6:2f:c7:f5:37:e2:16:3c:7d:01:f1:9c:91:28:80:9d:fd:36:
         13:c4:c9:51:ed:90:20:3a:29:84:28:f4:93:3a:4c:2e:70:c9:
         e9:be:09:6c:22:e0:60:d0:a1:6e:2d:24:49:12:2c:17:0b:7d:
         04:ac:6e:92:2f:1e:4f:c8:cd:3e:21:c3:de:d3:3c:05:3e:2e:
         51:d6:27:86:61:8d:8a:f9:92:94:e8:8c:91:c3:59:ec:b9:5f:
         de:99:f0:77:94:93:51:11:4b:23:06:16:59:c4:00:53:ff:28:
         ec:3d:c9:0e:ab:09:47:ea:08:de:1e:3a:98:16:0f:19:98:e4:
         b3:6d:be:f6:c6:d4:c6:5e:df:dc:a7:3e:68:37:44:f6:ab:53:
         da:d3:0a:dc:ff:b9:f3:4c:04:78:74:36:a8:35:4c:f4:9b:8b:
         76:9e:f5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:24:25 2026 by rpki-client