Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/323830343a353965343a383030303a3a2f33332d3333203d3e20323638373332.roa
File:                     323830343a353965343a383030303a3a2f33332d3333203d3e20323638373332.roa (raw, json)
Hash identifier:          zrTx0+82w2IK/M34JpH5XlY6tGQZ0Xp5vwBpPrikf3o=
Subject key identifier:   88:62:C6:4C:02:77:95:A4:A4:D5:4B:CD:D2:03:35:C7:60:CD:CF:84
Certificate issuer:       /CN=B7124651D19D132543E991B7A74DD4A680768A09
Certificate serial:       6ACD8C24743D8AE5F001524627981DFCE662A6D1
Authority key identifier: B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/323830343a353965343a383030303a3a2f33332d3333203d3e20323638373332.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     268732
IP address blocks:        2804:59e4:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl
                          rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:cd:8c:24:74:3d:8a:e5:f0:01:52:46:27:98:1d:fc:e6:62:a6:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7124651D19D132543E991B7A74DD4A680768A09
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=8862C64C027795A4A4D54BCDD20335C760CDCF84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f1:28:f2:e9:6d:57:0e:c4:41:2f:a3:4c:2f:
                    8f:f7:32:23:30:11:90:0d:72:3c:6a:5a:ae:b3:62:
                    b3:20:35:d8:ef:2b:83:d2:34:b6:62:85:04:68:c1:
                    6f:42:c4:50:33:fc:c6:38:c7:ba:db:bb:39:f8:2e:
                    0f:a6:59:97:67:52:8e:d1:e2:c1:95:d8:cf:67:91:
                    ca:64:72:a7:47:96:38:42:81:f5:82:fb:00:c4:fa:
                    ae:1e:fd:d1:5f:8d:74:e1:f2:36:70:f7:f3:a3:df:
                    7d:3e:53:25:fb:04:f1:5d:85:34:d4:01:0f:47:c8:
                    c0:24:f8:61:42:79:0a:b8:8c:c0:b3:6f:1c:67:6e:
                    c7:5b:e6:75:4f:e8:8f:c6:f7:b3:6d:5e:90:a2:8e:
                    cb:51:24:65:7a:25:51:74:35:4a:8e:47:35:cf:57:
                    aa:2d:db:26:3d:cb:bc:8d:55:83:2a:16:a8:0c:25:
                    cc:e7:3c:b8:5f:80:eb:f1:2a:50:e8:18:c9:f8:a6:
                    96:f1:9b:8f:13:7a:05:14:19:f8:02:3e:a3:c4:9c:
                    90:15:56:41:09:e3:3e:62:9b:5d:6e:37:24:67:72:
                    53:cf:27:45:6a:ff:af:77:f7:c4:94:c3:95:ad:6d:
                    27:37:ce:5e:d8:8d:62:f1:4c:b7:1f:18:b3:25:9d:
                    14:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:62:C6:4C:02:77:95:A4:A4:D5:4B:CD:D2:03:35:C7:60:CD:CF:84
            X509v3 Authority Key Identifier:
                keyid:B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/323830343a353965343a383030303a3a2f33332d3333203d3e20323638373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59e4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6a:a5:1e:ac:01:a7:80:d1:f5:9d:de:e2:85:a7:ac:1f:fd:b6:
         05:41:1e:2b:0f:e7:4a:2b:5f:50:40:26:68:d8:12:63:89:b0:
         a2:0e:93:35:9b:c8:a7:12:7a:24:7a:68:74:8b:38:a0:8f:c5:
         65:95:7d:10:4e:25:55:eb:27:a7:a3:e8:e0:0b:87:3c:82:28:
         69:43:e2:7b:97:a1:85:b7:fb:0b:e3:6d:14:7d:68:7c:34:e3:
         0e:b0:97:b5:e2:70:60:73:6c:ea:dd:47:d3:9b:1c:01:c1:68:
         00:8f:51:ee:c0:08:cd:1b:01:48:f3:62:32:31:19:c5:c2:68:
         9c:09:5a:d5:7c:89:63:09:bb:3b:64:f3:40:09:16:eb:78:5b:
         69:fa:50:a6:b8:35:a6:78:f2:38:ed:44:fa:5a:27:90:80:61:
         02:4e:12:07:24:ac:e2:d0:e7:ef:e4:17:e1:fe:8d:44:ef:13:
         c7:2c:84:46:ad:36:3f:42:47:66:1b:3c:50:d3:ff:fc:5d:dc:
         af:d1:e3:21:ac:4e:fa:aa:dd:22:84:9b:1f:50:51:c3:71:57:
         cb:e8:04:43:10:e9:ec:0a:ce:e1:6a:0a:0e:d1:8f:41:6c:fa:
         95:20:e6:89:19:64:8d:af:24:80:f4:a5:84:28:e3:2a:87:90:
         31:ed:16:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:02:24 2026 by rpki-client