Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a373038303a3a2f34312d3431203d3e203631353839.roa
File:                     323830343a343866303a373038303a3a2f34312d3431203d3e203631353839.roa (raw, json)
Hash identifier:          ivF/pshU4P3BzA0GRJtLecrcdR1WWKmUHSpDJvFAmTU=
Subject key identifier:   20:63:1B:37:8D:71:21:0D:A6:7B:8C:D6:28:7E:EF:ED:91:9B:0D:33
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       6E98846FF767F3A1BAA342DEB43930E482F80E40
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a373038303a3a2f34312d3431203d3e203631353839.roa
Signing time:             Fri 30 Jan 2026 12:50:38 +0000
ROA not before:           Fri 30 Jan 2026 12:45:38 +0000
ROA not after:            Fri 29 Jan 2027 12:50:38 +0000
asID:                     61589
IP address blocks:        2804:48f0:7080::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 17:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:98:84:6f:f7:67:f3:a1:ba:a3:42:de:b4:39:30:e4:82:f8:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Jan 30 12:45:38 2026 GMT
            Not After : Jan 29 12:50:38 2027 GMT
        Subject: CN=20631B378D71210DA67B8CD6287EEFED919B0D33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f9:be:be:1c:d3:c6:e0:34:2f:aa:b3:e3:cd:
                    8b:f8:e1:08:aa:73:73:32:45:33:e7:8c:34:09:ea:
                    cb:9a:4a:a8:94:da:62:ae:5a:4a:c3:12:9b:6f:ed:
                    75:18:b3:99:18:99:6d:be:e8:95:dd:6a:6c:67:86:
                    b6:11:44:81:48:2d:e6:f5:3f:09:eb:76:c2:d6:fc:
                    46:05:f8:31:e9:5b:aa:48:6c:c8:02:52:20:84:b2:
                    41:75:0c:ad:4f:10:16:e9:fb:c3:97:19:01:60:98:
                    32:39:5a:1e:9e:ec:19:f5:05:d4:da:85:35:ad:d0:
                    9c:77:91:bf:e0:e7:73:66:6d:63:37:6b:a9:32:fd:
                    66:92:3d:91:1f:37:e7:19:4a:10:cb:8e:d6:d4:b0:
                    cc:93:e4:a5:be:a0:9d:8f:59:5d:66:1b:ca:15:bb:
                    1b:4d:93:5b:2f:79:f8:8a:a8:c6:29:65:fe:b9:26:
                    2b:6e:8c:fb:39:6f:5a:1d:b3:aa:fe:6c:97:16:0a:
                    09:0a:cc:fb:c7:4b:05:74:34:b7:77:40:4c:04:d4:
                    2a:90:1b:d6:30:a6:6a:70:5e:2c:88:b8:08:b0:18:
                    5d:20:91:bf:90:b7:68:6a:cc:6a:1c:e5:a9:40:a1:
                    a8:80:35:64:23:b3:ce:c0:36:b1:77:3e:57:b0:78:
                    6b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:63:1B:37:8D:71:21:0D:A6:7B:8C:D6:28:7E:EF:ED:91:9B:0D:33
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a373038303a3a2f34312d3431203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48f0:7080::/41

    Signature Algorithm: sha256WithRSAEncryption
         81:80:ea:96:77:b1:56:6a:2a:a1:07:00:e1:be:b2:a3:18:62:
         81:ec:67:1c:60:e5:bc:87:e2:cc:4e:0c:87:1f:78:18:1a:c6:
         5a:05:bb:c0:dc:b7:03:70:7e:13:37:b6:5c:5f:d0:ca:96:e0:
         5e:50:3b:f7:e3:ba:bd:93:0d:f4:30:ad:d9:ec:ad:09:f4:b4:
         df:97:f8:94:6d:fa:c6:bf:46:f1:a7:4b:24:3b:da:ab:4d:25:
         83:de:d6:1f:32:6b:31:2f:54:41:eb:88:bf:39:13:2b:7c:fd:
         65:0b:a0:74:8e:d5:d3:70:5d:ed:21:8f:f0:d8:bf:e4:47:fa:
         4e:21:3c:4b:00:a7:02:ee:61:b9:c5:8b:0c:14:29:da:e3:15:
         4b:1f:ef:95:c7:c0:62:71:b3:96:f0:74:7c:bb:2b:f3:6a:e2:
         e7:e9:be:0a:b0:1d:4f:09:31:5f:70:55:9e:1e:2e:14:aa:72:
         47:e6:c2:94:76:97:68:d1:28:5f:cb:8c:3b:94:71:0d:a5:19:
         29:0c:1d:a2:5a:03:4a:1e:88:67:e7:fc:95:25:fe:65:16:52:
         d4:fa:70:56:d1:8c:f4:37:52:bb:be:3a:f6:74:d3:fc:cc:63:
         72:ca:b3:af:0d:ed:da:10:93:12:fd:3d:5c:9f:9d:16:5d:ca:
         10:91:b4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:25:04 2026 by rpki-client