Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/323830343a316339343a3a2f33322d3332203d3e203631363633.roa
File:                     323830343a316339343a3a2f33322d3332203d3e203631363633.roa (raw, json)
Hash identifier:          3G+cZkK5GvpzCR3Goi5sXFqbXvHSXphLiBYor/kuNiU=
Subject key identifier:   74:07:6C:10:15:DB:DE:B2:44:3A:C5:A3:AC:C4:58:D9:54:F6:F9:EC
Certificate issuer:       /CN=A4613102C06DD4600B98177DD43712196340E623
Certificate serial:       676DB0C577048776FC473DA1A50EBAD0068FC11A
Authority key identifier: A4:61:31:02:C0:6D:D4:60:0B:98:17:7D:D4:37:12:19:63:40:E6:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4613102C06DD4600B98177DD43712196340E623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/323830343a316339343a3a2f33322d3332203d3e203631363633.roa
Signing time:             Wed 04 Feb 2026 12:35:24 +0000
ROA not before:           Wed 04 Feb 2026 12:30:24 +0000
ROA not after:            Wed 03 Feb 2027 12:35:24 +0000
asID:                     61663
IP address blocks:        2804:1c94::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/A4613102C06DD4600B98177DD43712196340E623.crl
                          rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/A4613102C06DD4600B98177DD43712196340E623.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4613102C06DD4600B98177DD43712196340E623.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:6d:b0:c5:77:04:87:76:fc:47:3d:a1:a5:0e:ba:d0:06:8f:c1:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4613102C06DD4600B98177DD43712196340E623
        Validity
            Not Before: Feb  4 12:30:24 2026 GMT
            Not After : Feb  3 12:35:24 2027 GMT
        Subject: CN=74076C1015DBDEB2443AC5A3ACC458D954F6F9EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:33:52:3e:65:41:81:39:93:6f:0c:e2:c9:6a:
                    7f:10:b2:b0:1c:c5:16:2f:6b:05:cb:3b:52:63:1d:
                    41:f7:19:b8:74:aa:0b:1a:9b:26:68:51:4a:52:5b:
                    33:da:98:be:34:fa:73:b4:54:64:a3:aa:27:08:e3:
                    52:16:a6:0d:94:3c:c8:85:8a:a1:4f:d8:65:14:10:
                    04:78:11:d7:db:c8:4d:44:3e:63:66:20:81:a2:f6:
                    5f:da:7a:cb:5a:07:73:bc:99:36:7c:8c:3b:f9:87:
                    1d:dd:77:a8:58:f8:20:f5:75:01:d8:8a:3b:19:1d:
                    d5:d1:5f:b9:b7:31:04:01:8a:44:58:94:46:b7:ca:
                    d8:96:61:84:1f:01:f6:71:fb:1d:8e:28:21:25:85:
                    19:1e:06:45:75:45:aa:1c:5a:d8:86:9d:78:23:8f:
                    87:ff:dd:d9:df:03:1e:3a:9e:b1:94:ca:28:3c:10:
                    9c:84:62:64:d5:d3:39:cc:50:0e:56:96:2d:10:a1:
                    74:fd:6f:33:96:d5:a5:ca:b0:86:c7:b2:d9:a3:db:
                    85:34:c1:5b:dc:8c:58:6b:d0:fc:39:88:53:a1:bb:
                    79:d6:a8:61:79:27:82:0e:e7:2f:8a:0c:07:78:12:
                    03:a7:bd:e8:f6:4c:da:7d:0b:bd:57:0f:3c:a7:48:
                    bd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:07:6C:10:15:DB:DE:B2:44:3A:C5:A3:AC:C4:58:D9:54:F6:F9:EC
            X509v3 Authority Key Identifier:
                keyid:A4:61:31:02:C0:6D:D4:60:0B:98:17:7D:D4:37:12:19:63:40:E6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/A4613102C06DD4600B98177DD43712196340E623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4613102C06DD4600B98177DD43712196340E623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/323830343a316339343a3a2f33322d3332203d3e203631363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c94::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:39:0e:06:b5:9a:44:88:e4:75:9e:55:9a:27:08:8d:f0:ea:
         4d:ef:bc:ae:cb:5a:a4:af:6e:15:ab:1b:26:1b:8e:18:7f:3f:
         e1:66:39:b7:79:5e:25:56:78:47:e9:a7:ec:a2:9b:20:21:d1:
         ff:09:68:2d:9d:da:8a:fa:d7:0e:77:26:66:89:50:33:71:6c:
         eb:f7:8f:97:a9:c2:d3:8d:30:8d:67:56:03:f0:7d:3d:77:0d:
         da:68:21:d9:c4:4c:18:60:fb:81:2a:cd:b0:1c:e8:e5:44:6f:
         ed:f3:05:5e:9d:8d:b4:8b:5e:65:34:5d:8e:8b:0e:98:a0:f2:
         cf:9f:b9:4f:d1:ac:80:1f:1c:3c:3f:2c:70:45:e8:7a:b7:5c:
         81:80:81:7c:79:2d:3a:65:46:21:a3:d2:c8:7d:5d:81:1a:ed:
         fe:59:8a:57:32:a6:0c:85:0b:1a:76:f9:b0:20:95:40:e7:3d:
         ed:d9:24:3a:c6:0e:6a:22:ee:d6:2e:e4:83:d8:b8:89:a3:b3:
         8b:81:1a:5b:b1:49:91:f0:6e:ea:77:6d:be:11:03:8b:60:4a:
         8b:ee:a3:e5:32:35:8a:01:85:e4:f7:7c:26:4f:d8:30:94:5b:
         01:9b:27:bd:34:8e:6e:25:f7:4a:44:26:d3:4d:6b:23:a1:51:
         fb:7c:06:5e
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUZ22wxXcEh3b8Rz2hpQ660AaPwRowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ2MTMxMDJDMDZERDQ2MDBCOTgxNzdERDQzNzEyMTk2
MzQwRTYyMzAeFw0yNjAyMDQxMjMwMjRaFw0yNzAyMDMxMjM1MjRaMDMxMTAvBgNV
BAMTKDc0MDc2QzEwMTVEQkRFQjI0NDNBQzVBM0FDQzQ1OEQ5NTRGNkY5RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9M1I+ZUGBOZNvDOLJan8QsrAc
xRYvawXLO1JjHUH3Gbh0qgsamyZoUUpSWzPamL40+nO0VGSjqicI41IWpg2UPMiF
iqFP2GUUEAR4EdfbyE1EPmNmIIGi9l/aestaB3O8mTZ8jDv5hx3dd6hY+CD1dQHY
ijsZHdXRX7m3MQQBikRYlEa3ytiWYYQfAfZx+x2OKCElhRkeBkV1RaocWtiGnXgj
j4f/3dnfAx46nrGUyig8EJyEYmTV0znMUA5Wli0QoXT9bzOW1aXKsIbHstmj24U0
wVvcjFhr0Pw5iFOhu3nWqGF5J4IO5y+KDAd4EgOnvej2TNp9C71XDzynSL0PAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUdAdsEBXb3rJEOsWjrMRY2VT2+ewwHwYDVR0j
BBgwFoAUpGExAsBt1GALmBd91DcSGWNA5iMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlNzSkRYTWI5ZDlxU1c5S3o5U0ZnZzhEZGZvcGY5SFFxa3lTRWtqR0hB
ZmovMC9BNDYxMzEwMkMwNkRENDYwMEI5ODE3N0RENDM3MTIxOTYzNDBFNjIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0NjEzMTAyQzA2REQ0NjAw
Qjk4MTc3REQ0MzcxMjE5NjM0MEU2MjMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJTc0pEWE1iOWQ5cVNXOUt6OVNGZ2c4RGRmb3BmOUhRcWt5U0VrakdIQWZqLzAv
MzIzODMwMzQzYTMxNjMzOTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM2
MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEHJQwDQYJKoZIhvcNAQELBQADggEBAIc5Dga1mkSI
5HWeVZonCI3w6k3vvK7LWqSvbhWrGyYbjhh/P+FmObd5XiVWeEfpp+yimyAh0f8J
aC2d2or61w53JmaJUDNxbOv3j5epwtONMI1nVgPwfT13DdpoIdnETBhg+4EqzbAc
6OVEb+3zBV6djbSLXmU0XY6LDpig8s+fuU/RrIAfHDw/LHBF6Hq3XIGAgXx5LTpl
RiGj0sh9XYEa7f5ZilcypgyFCxp2+bAglUDnPe3ZJDrGDmoi7tYu5IPYuImjs4uB
GluxSZHwbup3bb4RA4tgSovuo+UyNYoBheT3fCZP2DCUWwGbJ700jm4l90pEJtNN
ayOhUft8Bl4=
-----END CERTIFICATE-----
Generated at Mon Feb 23 04:18:56 2026 by rpki-client