Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a343030303a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a343030303a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          3XZQwhqia9+v1AixLpuBZpTj/NhRmeTBXkWRN0sWP8o=
Subject key identifier:   AE:9D:08:6B:CE:68:10:6D:85:E8:C6:33:4F:28:19:A5:66:66:62:D5
Certificate issuer:       /CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
Certificate serial:       3BB8F816362776C82B3909843B77F2F022C8867D
Authority key identifier: 04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a343030303a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Wed 18 Feb 2026 17:25:49 +0000
ROA not before:           Wed 18 Feb 2026 17:20:49 +0000
ROA not after:            Wed 17 Feb 2027 17:25:49 +0000
asID:                     263059
IP address blocks:        2804:934:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 15:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b8:f8:16:36:27:76:c8:2b:39:09:84:3b:77:f2:f0:22:c8:86:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
        Validity
            Not Before: Feb 18 17:20:49 2026 GMT
            Not After : Feb 17 17:25:49 2027 GMT
        Subject: CN=AE9D086BCE68106D85E8C6334F2819A5666662D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4e:bd:d5:7c:e8:55:3c:dd:5d:84:90:5c:33:
                    3e:e2:4f:78:48:50:4b:83:8d:7d:7d:dd:b5:12:25:
                    57:47:a6:aa:0a:3f:fd:62:18:17:41:09:7e:01:a8:
                    d6:79:87:00:d8:24:38:68:ce:d7:66:c6:8e:c3:d9:
                    05:77:6b:61:f3:17:df:06:5f:da:14:cc:e0:c7:2f:
                    d5:8a:14:8d:e1:45:09:e3:ea:18:95:0e:b0:3a:ca:
                    3d:b5:29:76:21:3b:08:ca:05:87:eb:cd:bb:37:97:
                    d1:4e:c7:8f:05:ed:1e:28:b6:31:38:af:92:74:67:
                    46:a5:84:21:71:27:04:b9:cc:8b:6e:c1:3d:7a:6c:
                    98:de:dc:b4:69:3c:8a:ca:b4:fc:c9:15:00:f9:78:
                    48:f7:de:ee:57:cd:1e:52:5c:28:d9:f0:c9:8a:d3:
                    26:02:c5:2b:ad:ad:53:25:cf:f5:9e:5c:bf:c0:9a:
                    33:3e:f2:8c:49:16:c5:25:b4:df:b1:0f:99:47:36:
                    2f:fa:55:22:e0:7b:b2:d9:eb:5a:d2:c4:93:55:bc:
                    b2:32:19:2b:e3:96:0f:58:e1:43:8d:15:3c:82:72:
                    fa:8b:7e:97:76:4c:4d:72:14:47:67:ec:03:c9:9d:
                    26:33:54:c6:7d:3e:6f:e2:50:97:cc:03:17:7d:06:
                    fb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9D:08:6B:CE:68:10:6D:85:E8:C6:33:4F:28:19:A5:66:66:62:D5
            X509v3 Authority Key Identifier:
                keyid:04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a343030303a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ce:f5:2e:75:99:69:73:30:be:c8:71:c4:09:8e:88:95:cf:f6:
         9d:74:01:16:e1:7a:52:93:c3:6d:c4:8f:79:83:8f:96:6f:70:
         5d:00:31:c7:9d:f7:35:5b:c3:4e:f9:33:ed:ac:d9:82:52:6a:
         38:85:6a:19:5a:15:09:82:35:11:11:0b:98:5e:bc:7d:0f:e5:
         91:ff:19:c0:95:a0:9a:40:9f:b0:8c:b0:75:d7:ed:c5:95:c5:
         bd:dc:a3:aa:cd:96:c8:50:9b:12:6f:7e:f1:59:72:04:96:99:
         76:5c:c9:71:10:5d:c8:2a:2e:c6:3b:d9:d0:d1:ba:71:fa:08:
         4b:8b:74:cf:f8:de:f2:16:76:ad:a9:8a:50:c1:c5:af:e6:19:
         ec:e6:ec:f9:da:41:d0:9c:43:34:7f:7f:74:eb:2e:8b:ea:12:
         04:e1:4e:5a:44:45:ae:bb:18:b5:97:21:2b:a3:30:62:79:05:
         f7:79:ed:b9:3f:88:f6:64:d8:b2:58:e8:cb:5c:3c:a2:51:0b:
         1a:5b:43:a6:dc:6e:fe:a7:a5:1b:46:35:21:8d:d4:ca:c5:91:
         e0:3e:c1:fb:d0:94:e0:2b:12:e0:af:f0:e8:cd:43:2f:b7:1f:
         db:8f:33:1e:89:d5:6a:62:11:03:f3:87:a2:7b:73:e7:30:ca:
         a4:d8:d1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:41:39 2026 by rpki-client