Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a363030303a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a363030303a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          gimFSXUfGrmFmtreIx6CXGPAmR3ta9wrkjlhhntHc5o=
Subject key identifier:   37:19:C7:6D:7E:D4:87:29:09:EF:EC:59:69:BB:62:78:7C:6A:C9:14
Certificate issuer:       /CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
Certificate serial:       62A264CEED63146BBD240FC1F7E4DA73B41EA79C
Authority key identifier: 04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a363030303a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Wed 18 Feb 2026 17:25:49 +0000
ROA not before:           Wed 18 Feb 2026 17:20:49 +0000
ROA not after:            Wed 17 Feb 2027 17:25:49 +0000
asID:                     263059
IP address blocks:        2804:934:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 15:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a2:64:ce:ed:63:14:6b:bd:24:0f:c1:f7:e4:da:73:b4:1e:a7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
        Validity
            Not Before: Feb 18 17:20:49 2026 GMT
            Not After : Feb 17 17:25:49 2027 GMT
        Subject: CN=3719C76D7ED4872909EFEC5969BB62787C6AC914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:94:cd:fd:4f:b4:6c:ea:bb:0e:44:bb:bd:1a:
                    6a:ee:25:3d:1c:86:03:e6:c9:b2:43:35:09:d4:30:
                    5b:3d:3d:1f:a9:18:e3:7d:23:d8:78:f2:0b:bb:3a:
                    04:d4:25:fa:67:81:b8:f4:dd:5a:02:e2:80:d4:92:
                    76:c7:4f:7f:e6:03:e3:86:e4:46:b3:b1:98:89:dd:
                    cf:01:31:cb:4a:6d:ed:68:b6:af:72:bb:df:f2:7e:
                    59:97:ed:27:44:f8:60:81:81:28:f7:64:8f:2f:93:
                    12:be:32:72:3a:a9:75:b3:41:2e:51:d7:7d:7e:33:
                    ca:62:b5:1a:6f:17:7c:93:77:13:9b:13:5e:78:82:
                    ae:de:48:87:18:b9:d9:10:1f:71:49:bd:00:e3:81:
                    1c:7f:3e:96:8f:b3:1b:06:20:31:08:8a:9a:f2:a9:
                    b4:af:35:ed:6c:e6:ad:21:be:f3:5e:55:b0:27:9e:
                    dc:5d:0c:62:54:9d:a6:55:78:f6:f7:d6:9e:6b:e9:
                    2d:6a:c8:d1:0c:cb:7f:58:03:bd:52:d6:63:69:7d:
                    1a:bd:ef:20:aa:02:01:f6:f2:ed:64:81:75:2d:10:
                    28:70:e8:51:1d:ee:10:3f:04:f8:d0:a7:89:7e:2e:
                    ed:f0:33:85:12:34:27:9f:ab:98:5b:fa:a2:8f:d6:
                    f6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:19:C7:6D:7E:D4:87:29:09:EF:EC:59:69:BB:62:78:7C:6A:C9:14
            X509v3 Authority Key Identifier:
                keyid:04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a363030303a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3d:fa:22:32:cb:e9:e5:fa:3a:7f:6d:1e:aa:d6:a7:70:69:b6:
         9f:f1:a6:73:64:ad:26:86:59:f6:4b:f8:e0:fb:c4:be:f2:4b:
         61:09:9d:81:c5:87:5b:f3:8d:23:a2:5c:9e:14:dd:08:71:02:
         de:ad:3b:0a:0b:13:de:35:6c:e2:c7:5f:1f:81:e9:62:38:ce:
         1e:be:a7:29:7f:3a:17:31:a6:09:ba:fb:20:76:0f:9c:c7:5c:
         b8:f1:28:1c:50:30:a6:0e:32:f3:2f:bd:71:98:e1:65:4a:54:
         e8:f3:7d:e3:2f:04:e9:a7:d5:ca:d1:d3:ff:f8:25:07:1c:cf:
         75:5a:c5:4a:b6:b8:b1:1b:60:97:9f:ba:04:c7:75:58:bf:7c:
         1e:b3:98:62:83:2e:af:eb:03:d4:69:0d:28:81:b9:18:ed:af:
         6d:dc:44:8e:e3:5d:1a:98:6a:fe:9a:53:26:8d:9f:37:80:21:
         ca:ba:dd:2f:87:42:e4:4d:a5:0b:13:e8:05:76:f9:e2:5b:6f:
         c1:4b:d7:f1:88:49:6b:38:c2:72:ed:0f:ac:9d:56:92:f6:dd:
         f6:48:5f:5a:3d:bb:b3:33:a3:88:53:ea:a7:4a:06:1a:07:02:
         54:fc:b6:eb:b5:d5:fa:06:03:43:e9:9e:b1:83:d8:64:6f:83:
         9a:7a:ed:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:41:41 2026 by rpki-client