Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a373030303a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a373030303a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          hAFS+bERH/rcaWsf22hc8YmVaAZVTJ6EvX1TnnER5YY=
Subject key identifier:   09:2A:DF:B6:7F:C5:A4:F7:27:C8:ED:76:04:DC:AC:62:8C:96:8E:46
Certificate issuer:       /CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
Certificate serial:       1602920BAC191AF507E9926AFF8FED19F0DBA925
Authority key identifier: 04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a373030303a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Wed 18 Feb 2026 17:25:49 +0000
ROA not before:           Wed 18 Feb 2026 17:20:49 +0000
ROA not after:            Wed 17 Feb 2027 17:25:49 +0000
asID:                     263059
IP address blocks:        2804:934:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 15:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:02:92:0b:ac:19:1a:f5:07:e9:92:6a:ff:8f:ed:19:f0:db:a9:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
        Validity
            Not Before: Feb 18 17:20:49 2026 GMT
            Not After : Feb 17 17:25:49 2027 GMT
        Subject: CN=092ADFB67FC5A4F727C8ED7604DCAC628C968E46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:cd:22:43:9d:07:c7:22:e8:68:85:5a:d7:32:
                    36:4a:e7:57:42:99:df:c8:e3:88:6f:17:91:7d:49:
                    e6:96:3e:39:fe:dc:b2:15:1c:a6:86:3f:82:0c:8c:
                    91:ad:8d:2a:17:29:78:52:4c:e1:32:81:29:69:3d:
                    b7:02:45:4e:1d:ac:4f:65:fa:7c:e1:ac:9d:13:9c:
                    cc:3e:f3:8e:aa:91:19:3e:bf:c3:42:22:ea:54:fa:
                    3a:1d:d7:c4:99:c4:17:43:c8:96:1e:a9:03:27:8f:
                    27:dc:52:1e:65:26:eb:62:41:fa:c8:7c:cb:08:8f:
                    d3:e8:f1:bf:7b:89:97:f6:8c:92:eb:ce:24:aa:e7:
                    94:d3:65:9b:e0:ed:3b:45:49:ef:47:37:8f:cf:fc:
                    ee:27:8f:a6:f8:4e:50:d9:ac:5c:d7:be:67:5c:87:
                    d2:85:14:72:4c:27:94:86:b6:3f:2b:24:99:33:78:
                    32:65:6f:7e:0f:eb:1f:51:72:43:00:dd:d8:5a:dc:
                    2c:52:70:73:37:f4:a5:e9:01:da:c5:b0:a0:1b:22:
                    92:b8:8a:fb:86:a7:02:5f:e8:7b:5a:96:81:5c:8a:
                    1c:d1:d6:dc:b5:41:5e:98:3c:bd:13:16:ab:8a:50:
                    01:eb:9d:67:dc:3c:2b:a2:8b:86:00:9c:6c:70:74:
                    09:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2A:DF:B6:7F:C5:A4:F7:27:C8:ED:76:04:DC:AC:62:8C:96:8E:46
            X509v3 Authority Key Identifier:
                keyid:04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a373030303a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         22:cc:e6:42:4d:17:b6:ce:84:42:cb:2d:06:51:bb:72:8e:43:
         73:b1:81:77:21:dc:5c:32:f8:5e:05:83:f7:8c:82:99:c8:a1:
         da:19:4a:0b:60:b9:6a:fb:ad:67:91:dc:99:e8:82:cd:16:d3:
         09:82:cf:3e:6f:44:7a:1d:ca:b8:6c:4a:f9:fd:c8:03:82:4a:
         d5:35:21:4f:81:3c:1a:9d:69:d3:0f:6d:80:94:74:58:55:62:
         fe:aa:e0:3b:6e:d7:70:8d:51:90:7c:60:88:66:f8:5d:6f:4f:
         75:42:de:8e:f1:01:3c:db:cc:63:a1:42:07:8f:c3:fd:46:aa:
         a0:29:94:2b:84:ed:16:4f:3e:6d:93:38:11:aa:f8:67:b2:5c:
         61:80:50:b8:26:a2:da:75:cd:63:46:e4:6f:df:7e:11:5b:e0:
         38:02:1a:e3:3f:d9:54:d1:f4:65:3e:02:46:a1:b1:45:cc:79:
         66:67:39:6b:4b:91:f1:1e:d3:28:0f:b2:79:97:d8:9e:eb:a2:
         c1:e1:6c:44:36:37:d1:38:24:15:3c:a4:92:fe:9f:b3:42:59:
         f4:53:7f:68:ca:f5:28:a8:e6:ca:15:18:7f:86:39:66:de:fb:
         a2:d1:9c:5a:64:d9:f5:ef:37:0e:15:c8:5f:f3:97:74:0d:a3:
         83:f7:82:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:41:38 2026 by rpki-client