Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a393030303a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a393030303a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          bLHCUGziXklAWROnPrYg24RcF3S38zAtndSsALTCYSM=
Subject key identifier:   41:82:39:61:3F:EC:00:68:74:9F:BB:DA:BF:EA:3D:0C:4F:02:7C:BA
Certificate issuer:       /CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
Certificate serial:       035A3D0B5ED3B0C0131846B8712C56269E68DC23
Authority key identifier: 04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a393030303a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Wed 18 Feb 2026 17:25:49 +0000
ROA not before:           Wed 18 Feb 2026 17:20:49 +0000
ROA not after:            Wed 17 Feb 2027 17:25:49 +0000
asID:                     263059
IP address blocks:        2804:934:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 15:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:5a:3d:0b:5e:d3:b0:c0:13:18:46:b8:71:2c:56:26:9e:68:dc:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
        Validity
            Not Before: Feb 18 17:20:49 2026 GMT
            Not After : Feb 17 17:25:49 2027 GMT
        Subject: CN=418239613FEC0068749FBBDABFEA3D0C4F027CBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:92:ea:e4:96:62:bd:e5:71:4a:8a:69:bb:d4:
                    e0:3b:50:ba:29:41:0e:3c:1c:77:de:2a:b2:f5:03:
                    f3:c7:4b:80:8d:7f:60:92:11:6c:68:df:d9:06:7b:
                    24:36:1a:8e:c9:b2:2d:16:76:09:4f:36:15:41:d0:
                    bc:a3:a0:e6:de:d8:82:4d:7d:57:3a:b4:bb:2c:32:
                    fc:68:a7:ae:c0:43:bc:5a:22:08:b3:47:7d:fb:1d:
                    d2:00:d3:e9:46:84:cb:5d:44:85:3b:37:a1:bf:e3:
                    de:ba:59:83:22:7f:d1:0b:80:f6:ed:88:4b:d5:17:
                    cb:87:e8:5c:cb:74:60:9a:24:e5:8c:16:7f:15:8e:
                    75:c2:78:18:45:7e:2c:b0:62:fd:d4:28:eb:18:6d:
                    f5:9e:98:43:d7:1a:3b:93:30:ab:e2:a8:7b:a8:80:
                    96:a6:9d:78:3a:da:a8:ae:ab:54:e0:f1:54:16:44:
                    b0:1a:e0:8b:17:f3:7f:3b:7f:64:05:ff:98:d5:3a:
                    56:5c:0b:24:9c:1b:5c:08:e2:d8:2f:ec:f8:f4:4b:
                    22:1b:e0:a5:7e:96:9a:92:b6:2c:8e:01:95:37:58:
                    28:75:ec:50:f5:a9:84:19:d4:6f:b0:f5:2a:ba:21:
                    d2:a3:ca:d5:47:bd:50:6a:01:ff:9e:db:f9:bc:c0:
                    2b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:82:39:61:3F:EC:00:68:74:9F:BB:DA:BF:EA:3D:0C:4F:02:7C:BA
            X509v3 Authority Key Identifier:
                keyid:04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a393030303a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a6:dd:0c:f1:ca:e3:6e:bd:c3:1d:4a:96:d9:6b:83:2a:8b:fe:
         e9:64:13:07:11:31:ad:13:d8:90:97:b6:ba:93:05:ca:93:93:
         99:80:fa:a9:df:ce:29:6a:e4:71:5e:da:2f:18:ea:89:a8:54:
         02:b8:92:d5:60:4c:0e:3c:56:5c:23:38:23:b7:b3:68:fb:22:
         3e:cf:16:55:8d:b3:26:92:e5:8b:9a:8d:d8:05:ff:c3:28:f7:
         08:2f:ee:9b:bf:83:18:b7:44:a9:94:13:ee:4b:e3:4b:7e:01:
         85:37:2c:09:ee:20:fe:ab:ab:ed:00:fd:40:98:44:71:61:2d:
         3e:6a:d0:b5:6d:bb:93:58:3a:22:b7:aa:b4:1b:be:04:03:ec:
         73:44:43:f5:74:d2:9d:23:10:dd:97:06:1d:f2:4c:f6:3b:06:
         2c:84:06:80:59:c2:a7:c9:85:4f:0a:99:42:ee:e6:e8:4f:92:
         18:e2:8f:d6:84:7e:7b:75:9d:c4:b5:5a:f4:c8:68:da:02:9b:
         37:4c:68:12:4b:80:4b:5e:37:12:1b:9b:ab:f4:ea:2f:a4:b1:
         4b:3c:fd:fb:d1:46:a8:9e:75:3d:b5:8c:f0:11:e2:ae:24:77:
         57:95:d8:bd:8c:42:2d:d2:04:57:2b:82:09:2f:59:e9:2c:7b:
         21:69:97:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 03:05:24 2026 by rpki-client