Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a613030303a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a613030303a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          /ugYjYwYG0Mm9AtKlvXItdpMdq7klFIgFyv++7cQm3A=
Subject key identifier:   E0:19:A8:4A:DA:71:AC:3E:F2:AB:B6:EB:1A:07:0C:C5:D9:D9:67:F1
Certificate issuer:       /CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
Certificate serial:       3AAEA333651078DFE09BCE5BB30DA7C2E4264DCD
Authority key identifier: 04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a613030303a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Wed 18 Feb 2026 17:25:50 +0000
ROA not before:           Wed 18 Feb 2026 17:20:50 +0000
ROA not after:            Wed 17 Feb 2027 17:25:50 +0000
asID:                     263059
IP address blocks:        2804:934:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 15:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ae:a3:33:65:10:78:df:e0:9b:ce:5b:b3:0d:a7:c2:e4:26:4d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
        Validity
            Not Before: Feb 18 17:20:50 2026 GMT
            Not After : Feb 17 17:25:50 2027 GMT
        Subject: CN=E019A84ADA71AC3EF2ABB6EB1A070CC5D9D967F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bb:8f:82:95:c6:b3:41:18:ba:fe:d3:a6:74:
                    4c:c2:8f:dc:98:ae:0a:b3:11:90:84:13:fe:47:d6:
                    6e:fc:ee:48:53:6b:30:5e:c3:f0:1b:89:82:21:a1:
                    d9:43:0c:de:0d:6a:c7:4d:b1:d7:40:0e:58:a0:df:
                    c1:c6:27:3e:eb:a7:af:e4:76:ea:2c:4a:e8:d0:de:
                    9c:cb:0d:2f:1f:01:88:c5:b1:ca:84:c3:e8:0c:7b:
                    9b:13:6a:86:c3:01:4e:b0:cb:d9:25:38:c3:03:54:
                    e9:43:72:dc:9e:42:3d:78:94:ce:28:ea:f9:22:4c:
                    e9:c7:76:4c:5e:46:b1:a4:92:bf:ae:18:2e:d4:a6:
                    37:16:ce:6a:9a:07:67:d8:8c:58:17:3f:98:2f:76:
                    2c:ac:62:d7:b5:bb:ed:de:d7:01:bf:06:5a:66:11:
                    15:f5:30:05:00:df:91:49:da:cd:6a:4f:7c:09:24:
                    f2:e6:37:dc:ad:dd:47:d4:31:46:cf:35:89:a3:64:
                    89:45:67:39:4f:df:2b:2e:db:c1:02:4b:4f:80:25:
                    f7:ba:72:d6:d4:64:3d:15:59:37:e7:74:9c:bb:65:
                    e9:f0:d9:a6:8d:52:b5:95:c8:0c:16:f7:a6:61:62:
                    16:87:08:03:6b:b1:60:ad:21:54:0c:01:a4:4e:b4:
                    63:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:19:A8:4A:DA:71:AC:3E:F2:AB:B6:EB:1A:07:0C:C5:D9:D9:67:F1
            X509v3 Authority Key Identifier:
                keyid:04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a613030303a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9c:1e:ab:1f:ee:e0:0e:1d:68:37:97:1c:f1:ee:f8:32:da:e7:
         bf:79:e4:4f:79:61:46:b6:35:6e:06:83:68:54:5f:b7:70:e6:
         c4:f2:f8:05:d3:37:65:43:94:4e:40:11:40:5e:04:4f:ed:bc:
         d7:b3:55:f2:a2:9a:61:48:da:e7:21:4f:c9:56:c3:47:b8:f4:
         38:27:6b:31:3d:9b:eb:81:61:10:c5:d4:74:0f:a2:24:17:43:
         54:f2:ff:d5:4b:52:a9:c9:94:29:77:d4:d6:ce:4b:bb:c6:ee:
         c2:cf:43:b9:20:64:30:c3:d8:a1:d3:f8:ef:b4:df:00:67:98:
         8d:28:84:b0:2f:ff:f7:40:7d:2d:42:32:c5:99:8a:8e:50:cd:
         37:92:f9:a1:33:a8:88:4d:cc:c7:a1:34:32:4f:79:5f:04:ca:
         0b:ec:1b:56:2b:9d:d5:3c:93:c7:8c:93:5c:69:4e:64:51:1f:
         f2:e3:c8:2c:da:34:5c:23:7a:3a:94:b2:d2:b3:60:64:5e:75:
         14:a2:33:20:4b:38:3b:2b:a5:42:b8:bc:0a:1b:00:e5:4a:15:
         bc:60:9e:f7:78:a7:2f:a1:f2:dc:66:8c:00:3e:fa:5c:3e:d0:
         04:a5:9c:fe:b6:75:3a:66:4b:ec:57:7a:61:06:a6:dc:e8:68:
         95:68:e1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:46:14 2026 by rpki-client