Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a623030303a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a623030303a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          B1/duP64OWy7xoY/Q1Tb2fah0kkTQOjUYo1cMfleuZ8=
Subject key identifier:   A8:E1:68:4D:C8:6C:1D:10:1C:7E:15:9C:6F:1F:09:FA:F6:E8:00:D0
Certificate issuer:       /CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
Certificate serial:       74EB32DF223C1EC4FF38B746D2B409A2F53BAD74
Authority key identifier: 04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a623030303a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Wed 18 Feb 2026 17:25:48 +0000
ROA not before:           Wed 18 Feb 2026 17:20:48 +0000
ROA not after:            Wed 17 Feb 2027 17:25:48 +0000
asID:                     263059
IP address blocks:        2804:934:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 15:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:eb:32:df:22:3c:1e:c4:ff:38:b7:46:d2:b4:09:a2:f5:3b:ad:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
        Validity
            Not Before: Feb 18 17:20:48 2026 GMT
            Not After : Feb 17 17:25:48 2027 GMT
        Subject: CN=A8E1684DC86C1D101C7E159C6F1F09FAF6E800D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:93:68:20:ac:6e:a8:30:1c:98:00:bb:d9:
                    9d:3c:51:1f:dc:81:be:6a:db:d0:25:64:7a:10:dd:
                    e7:bd:be:89:6f:3f:5c:82:cf:4c:09:56:d3:ee:e8:
                    4f:4c:ca:5d:39:a8:7e:ca:cd:10:d8:1f:71:e1:a6:
                    68:60:da:10:49:31:e2:e3:ae:43:a1:81:7b:fa:4b:
                    59:76:f8:2d:ee:86:d9:f5:4c:96:26:ec:af:fe:05:
                    39:e5:3a:6f:bb:b8:73:53:29:27:b8:a2:6d:a8:bc:
                    17:ef:85:6a:1a:f8:f7:cc:34:3e:cd:d0:81:64:4c:
                    0a:d4:8e:e1:d4:89:ca:57:8e:4c:99:db:46:b6:7d:
                    9f:d4:59:c4:80:86:ea:47:89:59:d7:65:59:4b:ce:
                    0a:dd:e0:91:05:cf:d0:7e:6d:bf:09:3a:ab:7a:5c:
                    81:5f:41:55:9a:b3:1e:aa:53:94:f4:13:20:c5:c0:
                    4f:49:0c:38:2d:fb:fc:ad:23:90:eb:34:47:14:df:
                    69:bb:78:ed:bd:58:49:7c:22:35:fd:5c:9b:d4:a2:
                    ce:fa:37:3b:be:ea:f6:4a:3a:3d:cc:f9:7b:42:75:
                    39:80:aa:08:05:85:89:5d:a0:5c:02:01:aa:b1:76:
                    ed:13:ad:c1:26:5c:33:ab:9e:63:81:70:77:70:e2:
                    a2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E1:68:4D:C8:6C:1D:10:1C:7E:15:9C:6F:1F:09:FA:F6:E8:00:D0
            X509v3 Authority Key Identifier:
                keyid:04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a623030303a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         39:04:70:6b:f6:a4:2f:a3:34:41:ef:bf:c1:7f:2a:1a:6c:83:
         b0:b1:ce:da:bf:02:1d:89:a0:73:10:d8:fc:02:ce:09:cb:43:
         8f:31:0e:b2:fb:e0:ca:44:bb:aa:bd:87:32:07:29:a0:8e:66:
         a3:30:cc:53:9b:19:6d:4c:37:50:06:5e:88:16:b1:0d:96:9c:
         a8:35:63:c6:24:28:f5:bd:42:e7:2e:af:a5:47:23:6a:d2:77:
         85:d4:73:8d:80:06:7d:9b:ca:cd:33:ff:89:25:28:40:90:b7:
         ec:5f:f5:55:3d:6f:fe:23:21:f5:2b:4b:6e:26:e5:36:85:d6:
         22:d0:db:23:54:9b:8b:63:32:ed:d6:f6:b8:34:62:56:43:67:
         d4:1b:d6:c6:f0:00:b4:7c:1a:6e:20:6b:cc:77:32:9b:ff:c0:
         60:5e:d1:79:25:52:76:e5:cd:7a:73:1a:0c:a8:eb:94:78:f3:
         98:c6:26:a3:18:d4:e1:87:aa:8b:4f:68:0c:41:c6:dd:d9:ce:
         e4:22:83:07:8f:b7:f2:16:4e:42:84:a2:e7:5d:9f:29:13:20:
         d6:8b:21:dc:ab:31:e0:dd:1f:1e:a1:a4:0a:35:16:06:90:90:
         aa:dc:8c:dc:52:47:e6:7f:38:39:9b:9f:b3:a2:30:98:40:f9:
         b7:57:e8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 03:05:15 2026 by rpki-client