Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a633030303a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a633030303a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          1ruEVU8If2E1m+b+Tmt5VcgqwPthwDJ2jwgMVAz7SC0=
Subject key identifier:   1C:FF:05:78:86:5E:1B:72:9B:A4:32:3E:B2:63:D8:8C:7C:AF:32:80
Certificate issuer:       /CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
Certificate serial:       2FC53954EA581A8803DE3F3365ADEDAA3E5013A7
Authority key identifier: 04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a633030303a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Wed 18 Feb 2026 17:25:51 +0000
ROA not before:           Wed 18 Feb 2026 17:20:51 +0000
ROA not after:            Wed 17 Feb 2027 17:25:51 +0000
asID:                     263059
IP address blocks:        2804:934:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 15:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c5:39:54:ea:58:1a:88:03:de:3f:33:65:ad:ed:aa:3e:50:13:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
        Validity
            Not Before: Feb 18 17:20:51 2026 GMT
            Not After : Feb 17 17:25:51 2027 GMT
        Subject: CN=1CFF0578865E1B729BA4323EB263D88C7CAF3280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0e:d9:c7:61:b0:58:a5:d2:fe:db:0c:1f:07:
                    66:a2:ca:0a:a1:41:94:36:ba:5d:f7:8b:22:58:50:
                    10:71:f1:14:b8:ab:0d:cb:a9:b3:3e:45:23:27:aa:
                    ac:be:8b:5e:5b:80:d3:68:26:2c:1f:7c:11:50:af:
                    8b:1b:28:73:07:30:a8:7c:7b:b5:05:ea:a3:22:8d:
                    9e:79:76:9a:2f:0f:36:33:21:44:22:ad:62:d2:dd:
                    1a:b4:12:3e:40:63:2f:1a:de:20:1d:22:18:72:5e:
                    61:08:19:5c:11:21:27:1c:25:76:0a:9d:bd:08:1d:
                    55:77:12:2c:f9:86:b6:6e:30:a5:8e:13:85:19:97:
                    e5:33:10:47:8a:98:40:08:ba:b3:43:87:78:0e:64:
                    90:1b:d4:6b:3a:0c:8c:13:0e:f0:56:1d:0e:f4:c7:
                    39:31:33:67:41:96:d6:dc:83:6f:1c:43:92:f7:9c:
                    c3:65:77:b2:12:bf:3d:cb:73:00:7e:0e:da:72:dc:
                    00:4e:7a:df:88:ff:07:b3:86:2e:23:7f:00:55:33:
                    4b:e8:f4:58:9f:e0:af:7f:ef:3a:34:d2:0b:e2:2c:
                    7b:2e:15:84:60:e1:92:ca:40:d2:7f:e8:03:be:45:
                    b4:5a:01:5a:42:7b:b6:aa:b2:58:f0:cf:18:6a:18:
                    d2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:FF:05:78:86:5E:1B:72:9B:A4:32:3E:B2:63:D8:8C:7C:AF:32:80
            X509v3 Authority Key Identifier:
                keyid:04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a633030303a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ca:72:0f:3e:d9:d5:0b:79:97:29:ec:d6:28:39:f8:f3:74:a7:
         12:20:bb:e5:b3:b8:b8:80:86:24:76:bc:a3:84:39:fa:71:a9:
         3e:d3:92:ff:bb:e6:3e:f3:2d:c6:06:e8:fe:b6:4f:e4:b4:29:
         c8:60:c9:6f:eb:51:d0:6c:a9:03:f2:fd:1f:19:15:4f:e2:42:
         be:4a:5f:34:11:2b:2d:12:8c:e1:5f:c0:97:1a:6c:ac:b3:cd:
         ad:aa:49:d1:64:4f:d0:5b:2f:96:ff:38:65:3f:c2:53:08:46:
         88:1f:88:a0:19:8c:dd:05:9f:43:1a:92:75:6d:2a:87:c9:95:
         d3:b3:e7:70:08:0c:eb:fd:77:93:3a:f9:4e:1d:91:b8:84:b9:
         90:73:b0:b9:65:23:a3:40:24:d1:fe:47:f8:5c:89:5d:12:16:
         58:1e:b7:8b:e6:b4:ca:92:cb:71:86:54:50:05:e4:bd:ea:1b:
         fa:04:01:8f:11:9d:2b:b8:dc:42:fc:e8:8d:a9:b8:62:58:e2:
         d5:18:12:0a:ea:41:ab:9c:0a:c8:9d:34:da:17:fc:87:80:6b:
         96:53:eb:12:5f:70:91:35:3d:41:e4:c3:8c:2e:fb:51:34:93:
         d2:c9:10:19:7a:ad:74:34:ed:8b:e9:c3:d9:82:51:2b:d7:f8:
         58:cc:5e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:41:40 2026 by rpki-client