Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a643030303a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a643030303a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          8d1n55EyL5ENsd49efNtJWdrU+SeaX6nHD4l5Ao9hxs=
Subject key identifier:   09:2E:CA:CF:F5:96:94:94:62:BB:B9:A4:B3:7B:5A:53:2E:FD:D2:EB
Certificate issuer:       /CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
Certificate serial:       51CF2FB45B33435356DF8132D1D621D1183E7F78
Authority key identifier: 04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a643030303a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Wed 18 Feb 2026 17:25:48 +0000
ROA not before:           Wed 18 Feb 2026 17:20:48 +0000
ROA not after:            Wed 17 Feb 2027 17:25:48 +0000
asID:                     263059
IP address blocks:        2804:934:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 15:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:cf:2f:b4:5b:33:43:53:56:df:81:32:d1:d6:21:d1:18:3e:7f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
        Validity
            Not Before: Feb 18 17:20:48 2026 GMT
            Not After : Feb 17 17:25:48 2027 GMT
        Subject: CN=092ECACFF596949462BBB9A4B37B5A532EFDD2EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d1:1d:df:56:6c:87:66:0d:29:8b:9b:d9:9b:
                    6d:28:de:47:7e:ae:61:0b:e5:c0:d6:b5:7e:07:48:
                    b6:33:0e:36:8a:dd:11:99:0e:dc:ec:3e:85:e8:89:
                    dc:8e:56:39:32:1a:84:48:ef:e8:00:4b:95:a6:2e:
                    98:5e:96:06:5f:d9:8e:cf:0d:61:dd:7e:6b:ae:7d:
                    67:b6:2d:3b:5d:ac:55:49:88:b3:22:17:f7:d5:0b:
                    b2:7c:17:1f:9d:85:3b:29:c3:0b:3c:93:c2:47:b2:
                    d6:41:70:28:f0:c6:67:02:be:a8:11:4a:01:f1:0a:
                    db:aa:02:f9:e2:2e:de:2a:18:7e:c5:ca:f6:9d:de:
                    a3:2e:0e:a1:fb:38:6d:3a:31:81:ce:43:47:cc:b7:
                    01:cc:eb:1d:41:51:00:95:ab:50:f8:f8:97:76:f4:
                    ea:32:cf:c0:23:5f:09:82:78:45:ad:73:ae:95:04:
                    6c:91:cd:a9:cb:24:e4:09:58:4f:ec:98:20:7b:b2:
                    49:4b:2c:20:e8:81:3e:03:3b:fb:e7:a6:b4:b3:16:
                    3b:6d:a4:b7:90:d9:81:8d:e3:07:9e:5c:54:a8:87:
                    ec:20:42:0f:f7:78:a2:11:63:ae:3e:17:91:90:92:
                    d8:db:f7:00:f6:b7:94:3f:cd:48:ac:c4:03:a1:b9:
                    8a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2E:CA:CF:F5:96:94:94:62:BB:B9:A4:B3:7B:5A:53:2E:FD:D2:EB
            X509v3 Authority Key Identifier:
                keyid:04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a643030303a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6f:d8:bc:bb:9c:2b:3b:7c:98:a6:b7:40:b7:a4:9a:38:cb:6b:
         68:b0:8c:cf:fa:c7:0e:2e:36:da:1a:94:56:c3:8a:df:60:4f:
         df:36:3d:0e:64:7a:65:95:8c:c7:c3:b2:92:37:ca:36:18:b7:
         bc:57:32:fa:bb:2f:34:89:ef:1d:6c:19:6a:7c:a9:f8:ed:02:
         3a:6a:55:cb:73:50:5d:19:4b:e4:c1:28:08:e7:6b:58:a5:23:
         8e:ff:c5:59:16:a2:96:46:74:e3:e7:c0:de:67:87:b0:f7:a6:
         dd:6a:38:cc:25:92:45:2e:45:ec:2a:5c:f5:85:86:59:c0:22:
         f0:76:7d:30:bd:0c:1b:c7:0e:ee:76:dc:34:0e:3a:36:e4:01:
         7d:87:07:fc:0f:4e:df:c7:be:05:37:b5:2c:53:ae:7f:20:84:
         31:ca:53:9d:42:b4:d0:1b:05:a4:0d:02:12:19:fa:b7:3f:84:
         5f:2c:93:9f:ac:1f:6b:86:d5:41:96:cf:1f:8c:11:52:92:42:
         30:46:ad:84:8d:2f:33:a9:c8:8f:c3:43:bb:3a:c6:ac:4e:d9:
         66:76:8c:2e:c8:cc:17:17:b5:63:f9:27:df:4e:3d:ae:ec:8b:
         98:b3:8b:12:7f:37:19:ad:28:c7:65:a4:7c:3b:aa:bb:ac:a8:
         ec:11:a3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:41:39 2026 by rpki-client