Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a323030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a323030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          Fpw67FtU5uAt11JxVSnglyiFhIKJ4D+GmYDXWZnNr4c=
Subject key identifier:   49:8D:09:4E:BD:AD:7B:D4:D0:C4:3D:F8:6C:36:25:B6:D3:CA:0A:4B
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       15C700A8E605981A06A0352CF814E52C8932725E
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a323030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 04 Feb 2026 20:00:03 +0000
ROA not before:           Wed 04 Feb 2026 19:55:03 +0000
ROA not after:            Wed 03 Feb 2027 20:00:03 +0000
asID:                     266248
IP address blocks:        2804:3d04:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c7:00:a8:e6:05:98:1a:06:a0:35:2c:f8:14:e5:2c:89:32:72:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Feb  4 19:55:03 2026 GMT
            Not After : Feb  3 20:00:03 2027 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:07:37:a3:de:1a:98:8e:e9:3f:c1:7d:49:48:
                    11:05:89:20:1b:95:db:87:67:95:ee:02:27:9b:66:
                    03:19:3d:14:e0:d2:2f:4d:1d:68:3f:21:d0:f3:13:
                    e5:88:8a:67:34:67:47:dc:3a:91:db:b4:5a:ec:43:
                    22:05:f3:8e:99:2f:b3:bf:c6:32:9f:13:84:c1:27:
                    a6:7e:cb:22:a0:7e:3c:27:89:f9:cc:46:97:f1:30:
                    78:90:ca:43:2c:14:e5:c3:81:15:4e:c4:4a:12:28:
                    33:b7:83:41:03:5d:7d:0e:22:70:63:58:3f:e2:d6:
                    f3:6c:41:d7:89:56:16:2f:cb:ec:a4:b3:19:59:a2:
                    3a:c9:c0:f1:c7:67:15:bd:bd:d4:11:b9:54:aa:17:
                    26:23:3d:14:ce:4f:fc:5b:ee:9e:12:38:9d:04:be:
                    90:fb:24:4a:52:3d:2a:f3:7d:66:1e:50:15:c5:a3:
                    6f:1b:27:e2:08:a4:48:11:30:4e:d2:15:c7:47:5a:
                    8e:e7:cc:57:00:52:89:45:8b:49:9d:36:4f:5a:57:
                    30:0e:4b:45:c6:a6:76:e3:b9:0a:2e:26:e3:f6:3c:
                    1a:13:d0:39:79:f8:e6:de:17:5d:31:6e:7c:68:9d:
                    84:30:58:d9:dc:6d:93:9d:6e:b4:6a:37:74:5a:4c:
                    60:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8D:09:4E:BD:AD:7B:D4:D0:C4:3D:F8:6C:36:25:B6:D3:CA:0A:4B
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a323030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3c:d9:4f:36:29:8f:25:a0:39:74:29:88:0e:e0:c9:d4:9c:01:
         a5:05:db:e2:ad:07:77:87:cc:e0:6f:b5:3e:3c:4e:71:b2:31:
         c9:40:e3:69:1b:da:65:4e:68:3e:1f:35:d6:1e:88:4d:d9:72:
         37:ef:98:e6:c7:98:ed:15:9d:9b:c2:0d:e8:de:13:76:a6:2d:
         8f:d9:64:15:c6:30:ec:b4:70:8b:5c:2f:b9:72:4d:8c:9e:35:
         fd:50:9b:77:e9:7b:e8:a9:6a:fb:82:4d:fc:c1:c5:1b:f9:ec:
         df:b9:04:42:bf:b3:3b:6f:d7:ef:be:32:47:cf:1b:e0:72:00:
         9b:2d:22:ca:01:04:e6:29:6a:c7:59:88:5b:42:e5:bd:41:f9:
         d5:6a:9d:9a:2c:cc:25:52:89:5a:e4:06:c0:b4:99:e1:40:68:
         af:53:30:db:4f:a0:73:a9:dd:b3:19:aa:c6:42:17:02:b5:9b:
         e0:b0:a3:56:44:44:0c:51:ba:23:2c:36:be:0c:47:f0:dd:b5:
         69:00:36:0c:40:e3:f9:6d:f8:ce:76:37:67:68:4d:f3:78:e5:
         07:1f:ef:50:12:3d:74:cb:88:9a:25:95:4f:1c:85:d6:67:be:
         78:b2:47:87:1d:36:07:35:b9:1a:81:d6:da:7f:62:a2:c5:a2:
         61:bf:4f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:56:14 2026 by rpki-client