Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a333030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a333030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          FUQdb5k3ZQh9KYe6tlho+K7sqcw/AzTtBsK9zxarq3k=
Subject key identifier:   E5:0C:D6:D7:C4:6B:CB:E9:B2:64:C0:0E:A6:92:09:5C:71:86:2D:23
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       25279591DAEB24EBBE8658B81EFECB8273FA56CF
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a333030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 04 Feb 2026 20:00:04 +0000
ROA not before:           Wed 04 Feb 2026 19:55:04 +0000
ROA not after:            Wed 03 Feb 2027 20:00:04 +0000
asID:                     266248
IP address blocks:        2804:3d04:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:27:95:91:da:eb:24:eb:be:86:58:b8:1e:fe:cb:82:73:fa:56:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Feb  4 19:55:04 2026 GMT
            Not After : Feb  3 20:00:04 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b1:fa:68:7d:80:cd:e6:ed:30:2d:a3:27:c7:
                    cd:64:88:fb:04:d1:cb:99:dd:eb:4f:52:12:42:3c:
                    cb:49:2e:ca:ba:7d:dd:7b:4d:16:be:8e:fa:dc:f4:
                    8b:fe:80:2c:fa:e7:27:30:93:d6:e3:bd:af:12:fe:
                    cd:38:03:d3:13:3c:ae:df:ae:5f:e3:ec:dd:d2:27:
                    16:d0:70:3e:bb:8b:b0:fb:4f:47:71:3c:eb:dc:13:
                    a7:da:bc:9c:ea:ca:96:e1:10:99:2b:d2:dc:2e:5d:
                    fb:24:3a:bb:7e:ab:1c:86:2e:50:80:58:c8:4e:87:
                    05:0e:84:8b:e9:37:1e:f7:2b:a5:ad:18:d7:ce:f4:
                    73:b4:7e:44:30:6e:78:2a:f4:5f:c8:bf:52:58:60:
                    e0:88:2a:a0:d2:9e:3c:53:8b:0c:b4:d6:c0:a7:42:
                    a6:b9:e7:92:f6:b1:fc:31:a2:d4:32:5b:58:b9:36:
                    f0:d1:3d:85:32:76:ec:11:0a:3b:64:f8:e5:ac:80:
                    c3:b5:0e:f1:a1:9e:98:61:00:4a:88:41:03:2a:99:
                    b2:60:ea:0a:6a:7a:41:0c:ad:74:ff:f4:ac:17:9f:
                    66:14:c3:96:e2:34:3c:fe:aa:42:df:e3:73:30:80:
                    67:61:59:0a:78:97:60:e3:20:5c:0d:1b:77:55:52:
                    74:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0C:D6:D7:C4:6B:CB:E9:B2:64:C0:0E:A6:92:09:5C:71:86:2D:23
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a333030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         39:64:7d:ec:58:c1:00:7c:7e:a5:cf:87:0d:45:67:09:4a:37:
         6d:6f:99:aa:ad:10:89:da:ec:ca:c4:89:60:28:43:40:1e:9e:
         aa:bb:31:18:73:35:0e:4b:a8:2d:2d:6a:22:c0:f2:8f:0f:89:
         64:1c:67:50:4b:ca:b2:74:b6:c9:7f:dc:1a:53:a1:71:a3:d3:
         88:6e:90:37:e5:94:9a:f5:96:58:fd:b3:2c:7c:9f:dc:13:39:
         3b:82:ec:f3:df:b2:99:2d:9e:dd:c2:29:5d:db:99:8a:46:c4:
         5b:de:5c:78:c5:c2:39:00:e8:8d:34:55:a6:85:90:5f:9b:37:
         49:ad:e2:66:d0:8a:df:c0:5d:f6:ef:45:96:37:bc:ef:6b:18:
         37:17:86:39:ff:cf:75:89:0a:a3:b2:50:65:34:e9:b9:36:69:
         45:90:18:6e:e7:24:3a:4c:33:13:52:64:89:73:ca:98:4e:a5:
         45:a6:82:bc:2d:53:35:ef:77:3d:f0:58:26:70:b4:7e:33:b6:
         8a:a7:3d:ef:f2:6b:07:9c:a0:38:e8:87:80:f0:df:60:10:5f:
         4d:0a:f1:6b:3f:4f:68:d6:fe:c8:35:54:4e:dd:6f:9f:39:4b:
         f8:bd:ba:71:68:3e:0b:02:db:32:3a:d3:3a:53:5b:e5:a4:0c:
         3d:f3:46:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:22:59 2026 by rpki-client