Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a343030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a343030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          5CaT/gMeeqqkSy144gN+mXHDUFzS/zbTQVd0mr+64W8=
Subject key identifier:   EC:56:EA:67:6F:A7:A4:5F:9E:C1:BE:A6:3A:B2:2C:EC:2E:C4:F2:F3
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       38C9F33D479016F266FC97AE6630BFC5B2E15D3D
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a343030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 04 Feb 2026 20:00:04 +0000
ROA not before:           Wed 04 Feb 2026 19:55:04 +0000
ROA not after:            Wed 03 Feb 2027 20:00:04 +0000
asID:                     266248
IP address blocks:        2804:3d04:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c9:f3:3d:47:90:16:f2:66:fc:97:ae:66:30:bf:c5:b2:e1:5d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Feb  4 19:55:04 2026 GMT
            Not After : Feb  3 20:00:04 2027 GMT
        Subject: CN=3082010A0282010100CEE912E325C3D1B3790E4FADF9FAE81F3A3FCE08CBB06A55CAA0241DEF4D1FF63B2531EA9905E985A55A73184A9076F2E1422EF46C21FE6234772F2994D1DD52AC13313C273915E4A886D15A8FABC6F7BACE614FE7F1FAE3B360300D53FEBB1D0579D9F61E35FDCF030E06270E099FBD6C8817EE6C0AB442AF16CC77E2420191A24E54EC7559C22F797AA69C3269FF99519904F30B181CF8804EF3C95B1C790742F6223D0F19C5EF08705354E7E89D12750F8A716F677EC5C2ACFC5DDBAFEF93ACC2290DFEB0606F27DD2332117A3D418BBDF2F474F9D1C994B2D4F1B5D1A1492DB1717587FE23E8A1147BFB5A1F7083499709CD80EA56A70CCF6F8839E549B10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e9:12:e3:25:c3:d1:b3:79:0e:4f:ad:f9:fa:
                    e8:1f:3a:3f:ce:08:cb:b0:6a:55:ca:a0:24:1d:ef:
                    4d:1f:f6:3b:25:31:ea:99:05:e9:85:a5:5a:73:18:
                    4a:90:76:f2:e1:42:2e:f4:6c:21:fe:62:34:77:2f:
                    29:94:d1:dd:52:ac:13:31:3c:27:39:15:e4:a8:86:
                    d1:5a:8f:ab:c6:f7:ba:ce:61:4f:e7:f1:fa:e3:b3:
                    60:30:0d:53:fe:bb:1d:05:79:d9:f6:1e:35:fd:cf:
                    03:0e:06:27:0e:09:9f:bd:6c:88:17:ee:6c:0a:b4:
                    42:af:16:cc:77:e2:42:01:91:a2:4e:54:ec:75:59:
                    c2:2f:79:7a:a6:9c:32:69:ff:99:51:99:04:f3:0b:
                    18:1c:f8:80:4e:f3:c9:5b:1c:79:07:42:f6:22:3d:
                    0f:19:c5:ef:08:70:53:54:e7:e8:9d:12:75:0f:8a:
                    71:6f:67:7e:c5:c2:ac:fc:5d:db:af:ef:93:ac:c2:
                    29:0d:fe:b0:60:6f:27:dd:23:32:11:7a:3d:41:8b:
                    bd:f2:f4:74:f9:d1:c9:94:b2:d4:f1:b5:d1:a1:49:
                    2d:b1:71:75:87:fe:23:e8:a1:14:7b:fb:5a:1f:70:
                    83:49:97:09:cd:80:ea:56:a7:0c:cf:6f:88:39:e5:
                    49:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:56:EA:67:6F:A7:A4:5F:9E:C1:BE:A6:3A:B2:2C:EC:2E:C4:F2:F3
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a343030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6d:41:63:96:37:15:fc:54:ba:51:fe:96:18:00:d9:28:4f:d0:
         09:af:ca:8e:fb:08:bc:9a:3d:f2:13:18:6a:d2:c1:5a:d4:22:
         29:87:3e:25:2e:37:8f:e4:c4:3f:d2:74:fb:96:a9:07:94:32:
         d5:fe:1a:64:58:28:15:c5:f8:fb:8a:60:88:58:05:da:98:0f:
         3a:2f:54:17:0e:5f:36:4e:28:6f:00:c9:b3:cc:90:0c:6b:39:
         a9:2b:59:56:ec:06:0a:47:8a:6a:b2:17:e9:cb:17:f2:8a:47:
         d6:f9:59:4f:09:d9:95:51:7b:96:61:b4:13:93:54:43:db:d8:
         8d:4d:62:c2:f2:9c:61:b6:e9:69:ab:11:b9:c8:d9:3d:14:41:
         42:f1:ec:f4:73:a8:e3:98:2d:58:40:cf:74:85:57:af:76:b2:
         45:e0:2a:6f:68:f3:55:96:a3:e3:15:ea:78:e8:f0:0a:ae:6f:
         bf:28:2b:c5:5c:93:e9:7e:a0:60:a3:d8:3b:de:9e:16:ff:19:
         57:fd:63:51:aa:cf:48:3b:2b:ae:5c:69:d4:01:4a:f9:3f:81:
         3c:b0:4b:1d:a6:9a:56:4f:0f:62:7e:4e:05:7d:6e:8b:c7:a1:
         65:fa:97:90:fa:21:31:0f:22:d9:78:14:13:27:d9:f9:9b:a3:
         73:cc:92:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:22:27 2026 by rpki-client