Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a363030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a363030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          /+6hkMagScDLGcK4ftIN+HDbp2RLjUF4mAILJVPkRbs=
Subject key identifier:   D7:D2:F4:79:6C:74:F4:DC:93:B9:E0:25:4F:34:35:94:97:D4:B0:6E
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       50F8445CD21F8EC2B130F32D96589F8C7C404DE0
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a363030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 04 Feb 2026 20:00:05 +0000
ROA not before:           Wed 04 Feb 2026 19:55:05 +0000
ROA not after:            Wed 03 Feb 2027 20:00:05 +0000
asID:                     266248
IP address blocks:        2804:3d04:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f8:44:5c:d2:1f:8e:c2:b1:30:f3:2d:96:58:9f:8c:7c:40:4d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Feb  4 19:55:05 2026 GMT
            Not After : Feb  3 20:00:05 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d2:91:a3:65:d1:fe:6e:41:39:60:c5:29:f5:
                    6f:f0:0d:79:49:28:a1:e9:2e:56:b7:29:30:c2:19:
                    19:d9:7b:74:f2:9c:e5:84:48:00:f7:71:bd:d4:35:
                    53:14:29:73:e3:e7:9f:b8:20:84:c2:0b:db:ed:af:
                    d3:af:ad:42:9b:ed:8d:43:87:ed:bf:a9:01:ad:dc:
                    e5:d3:79:5d:e7:f4:b0:49:27:1a:86:4c:2d:40:85:
                    97:1a:2f:d5:84:9a:50:b4:f7:4b:e3:f1:e7:77:15:
                    e6:2a:56:c4:43:92:7a:7a:0f:57:9d:74:97:ee:bb:
                    ed:b5:ac:29:dd:1b:48:c0:b5:e4:09:0b:c8:f6:dd:
                    69:4b:91:24:27:7b:64:86:b0:40:df:e3:db:a6:1f:
                    3d:45:c1:b6:27:91:af:fb:d8:67:88:9f:df:ac:ae:
                    4e:78:dd:bf:58:a6:04:38:b3:48:71:4e:36:b6:7b:
                    b5:a7:ac:b0:aa:6b:ab:9b:c4:31:c9:a8:76:64:41:
                    66:1b:28:77:04:f7:9e:fe:c9:1a:1a:67:02:37:b7:
                    48:38:fd:92:72:74:3c:e1:c4:69:02:83:0d:dc:a8:
                    fe:4b:62:18:b5:38:37:f4:33:8a:4b:20:6a:0c:fc:
                    58:a6:19:e0:7e:17:c0:01:55:db:15:0f:32:a0:b9:
                    0e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D2:F4:79:6C:74:F4:DC:93:B9:E0:25:4F:34:35:94:97:D4:B0:6E
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a363030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         10:6b:c2:2d:29:cd:7b:09:13:d5:6c:61:ec:d7:bc:c5:59:d9:
         aa:36:f5:50:a2:48:7c:0c:79:90:46:10:33:5a:5c:f5:f8:b8:
         44:d6:72:58:77:13:3b:07:11:d1:94:74:99:30:c2:38:59:af:
         4b:8f:f6:4a:80:de:4c:ff:a0:d7:9f:1c:d6:19:9f:e9:18:9c:
         6b:ec:df:67:26:5b:03:d5:8a:a4:63:60:72:e1:21:40:b4:eb:
         86:8a:02:d5:e4:29:a9:42:f0:4c:c7:f3:c2:d4:cc:f9:5e:58:
         25:c5:b6:63:d6:b9:49:e7:8c:b6:0d:32:02:c1:27:bf:b4:6a:
         51:7c:49:98:79:07:67:ef:0e:5b:56:09:36:42:c7:de:c0:2f:
         d3:e2:97:94:f2:8e:90:7f:d9:d6:3e:2b:d0:d4:1b:a9:81:4e:
         3e:1c:2a:b2:90:e7:48:3c:ab:2f:f9:01:0e:81:f7:88:eb:60:
         03:6d:56:b3:60:84:18:04:e0:cb:e2:2d:89:f6:cd:de:eb:e6:
         d8:77:82:a2:14:1b:77:98:1d:04:7a:46:24:3b:fe:7b:bc:52:
         91:50:e1:d8:96:52:e3:11:31:cc:6d:c6:9c:81:d4:c4:d1:8b:
         fb:fb:23:62:23:d9:48:50:17:d5:fb:e0:0e:54:7f:01:a2:d3:
         53:99:4b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:22:48 2026 by rpki-client