Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a383030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a383030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          8HGl9DKC4csqcsXlOY/sMvnFA39oz8HuqeUy+0bZ9Gc=
Subject key identifier:   3E:76:23:B7:AC:66:96:67:28:A2:2A:2D:39:D5:1D:AA:8B:99:EE:DF
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       4139FE61E303CD3F2CA2404BACDA85BA17DA6F37
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a383030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 04 Feb 2026 20:00:05 +0000
ROA not before:           Wed 04 Feb 2026 19:55:05 +0000
ROA not after:            Wed 03 Feb 2027 20:00:05 +0000
asID:                     266248
IP address blocks:        2804:3d04:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:39:fe:61:e3:03:cd:3f:2c:a2:40:4b:ac:da:85:ba:17:da:6f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Feb  4 19:55:05 2026 GMT
            Not After : Feb  3 20:00:05 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:25:d8:50:6d:5b:9a:ec:0d:e9:32:bf:83:f4:
                    f9:35:7d:ac:8e:b1:ac:6d:a8:b1:93:2c:08:1a:31:
                    82:e7:21:4a:dc:77:ec:de:19:28:4d:19:f5:bf:6e:
                    98:b8:42:be:f2:aa:9f:1b:e1:3e:ee:93:8e:4b:ef:
                    2f:95:5b:c6:1e:74:c4:b7:d7:f9:49:b4:07:a7:3f:
                    6e:d9:86:55:50:00:67:d9:9b:14:e2:f6:2d:82:2f:
                    88:a1:95:24:cd:a2:e1:bd:64:5c:a8:c2:12:4b:55:
                    70:1f:f9:e8:3e:19:25:26:3a:3c:61:86:9d:12:2c:
                    a1:ce:3f:b2:a3:5e:b6:5d:3f:84:85:a6:0a:0c:e2:
                    e3:db:44:82:c5:e2:ba:17:9e:ee:1f:bc:6c:6f:a0:
                    a4:16:b2:46:a0:03:a1:d8:83:e6:cc:79:4d:4b:d3:
                    36:ed:b0:00:d0:d2:51:ee:20:2a:9d:35:c1:76:0c:
                    52:8c:c7:83:5b:79:df:5c:38:62:3d:96:96:cd:bb:
                    f5:77:a9:45:21:c4:fb:6b:f9:34:bb:ea:3e:73:2f:
                    88:25:45:39:a7:a3:7d:97:11:b5:7c:89:52:32:41:
                    90:54:11:0c:fc:f8:ed:29:e7:3c:c1:fc:a1:8c:38:
                    10:d7:8c:28:ee:06:8f:a6:18:3e:d5:a7:b3:ba:b8:
                    f0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:76:23:B7:AC:66:96:67:28:A2:2A:2D:39:D5:1D:AA:8B:99:EE:DF
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a383030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         86:3f:16:12:a9:48:c6:bd:ae:ed:6a:bf:40:c8:97:de:55:5d:
         2e:53:c5:c9:32:e7:2a:c3:df:f3:6d:7a:e0:22:dd:69:3f:91:
         b1:30:e8:57:ea:7d:23:52:18:98:ec:21:02:e4:8c:71:02:10:
         17:dc:80:11:5a:1f:0d:59:15:6f:7d:fd:7d:b0:b2:40:d4:4a:
         b6:2c:d6:32:21:4e:7c:39:da:c8:48:48:00:53:09:53:ff:1d:
         e2:f9:bf:1d:d4:d5:01:e6:43:22:ae:63:a1:d2:be:25:b5:3e:
         49:9b:8f:c5:b9:9b:ae:ec:a2:24:6b:55:6c:f7:b5:1e:ea:14:
         72:4c:58:24:94:87:af:ba:25:8e:23:a3:04:7f:50:bb:ee:e0:
         31:2e:b0:1f:dc:2d:cb:ae:cc:02:4e:2c:c0:5c:10:b5:b0:2f:
         20:ce:41:4a:8b:10:ac:16:4c:27:a8:0e:c3:ae:bc:0e:79:05:
         ac:93:89:22:f1:38:1c:5a:f5:75:45:f3:06:ce:98:4d:ec:5a:
         76:6b:69:08:c9:41:a3:8c:a6:b9:f6:bb:79:65:b9:aa:11:cf:
         2b:f0:b3:7f:87:ad:15:e0:ea:31:cc:68:fc:5b:1b:4f:27:1b:
         fc:12:69:25:a4:55:ae:e6:9d:b1:c8:c9:0b:68:41:af:c9:c9:
         95:0a:02:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 13:07:37 2026 by rpki-client