Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a393030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a393030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          k37Wg1KGRn8QUG7TW7pZsJ8llJJ8bmeqIcJoPT2ehec=
Subject key identifier:   32:7B:68:24:BF:EA:A1:EC:4A:ED:96:1D:B1:79:12:9B:59:D4:D8:EC
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       7AF1BB0DB34B41A81724A0FBBD011A8B80D4B1A1
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a393030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     266248
IP address blocks:        2804:3d04:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f1:bb:0d:b3:4b:41:a8:17:24:a0:fb:bd:01:1a:8b:80:d4:b1:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e4:1e:5c:e4:18:63:10:ce:b2:67:9b:eb:cd:
                    6f:7a:b7:42:c5:9d:a5:51:2e:18:10:06:f1:d1:7c:
                    6e:85:81:5b:73:00:dc:c3:9e:29:46:b1:07:1f:ed:
                    70:ad:cf:fa:33:ff:e3:3c:4d:05:05:87:f2:02:8e:
                    01:5a:40:c3:ed:32:5d:25:57:05:b0:16:f8:50:e5:
                    ac:f1:55:f6:d0:31:6d:28:b7:98:53:a9:6b:94:d3:
                    b9:b8:0e:b1:38:25:ba:e3:1d:13:25:38:f4:d7:15:
                    ad:df:63:62:e5:c9:e4:4e:f2:d1:46:47:0f:6e:d6:
                    84:c3:55:99:46:6b:8a:d2:c3:4e:6f:d4:cd:ec:0b:
                    c5:9b:ae:f3:39:33:d2:c2:05:18:d0:22:68:02:30:
                    4a:75:0e:9c:5b:74:d0:11:6e:ba:4e:0c:2d:86:c2:
                    38:4a:bd:12:1c:aa:20:4c:f8:a4:a4:1b:fa:fc:e5:
                    80:6c:66:29:01:12:5e:e0:6e:8c:f2:e4:a6:ec:6d:
                    26:2a:71:6c:0f:e7:f6:fc:b2:8b:cb:cb:d3:72:fb:
                    2a:72:b6:b9:3c:fb:1f:15:3e:af:17:f6:49:a6:16:
                    a1:47:46:c0:9a:97:c4:ea:43:d4:f6:2d:83:1f:db:
                    39:d4:3f:da:5c:e4:4c:76:3a:a7:10:7a:64:4b:2f:
                    1b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7B:68:24:BF:EA:A1:EC:4A:ED:96:1D:B1:79:12:9B:59:D4:D8:EC
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a393030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         36:ba:19:66:5d:65:0f:7f:d0:5d:bb:35:a2:28:19:7a:8e:77:
         8a:1f:47:8d:af:28:dc:0b:84:d3:d1:20:7f:53:08:73:b8:8f:
         e9:fa:fc:b9:5d:57:da:5f:5a:20:c9:16:a2:f5:ea:f8:07:e1:
         d8:48:a6:88:6a:18:26:b0:4b:f6:c8:10:74:6f:be:20:93:dd:
         ea:99:7b:42:b7:23:57:f5:60:b8:49:f4:9a:a8:c4:26:eb:f9:
         84:36:48:85:18:27:e1:cf:06:82:4d:dd:84:ea:34:c8:80:4f:
         d8:a7:93:39:05:d0:c4:a6:a1:17:68:19:fc:49:0e:ef:f5:1b:
         cc:fb:31:c2:80:69:ed:47:b0:d0:7b:ad:9c:6e:74:f5:e6:71:
         6b:af:bc:47:a9:97:66:f9:52:6b:57:8b:50:75:0c:32:fd:1e:
         2d:95:14:f8:be:81:f3:8f:58:0d:be:91:4d:18:f7:71:e0:f7:
         02:65:d5:75:e6:33:b3:cc:17:94:aa:86:48:a7:d3:4a:fb:70:
         5c:b5:62:ac:9f:b1:d8:66:b6:31:86:d7:96:96:1c:49:66:bd:
         03:54:57:fe:58:88:2a:29:de:1b:a3:82:22:35:43:4c:06:33:
         59:aa:f5:24:ab:8a:e7:6e:f2:76:98:3e:1e:bb:bd:72:5e:df:
         b8:b6:0b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 13:07:35 2026 by rpki-client