Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a623030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a623030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          3ZTj+Xmy4kO8+oojafp+cIKRkx/1bEvd/sAswppgBpc=
Subject key identifier:   5F:A7:26:A8:A2:54:E8:7B:59:23:9C:1A:5F:FE:76:77:09:AA:B2:05
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       17A8EF7200D9EF083B790756E31FD343FC84F40D
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a623030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 04 Feb 2026 20:00:05 +0000
ROA not before:           Wed 04 Feb 2026 19:55:05 +0000
ROA not after:            Wed 03 Feb 2027 20:00:05 +0000
asID:                     266248
IP address blocks:        2804:3d04:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a8:ef:72:00:d9:ef:08:3b:79:07:56:e3:1f:d3:43:fc:84:f4:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Feb  4 19:55:05 2026 GMT
            Not After : Feb  3 20:00:05 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:60:e4:c4:1f:a0:eb:e9:62:33:ba:79:e1:84:
                    64:ed:c6:81:2f:45:ec:ce:f7:16:07:56:8b:58:28:
                    ce:68:32:0b:ec:36:b2:76:27:49:90:20:4e:42:7d:
                    bf:2c:be:44:18:c7:4f:f0:27:69:ef:fa:b6:60:47:
                    c0:b3:99:3d:21:1c:41:f9:9f:5e:8d:75:12:2c:f3:
                    b3:b6:b7:a4:af:16:53:52:59:e1:37:d3:ca:9c:70:
                    b3:2e:20:51:ef:6d:5f:36:9f:54:51:32:c5:4a:38:
                    78:62:7d:0a:be:77:b8:47:09:6d:a2:74:54:ad:7c:
                    47:47:b8:af:c6:4d:6c:52:77:d7:03:9c:ee:dc:bf:
                    12:ef:ee:e8:46:3b:cc:d4:ce:b4:50:4b:ce:f2:28:
                    61:d0:f4:1d:e7:c0:0c:3e:d0:3c:4c:8a:ca:00:72:
                    40:68:bc:74:02:15:c7:1f:3e:7f:80:85:6b:69:c3:
                    81:eb:2f:c6:df:f7:3a:c5:c6:3f:7d:4e:aa:3d:b6:
                    fb:bd:37:86:a1:71:11:38:98:08:98:4c:ea:a9:d8:
                    47:d8:c1:7a:98:3f:e8:09:e1:e7:a2:8f:a5:f5:a0:
                    98:5a:d2:fc:03:d8:ee:a0:43:46:94:ee:b9:4d:e2:
                    3f:03:9a:6d:31:cf:df:66:b7:7d:d8:5c:8f:9a:8d:
                    10:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A7:26:A8:A2:54:E8:7B:59:23:9C:1A:5F:FE:76:77:09:AA:B2:05
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a623030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         04:6f:f0:b0:0d:5c:6a:3f:52:6e:94:be:63:3c:77:b3:ba:6a:
         f5:37:04:7a:03:ba:d1:ca:38:94:55:14:3f:ed:29:3c:bc:73:
         0c:4e:68:db:48:30:3a:d1:d5:de:b2:cf:08:46:ac:25:f3:d1:
         3f:05:25:2e:29:30:ad:03:b6:2b:5b:57:02:1a:6c:c8:29:17:
         59:0f:06:12:1c:1b:fa:42:35:77:c8:27:e6:97:c4:2c:61:08:
         2e:30:37:60:a3:49:1b:ac:5b:3c:1a:36:7a:3d:d2:e9:c5:38:
         c0:3d:31:5d:7d:68:dc:08:dd:c2:c0:c7:76:2a:09:e0:a0:26:
         2e:7b:ba:3f:0c:15:0f:5a:ca:75:53:e8:22:1f:bc:ed:23:ed:
         2d:d8:a4:95:70:cf:83:a3:f5:06:4e:72:b5:bc:32:19:3e:d4:
         d6:a6:3b:0a:2b:71:ac:cb:2f:63:d5:8e:b1:88:45:3f:12:3a:
         bc:c9:b1:82:60:15:a1:15:15:61:4f:80:2c:2d:4a:c2:14:97:
         63:e1:7f:0c:3f:f4:21:7e:fe:0f:cb:a3:2a:a7:3a:66:0c:fa:
         5b:8f:a9:ec:9e:11:82:28:35:46:a9:21:26:c3:90:7d:a0:77:
         7c:c5:d8:59:b4:77:03:57:89:63:df:32:1b:84:46:47:2a:dd:
         5c:b3:4f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:39:41 2026 by rpki-client