Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a643030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a643030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          k/bNV+pmUuKah0YbV5Gs7neSm4lHz9MN1Ofu6zoiN9Y=
Subject key identifier:   EA:40:3A:6E:78:83:D9:3C:75:3A:6A:43:2C:65:AE:43:30:6C:7D:8B
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       347C26B9F9F05934A7FB35230F054877EEE3C97B
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a643030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 04 Feb 2026 20:00:04 +0000
ROA not before:           Wed 04 Feb 2026 19:55:04 +0000
ROA not after:            Wed 03 Feb 2027 20:00:04 +0000
asID:                     266248
IP address blocks:        2804:3d04:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:7c:26:b9:f9:f0:59:34:a7:fb:35:23:0f:05:48:77:ee:e3:c9:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Feb  4 19:55:04 2026 GMT
            Not After : Feb  3 20:00:04 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b0:e3:01:43:b0:83:f1:72:97:d1:0b:29:84:
                    3f:e1:34:45:a0:ac:75:59:5e:fd:1f:dd:22:f7:34:
                    5d:2e:1a:f1:b0:04:27:96:75:c4:ab:de:2e:e0:db:
                    be:fd:69:51:d3:c7:2a:01:40:6e:ce:ef:b7:90:9e:
                    b3:98:ab:90:c6:15:33:8b:8d:ab:59:3c:96:94:6f:
                    d4:6e:e5:cd:91:fd:1f:e8:f4:f0:ee:b6:3c:7b:83:
                    7a:4d:ee:2c:72:90:65:d8:a7:61:c2:b2:77:4e:69:
                    c1:5b:d9:84:7e:3e:a4:90:b9:20:fa:f0:a0:fe:b2:
                    0b:f4:4c:5a:c4:c4:86:8d:a0:2d:1f:93:3d:43:1b:
                    82:a0:5f:1d:21:36:95:e7:df:9a:54:92:9a:81:51:
                    18:0c:46:35:65:90:91:0b:b3:54:a3:e7:bd:cb:fe:
                    a0:ec:3f:d5:51:08:c9:27:24:7e:e7:59:ee:db:82:
                    91:ad:66:29:13:8b:e7:20:1d:c6:2a:68:14:e0:ea:
                    fe:cf:45:cb:e1:dc:29:4d:ec:f2:37:94:69:24:17:
                    6d:e3:b0:57:0f:8f:b5:99:09:a1:0f:e3:76:ec:26:
                    65:39:7a:8c:e4:0f:fd:39:d9:f8:c0:01:f3:b2:d5:
                    bd:b8:35:26:5b:e2:94:6a:f1:11:82:1f:d3:ba:89:
                    56:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:40:3A:6E:78:83:D9:3C:75:3A:6A:43:2C:65:AE:43:30:6C:7D:8B
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a643030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ab:c7:8e:58:c6:df:08:47:ea:d2:18:ed:38:f7:fd:14:c4:e9:
         cd:dc:9b:b9:fb:f6:09:59:9d:d6:09:83:2d:ee:7e:0a:8b:cb:
         24:71:9a:c2:64:ef:2b:50:db:d8:e9:e6:b9:76:1d:d7:63:ae:
         7d:b9:49:b4:82:f5:b3:d2:10:44:33:8a:c3:22:31:66:4e:ad:
         fe:eb:17:de:a8:6d:46:b5:a2:4d:48:9d:0a:9b:e5:37:c2:68:
         8f:a9:7d:32:b7:3e:0c:4e:d4:b8:e0:ff:f8:14:aa:1d:0c:0e:
         23:8e:d0:55:c9:24:30:b0:23:ad:5d:1c:f8:cb:0d:17:08:4e:
         86:b1:ba:4e:db:a8:4f:f5:e3:60:9b:b1:bf:a4:86:66:89:3a:
         76:bf:5f:04:61:1c:f2:b3:9f:5c:cc:a2:85:b8:35:23:46:8e:
         26:2c:af:de:97:d8:ce:e2:05:58:28:ef:19:b4:d7:51:d3:6d:
         e0:e3:26:40:df:31:b9:f5:43:3c:6c:3d:33:1f:b2:47:1c:a9:
         b5:32:3b:1f:e9:d4:50:e0:c5:f4:f6:df:8e:87:d1:61:85:90:
         a9:e4:e2:89:f5:81:53:85:de:09:e1:2b:98:cf:fb:53:ea:63:
         16:bc:3e:97:c4:9d:5a:8d:d6:07:5e:90:67:46:f9:d0:95:f5:
         ab:b4:8b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:22:34 2026 by rpki-client