Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/323830343a363439303a3a2f33322d3438203d3e20323639343335.roa
File:                     323830343a363439303a3a2f33322d3438203d3e20323639343335.roa (raw, json)
Hash identifier:          7bKq2ImSu9HDgOmEe0l4CF6dj5HQWrW83cLCgx9PXcA=
Subject key identifier:   8B:40:13:26:A4:EC:A5:04:E3:EF:A0:6A:8C:4D:1B:E9:D8:40:27:6E
Certificate issuer:       /CN=FF2D630E978417F06D6A73D00219A91B07536236
Certificate serial:       1B94F14693D633C617CAE53425D2FD20642DB21D
Authority key identifier: FF:2D:63:0E:97:84:17:F0:6D:6A:73:D0:02:19:A9:1B:07:53:62:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF2D630E978417F06D6A73D00219A91B07536236.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/323830343a363439303a3a2f33322d3438203d3e20323639343335.roa
Signing time:             Wed 04 Feb 2026 19:00:02 +0000
ROA not before:           Wed 04 Feb 2026 18:55:02 +0000
ROA not after:            Wed 03 Feb 2027 19:00:02 +0000
asID:                     269435
IP address blocks:        2804:6490::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.crl
                          rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF2D630E978417F06D6A73D00219A91B07536236.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:94:f1:46:93:d6:33:c6:17:ca:e5:34:25:d2:fd:20:64:2d:b2:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF2D630E978417F06D6A73D00219A91B07536236
        Validity
            Not Before: Feb  4 18:55:02 2026 GMT
            Not After : Feb  3 19:00:02 2027 GMT
        Subject: CN=8B401326A4ECA504E3EFA06A8C4D1BE9D840276E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e3:7b:fa:61:8c:dc:35:1e:e2:99:56:e7:40:
                    95:af:2b:60:8f:af:02:29:95:6d:3a:e8:07:0d:e7:
                    55:f8:08:0a:de:35:03:f2:29:52:de:b5:dc:80:4c:
                    68:a8:4b:f3:3c:7b:aa:8c:c6:7b:fa:23:f1:58:6e:
                    84:be:0a:5d:93:58:a7:f0:af:89:94:04:e5:e2:95:
                    74:d0:08:f1:37:43:9b:6c:48:d0:fb:b7:0a:34:db:
                    7d:c3:63:e9:be:17:38:f6:91:d4:85:e7:76:98:b2:
                    26:35:f5:ba:ef:2f:5a:5c:74:b6:4f:9a:a4:30:ab:
                    37:fc:c9:08:56:fb:79:1b:9b:bb:19:f5:00:ac:cd:
                    a1:cf:18:a7:e0:44:fa:70:52:a3:5f:3c:31:ee:fa:
                    f3:ca:b8:5d:9d:94:93:bd:d9:f0:88:4a:5f:5a:a6:
                    66:dc:72:33:6e:d2:d0:9a:5a:db:6d:0c:80:6b:65:
                    88:a9:7b:a8:d7:48:5b:1e:0f:76:e1:bb:25:49:20:
                    17:84:2b:cf:db:9b:9d:a9:4b:44:a4:b3:1c:1c:08:
                    2e:7c:77:ea:21:7b:55:fc:6b:60:da:ac:01:e9:99:
                    e6:13:21:df:63:d9:d3:11:f2:6e:2f:29:2a:d5:ea:
                    5c:c8:7c:50:dc:5d:f9:6f:86:be:67:ea:3f:e2:aa:
                    5e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:40:13:26:A4:EC:A5:04:E3:EF:A0:6A:8C:4D:1B:E9:D8:40:27:6E
            X509v3 Authority Key Identifier:
                keyid:FF:2D:63:0E:97:84:17:F0:6D:6A:73:D0:02:19:A9:1B:07:53:62:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF2D630E978417F06D6A73D00219A91B07536236.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/323830343a363439303a3a2f33322d3438203d3e20323639343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6490::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:c0:e4:1e:b9:6d:ec:36:75:b4:13:de:80:40:0e:03:f3:d0:
         fe:05:30:89:17:4b:d3:5e:55:cd:9c:fa:da:26:5c:78:2e:8e:
         4b:7d:8e:45:42:9a:89:30:d2:c3:03:d3:0f:5f:81:b1:24:8d:
         39:7d:4b:47:3d:ca:a3:cd:91:eb:1c:79:58:75:a7:98:8a:dc:
         c6:39:ad:d1:3d:4f:62:85:e8:00:94:e2:81:1c:f4:53:e1:67:
         07:a7:12:32:3e:23:71:b9:70:97:24:61:28:1d:0d:8f:a8:47:
         c0:9c:02:48:a6:9f:de:2b:c2:22:a0:7c:ea:1c:42:ce:68:54:
         e3:f4:67:69:49:cb:95:dd:a4:58:59:e7:31:99:fb:6a:31:cf:
         3a:e8:8f:98:1b:ed:9c:90:4f:8b:ba:3f:2b:7d:56:e6:45:c5:
         31:39:dc:ba:13:65:5e:72:8b:51:e2:93:da:f2:19:20:ed:f9:
         98:0d:ce:67:d2:54:5b:76:e6:76:88:40:82:c9:a5:71:53:0b:
         2a:b8:66:01:17:03:92:91:75:53:b9:2a:b0:70:11:91:3a:d4:
         ae:39:f8:c6:cc:98:e4:da:b8:5d:de:7e:7b:4c:dc:04:de:65:
         e7:bc:2d:b6:6d:42:0e:5e:59:c0:7d:c5:13:9a:ce:4f:21:1d:
         82:27:47:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:29:14 2026 by rpki-client