Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/323830343a323866343a383030303a3a2f33332d3333203d3e20323633393839.roa
File:                     323830343a323866343a383030303a3a2f33332d3333203d3e20323633393839.roa (raw, json)
Hash identifier:          f2sJTu9vHDI2YXhetlyr0S+7Ho0UDLVAmZVoeWeBNt8=
Subject key identifier:   F9:80:CD:FC:3F:1C:64:53:87:33:CA:75:8B:FA:F5:49:F9:0E:3F:4E
Certificate issuer:       /CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
Certificate serial:       4F2566F341A0F8EA7ADEF79453A22BCFCD8CA927
Authority key identifier: 6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/323830343a323866343a383030303a3a2f33332d3333203d3e20323633393839.roa
Signing time:             Wed 04 Feb 2026 20:00:26 +0000
ROA not before:           Wed 04 Feb 2026 19:55:26 +0000
ROA not after:            Wed 03 Feb 2027 20:00:26 +0000
asID:                     263989
IP address blocks:        2804:28f4:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl
                          rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:25:66:f3:41:a0:f8:ea:7a:de:f7:94:53:a2:2b:cf:cd:8c:a9:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
        Validity
            Not Before: Feb  4 19:55:26 2026 GMT
            Not After : Feb  3 20:00:26 2027 GMT
        Subject: CN=F980CDFC3F1C64538733CA758BFAF549F90E3F4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1f:9e:d5:18:6c:90:a0:e9:63:f6:86:09:f5:
                    33:84:ce:1b:09:7b:c7:f2:a3:b5:3c:59:70:74:1e:
                    99:e7:da:cb:61:3f:4c:a1:77:dc:56:10:6d:b3:c6:
                    65:4f:c8:8a:e9:e4:24:1e:c2:85:ed:f1:55:ba:1c:
                    88:e6:e1:80:67:82:ea:99:55:11:20:ab:fc:59:26:
                    ab:d0:a3:75:bf:13:6f:89:55:f7:ff:ca:38:7b:4e:
                    1f:5b:af:43:2e:49:f1:e0:7c:66:70:bd:52:d3:29:
                    95:7a:45:96:06:1e:fd:72:a3:e2:a1:eb:53:4d:24:
                    4d:b6:3f:dc:77:80:97:db:88:fc:e3:68:fe:10:c8:
                    5e:86:a6:1f:20:10:27:4d:9d:72:46:ee:f9:7b:fe:
                    63:58:6f:98:c9:a1:fc:b9:5c:0a:7c:f1:78:47:08:
                    98:a8:2f:ac:e0:7d:66:ea:a1:86:b2:3d:ae:10:66:
                    0c:78:66:6a:14:42:dd:29:74:70:9c:c4:b4:aa:dc:
                    6c:27:e2:ec:6e:57:bc:30:b5:a1:6a:de:b7:bf:17:
                    92:cb:94:88:74:0d:1d:ff:30:d6:1d:26:d2:ee:3e:
                    35:b5:e6:68:a2:ea:1d:cc:03:e7:4f:a4:c1:9e:fb:
                    a7:d4:c9:64:70:57:9f:41:7f:c7:2c:26:0e:83:88:
                    dc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:80:CD:FC:3F:1C:64:53:87:33:CA:75:8B:FA:F5:49:F9:0E:3F:4E
            X509v3 Authority Key Identifier:
                keyid:6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/323830343a323866343a383030303a3a2f33332d3333203d3e20323633393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28f4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         eb:6e:51:65:90:68:4c:9f:e5:46:fb:5a:3f:37:a9:9b:0e:42:
         49:9b:4e:45:43:32:84:04:60:50:e4:ae:75:19:e1:ee:6a:fd:
         78:27:e4:46:5f:9e:13:51:a0:e0:17:ec:4c:cd:6d:79:bf:57:
         6a:7e:57:22:ca:bc:df:44:08:38:11:6b:13:ad:79:16:b8:eb:
         6d:cc:10:39:c2:d9:b3:c0:ab:f3:74:98:e6:c4:9b:97:f8:a2:
         44:f5:29:51:42:57:0c:05:b8:59:19:05:cf:36:79:87:57:35:
         2c:8f:d9:83:f2:2d:2c:ba:27:f0:c3:db:d8:39:6f:d7:2c:69:
         4e:4c:72:14:e6:89:d7:5d:a4:0c:65:b0:25:3b:6f:40:ec:b0:
         9f:6f:e6:65:b2:72:00:e8:f4:82:d1:cc:ac:74:f1:f3:fa:36:
         9a:8f:c4:e4:4f:a4:61:9f:ac:5f:1f:2e:3f:f0:3b:62:c0:f9:
         88:fc:09:cd:20:dc:a0:65:50:0a:e8:9a:9b:e7:ad:c8:fe:7d:
         22:44:c7:a1:8a:25:f5:7b:86:5f:35:6a:63:d5:c5:3f:80:9c:
         f4:10:0c:27:f1:89:6a:06:49:ec:4e:cc:1c:2f:26:11:9a:81:
         1b:4a:a6:0d:59:26:d8:e1:88:b9:7b:b7:23:a7:98:0b:1a:be:
         50:e8:3d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:27 2026 by rpki-client