Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/323830343a323866343a3a2f33342d3334203d3e20323633393839.roa
File:                     323830343a323866343a3a2f33342d3334203d3e20323633393839.roa (raw, json)
Hash identifier:          brNKTr/cDi7oaR0W+6nKcaps9sguVcvXkBtPNcljLYE=
Subject key identifier:   D9:C0:94:38:BD:E9:3D:99:B7:85:99:BE:96:B1:1A:D0:AA:CA:38:94
Certificate issuer:       /CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
Certificate serial:       7A67A7E7FD1F8ECABD55171EEBBFC365B3FFE7C3
Authority key identifier: 6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/323830343a323866343a3a2f33342d3334203d3e20323633393839.roa
Signing time:             Wed 04 Feb 2026 20:00:26 +0000
ROA not before:           Wed 04 Feb 2026 19:55:26 +0000
ROA not after:            Wed 03 Feb 2027 20:00:26 +0000
asID:                     263989
IP address blocks:        2804:28f4::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl
                          rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:67:a7:e7:fd:1f:8e:ca:bd:55:17:1e:eb:bf:c3:65:b3:ff:e7:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
        Validity
            Not Before: Feb  4 19:55:26 2026 GMT
            Not After : Feb  3 20:00:26 2027 GMT
        Subject: CN=D9C09438BDE93D99B78599BE96B11AD0AACA3894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:77:b2:07:c9:b4:ed:be:52:01:10:da:29:36:
                    a5:5e:52:c0:e7:65:51:9b:aa:ed:5b:92:7a:9e:ca:
                    08:0a:9a:7c:0f:a0:6e:47:27:81:67:d3:ff:06:bf:
                    b2:75:cd:e5:44:4a:80:df:aa:39:9f:f8:ff:78:10:
                    df:6c:2f:62:71:51:83:ca:7d:12:75:5c:a4:2f:99:
                    b0:4c:61:7a:1a:3d:a1:df:58:a5:5e:04:0e:90:c4:
                    41:6f:03:8a:4b:4e:28:3e:bf:99:51:d9:2e:64:eb:
                    be:78:0f:cf:7f:93:b0:db:20:c1:06:09:86:58:d4:
                    ae:5c:6b:09:c7:ea:9d:4a:9d:49:5e:d5:6d:2a:7f:
                    1e:d9:8d:80:5d:cc:66:9c:f3:90:88:5e:f0:cb:db:
                    00:f9:ac:e0:09:dd:00:53:7b:28:f0:c4:b2:d1:60:
                    ff:f1:b1:76:d9:fd:18:a9:e7:3b:17:8d:2e:cd:15:
                    b7:fe:77:c4:ff:f6:d9:24:37:b8:84:cc:19:9c:e3:
                    07:ab:90:71:cd:ac:3c:d1:d2:6a:32:4f:25:41:b4:
                    93:81:26:77:9d:62:79:c5:32:99:3d:50:e8:8a:f8:
                    15:6f:54:91:a1:fe:67:3d:fb:9d:2e:75:8d:89:07:
                    7a:51:bd:ec:17:70:b6:27:32:f7:c7:b9:eb:e2:93:
                    1d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C0:94:38:BD:E9:3D:99:B7:85:99:BE:96:B1:1A:D0:AA:CA:38:94
            X509v3 Authority Key Identifier:
                keyid:6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/323830343a323866343a3a2f33342d3334203d3e20323633393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28f4::/34

    Signature Algorithm: sha256WithRSAEncryption
         8f:ad:20:31:fc:52:33:ef:35:5f:b0:ac:fa:10:53:fb:a1:fc:
         0b:5f:82:50:28:46:b1:5e:2b:9e:c7:e1:ea:09:f7:71:e9:0e:
         9b:0b:50:1a:73:fd:c9:7b:a1:f1:f7:47:d1:3d:c1:1a:9c:77:
         91:4d:89:e7:d2:03:2b:22:d8:a9:c4:30:5a:e3:1d:6a:1f:a6:
         1c:9c:aa:aa:fc:5e:e4:24:59:42:72:be:b2:3f:cc:6d:04:8a:
         7d:2a:86:83:6e:6f:ab:86:b8:96:d2:c6:cd:8d:5f:da:ac:4e:
         29:67:6e:b7:8c:0e:d5:0f:13:3c:7d:d7:6c:ba:c3:51:62:16:
         88:a4:a1:24:e1:c0:82:09:38:53:3e:50:2a:d1:3a:44:e2:b2:
         a2:07:47:fa:b8:d5:f7:70:8d:32:47:32:f5:1b:d0:da:5e:82:
         d6:5c:e8:a6:3e:ae:e0:7a:65:a3:77:af:90:36:e5:5a:bc:43:
         7f:d8:36:3c:77:99:e1:c6:7b:ae:c5:44:1d:19:7b:95:41:55:
         cb:3a:d8:11:b0:e6:66:ac:dc:01:6e:54:9c:e9:8a:3f:69:04:
         cb:e1:07:65:f7:94:0a:64:7e:6c:ca:9f:5b:ce:c2:bd:29:b5:
         b5:65:cc:59:e0:29:b5:ef:3f:13:6f:a7:90:2d:8e:1a:62:57:
         04:18:40:6b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUemen5/0fjsq9VRce67/DZbP/58MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkUyQ0ZBREUwREI5NjVCODMwRDRDOTJEMjE4MzkyMUFF
MTEzRDJBMjAeFw0yNjAyMDQxOTU1MjZaFw0yNzAyMDMyMDAwMjZaMDMxMTAvBgNV
BAMTKEQ5QzA5NDM4QkRFOTNEOTlCNzg1OTlCRTk2QjExQUQwQUFDQTM4OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgd7IHybTtvlIBENopNqVeUsDn
ZVGbqu1bknqeyggKmnwPoG5HJ4Fn0/8Gv7J1zeVESoDfqjmf+P94EN9sL2JxUYPK
fRJ1XKQvmbBMYXoaPaHfWKVeBA6QxEFvA4pLTig+v5lR2S5k6754D89/k7DbIMEG
CYZY1K5cawnH6p1KnUle1W0qfx7ZjYBdzGac85CIXvDL2wD5rOAJ3QBTeyjwxLLR
YP/xsXbZ/Rip5zsXjS7NFbf+d8T/9tkkN7iEzBmc4werkHHNrDzR0moyTyVBtJOB
JnedYnnFMpk9UOiK+BVvVJGh/mc9+50udY2JB3pRvewXcLYnMvfHuevikx2BAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2cCUOL3pPZm3hZm+lrEa0KrKOJQwHwYDVR0j
BBgwFoAUbiz63g25Zbgw1MktIYOSGuET0qIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzZ6akppOTd4dkdYWUVKMldzQXJ0ZzhOd3RNdTcyclJTRGdrYVJ2QVJS
OG8vMS82RTJDRkFERTBEQjk2NUI4MzBENEM5MkQyMTgzOTIxQUUxMTNEMkEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZFMkNGQURFMERCOTY1Qjgz
MEQ0QzkyRDIxODM5MjFBRTExM0QyQTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM2empKaTk3eHZHWFlFSjJXc0FydGc4Tnd0TXU3MnJSU0Rna2FSdkFSUjhvLzEv
MzIzODMwMzQzYTMyMzg2NjM0M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjMz
MzkzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAQo9AAwDQYJKoZIhvcNAQELBQADggEBAI+tIDH8
UjPvNV+wrPoQU/uh/AtfglAoRrFeK57H4eoJ93HpDpsLUBpz/cl7ofH3R9E9wRqc
d5FNiefSAysi2KnEMFrjHWofphycqqr8XuQkWUJyvrI/zG0Ein0qhoNub6uGuJbS
xs2NX9qsTilnbreMDtUPEzx912y6w1FiFoikoSThwIIJOFM+UCrROkTisqIHR/q4
1fdwjTJHMvUb0NpegtZc6KY+ruB6ZaN3r5A25Vq8Q3/YNjx3meHGe67FRB0Ze5VB
Vcs62BGw5mas3AFuVJzpij9pBMvhB2X3lApkfmzKn1vOwr0ptbVlzFngKbXvPxNv
p5AtjhpiVwQYQGs=
-----END CERTIFICATE-----
Generated at Thu Feb 19 15:57:06 2026 by rpki-client