Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a3a2f33342d3334203d3e20323634353039.roa
File:                     323830343a323062343a3a2f33342d3334203d3e20323634353039.roa (raw, json)
Hash identifier:          +jjqP5gAmJA1PSZE5F72aGmm7viIOIcd0THpcF+DNww=
Subject key identifier:   C2:FF:2F:DD:A6:11:F4:05:C9:51:73:44:AB:4A:16:42:5C:EB:9E:91
Certificate issuer:       /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial:       505352DB787E09C545B00EB5E5AE8DCE8EC21FAA
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a3a2f33342d3334203d3e20323634353039.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     264509
IP address blocks:        2804:20b4::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl
                          rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:53:52:db:78:7e:09:c5:45:b0:0e:b5:e5:ae:8d:ce:8e:c2:1f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:eb:e6:35:a6:c6:8a:1a:ac:ca:0d:f8:d0:37:
                    17:f4:ca:a9:76:f9:23:3d:1e:19:54:97:86:43:88:
                    82:e4:d6:4f:f2:29:e1:66:00:4c:84:56:24:52:25:
                    ee:bc:bb:dd:fd:95:f0:cd:77:4b:92:e5:f0:86:d4:
                    25:d2:e5:f8:b7:87:05:96:11:c4:26:39:ae:c9:23:
                    fa:aa:ac:f8:f3:cc:6d:95:3e:6a:a2:eb:2c:1c:6e:
                    86:0f:82:ee:27:60:5a:47:15:c0:cc:4e:39:48:d4:
                    17:df:02:74:d3:94:b9:51:a0:ab:4f:57:f4:07:8a:
                    bd:58:d5:a7:0f:62:1b:5d:90:c2:0d:59:fa:fc:69:
                    b4:22:6b:88:9f:f9:d4:02:46:83:c2:0b:df:30:2f:
                    d7:62:04:47:f0:f4:97:10:46:6b:8d:99:9c:cb:5c:
                    0d:e9:54:ca:4f:4a:15:e8:ab:f7:fe:7d:99:5c:2e:
                    4a:79:68:41:f9:e1:38:8d:33:8d:2f:81:f7:32:b5:
                    17:fe:d7:c7:f9:c3:43:2c:fa:a0:48:a2:00:b9:5b:
                    4a:ba:9c:93:f7:15:66:c9:d7:11:e1:c9:01:27:4d:
                    0c:bf:7b:5f:a8:eb:ee:96:57:d1:9e:b0:01:6c:8b:
                    c0:d0:4f:d2:26:e8:c5:bb:9d:b8:a3:1e:51:d6:45:
                    70:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FF:2F:DD:A6:11:F4:05:C9:51:73:44:AB:4A:16:42:5C:EB:9E:91
            X509v3 Authority Key Identifier:
                keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a3a2f33342d3334203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b4::/34

    Signature Algorithm: sha256WithRSAEncryption
         a6:2d:8d:d0:1d:18:5c:24:4e:16:43:8f:3f:05:07:24:59:67:
         2f:bc:4b:b7:4f:3e:39:31:23:3d:ca:52:2c:c9:30:2f:06:a0:
         28:a0:03:0b:80:53:7b:ae:b1:08:cc:b2:2f:32:09:97:4b:d0:
         22:08:ac:a4:b4:cd:ce:7e:16:b9:a8:5d:72:2e:a5:e4:64:4f:
         86:da:94:40:db:46:e3:0b:ff:ef:cb:07:bc:21:7b:c0:52:67:
         5a:b1:b8:81:69:8a:b2:66:38:9f:68:25:ae:df:46:d2:61:8c:
         72:f1:67:25:d0:0f:fc:07:aa:f2:26:35:fd:72:48:9f:fb:72:
         19:5c:f7:43:b2:9f:bc:0b:1c:c6:49:65:95:94:32:f2:27:f0:
         cf:61:82:58:83:fe:47:dd:5d:44:e2:72:36:02:a4:04:c6:6d:
         1f:5d:85:46:88:a8:4a:4e:2e:ac:4e:63:8b:00:db:ee:c8:f5:
         7b:47:54:e0:73:f5:b6:b0:8a:d9:c3:26:4d:a2:e6:86:d4:5b:
         c8:c8:d3:0a:5e:c6:e3:1e:08:d6:2f:1e:84:d1:93:39:ef:bd:
         b6:18:9b:2a:41:ab:2a:67:d7:3b:08:d7:00:86:10:1c:fe:62:
         17:21:ec:90:e0:55:ba:0d:9f:eb:5f:7f:f6:f7:a5:b4:98:cb:
         ec:1c:2b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:04:04 2026 by rpki-client