Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/323830343a363335383a3a2f33342d3334203d3e20323639333535.roa
File:                     323830343a363335383a3a2f33342d3334203d3e20323639333535.roa (raw, json)
Hash identifier:          TJ0VCqj+Jv+0mP+ucLU/WQfhMxYTfkELgxe18g5MbR0=
Subject key identifier:   98:D8:4E:1E:DF:DC:9E:8B:D2:8D:42:72:41:55:4A:03:21:C8:A7:75
Certificate issuer:       /CN=446D4F390AB834CB395232A0680D14394BE75FCC
Certificate serial:       3124D1727D9A5FC64369D5EC6A390988D000CD14
Authority key identifier: 44:6D:4F:39:0A:B8:34:CB:39:52:32:A0:68:0D:14:39:4B:E7:5F:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/323830343a363335383a3a2f33342d3334203d3e20323639333535.roa
Signing time:             Fri 06 Feb 2026 01:54:25 +0000
ROA not before:           Fri 06 Feb 2026 01:49:25 +0000
ROA not after:            Fri 05 Feb 2027 01:54:25 +0000
asID:                     269355
IP address blocks:        2804:6358::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.crl
                          rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:21:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:24:d1:72:7d:9a:5f:c6:43:69:d5:ec:6a:39:09:88:d0:00:cd:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=446D4F390AB834CB395232A0680D14394BE75FCC
        Validity
            Not Before: Feb  6 01:49:25 2026 GMT
            Not After : Feb  5 01:54:25 2027 GMT
        Subject: CN=98D84E1EDFDC9E8BD28D427241554A0321C8A775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:51:3c:fb:35:6f:1f:51:7e:28:8b:53:c0:59:
                    34:6a:e7:26:bf:b2:41:c8:7a:83:30:df:bc:cd:42:
                    11:4a:2b:bd:a4:0b:73:09:9e:34:b9:51:d2:f0:5f:
                    68:4b:32:31:1d:03:dc:7a:de:cf:62:24:6a:94:91:
                    ea:5c:f2:c4:98:5c:25:bd:28:23:25:13:4a:28:38:
                    d6:ee:3b:b8:3a:bd:c1:72:95:17:ba:44:2d:15:fb:
                    5f:af:da:f4:59:b6:4f:9a:fe:1f:c9:00:68:81:ab:
                    ad:6a:7a:f3:85:9a:47:d4:39:92:b7:54:7b:26:b6:
                    bf:8a:e2:b1:89:0d:51:c2:43:86:3c:18:e3:48:a8:
                    b0:af:14:ed:b1:48:ae:2a:47:58:3a:7e:63:c7:38:
                    27:cd:eb:70:d2:ca:88:16:65:0c:fa:70:3e:0e:11:
                    39:5c:b5:30:e7:62:cc:08:ba:1c:e7:4f:55:8f:a4:
                    8d:89:63:76:0f:87:d2:8c:d4:ec:70:aa:47:5e:6d:
                    7d:05:6b:61:a0:bb:52:33:0f:7e:9e:4b:1c:04:37:
                    f2:5c:3a:37:54:8f:86:eb:08:10:f2:f6:38:59:99:
                    a0:8c:25:f1:35:4d:74:c2:e2:d3:d1:66:60:74:0b:
                    f5:30:b3:bd:2c:76:6b:8a:d0:90:ba:3d:08:13:2b:
                    e4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D8:4E:1E:DF:DC:9E:8B:D2:8D:42:72:41:55:4A:03:21:C8:A7:75
            X509v3 Authority Key Identifier:
                keyid:44:6D:4F:39:0A:B8:34:CB:39:52:32:A0:68:0D:14:39:4B:E7:5F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/323830343a363335383a3a2f33342d3334203d3e20323639333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6358::/34

    Signature Algorithm: sha256WithRSAEncryption
         a2:9e:ba:a8:07:98:49:84:0d:65:26:77:40:9e:f2:95:43:1b:
         dd:35:4e:0a:90:a5:cf:40:c6:2d:73:c6:23:a4:51:de:b7:df:
         47:ab:44:46:cc:7a:6c:c6:0f:1b:3e:1f:05:6a:eb:24:eb:d2:
         12:db:a5:68:4e:41:b9:46:ae:c2:16:6e:e7:1a:c8:46:91:6f:
         41:05:a5:84:69:95:9b:75:29:62:c3:f9:ca:f4:ea:97:87:b2:
         5e:ab:6c:0a:ba:a7:7d:66:bb:94:1a:cf:85:27:17:e9:d7:a9:
         70:d6:db:f8:17:03:c9:0d:8a:f0:dc:5a:2b:24:ce:31:c8:f0:
         bf:9a:31:51:fd:2e:c5:55:f3:6c:08:17:0e:a5:e2:fb:a1:c9:
         40:89:fa:51:87:04:58:1b:90:ac:d8:cb:34:ad:b0:4b:1f:75:
         bd:c5:1f:37:8c:61:3f:cc:6a:46:2a:60:7c:72:0b:02:2d:83:
         95:6b:bf:56:bf:90:1d:86:9d:5a:1f:b5:11:9a:ea:f9:83:17:
         ea:bc:fa:ae:8e:e9:cf:40:c8:54:da:84:e7:20:b2:12:06:0b:
         d0:61:27:dd:9f:d2:2a:79:49:0b:92:1a:34:a1:d5:be:87:8f:
         0b:b3:2f:e1:37:d8:fa:43:48:94:20:e0:77:b0:ee:8e:bb:82:
         36:d2:7e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:23:13 2026 by rpki-client