Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a3a2f33342d3334203d3e20323636313239.roa
File:                     323830343a336231383a3a2f33342d3334203d3e20323636313239.roa (raw, json)
Hash identifier:          9ncbYnpAEDwAnVnpstHXTXKXQuWrDSmsLv4y3lPvNxM=
Subject key identifier:   F4:2B:F2:96:36:8F:8C:1E:2B:AF:63:00:97:41:8E:1C:B5:BE:45:F7
Certificate issuer:       /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial:       2CB5E8A2F3E1C7E6E9F6CE19D7E492671D81528E
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a3a2f33342d3334203d3e20323636313239.roa
Signing time:             Wed 04 Feb 2026 20:00:12 +0000
ROA not before:           Wed 04 Feb 2026 19:55:12 +0000
ROA not after:            Wed 03 Feb 2027 20:00:12 +0000
asID:                     266129
IP address blocks:        2804:3b18::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
                          rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b5:e8:a2:f3:e1:c7:e6:e9:f6:ce:19:d7:e4:92:67:1d:81:52:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
        Validity
            Not Before: Feb  4 19:55:12 2026 GMT
            Not After : Feb  3 20:00:12 2027 GMT
        Subject: CN=F42BF296368F8C1E2BAF630097418E1CB5BE45F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:38:06:f7:c7:13:0e:9b:56:88:59:cb:fa:b3:
                    28:ef:bb:0c:a1:9a:14:4f:69:53:ea:35:31:8a:17:
                    a0:85:12:78:6e:82:95:4b:a5:32:c0:fe:76:9d:3a:
                    cf:0b:76:5a:22:9b:c3:92:c2:53:44:0d:6b:43:de:
                    26:31:82:40:45:13:53:ec:03:2f:51:50:80:4f:c4:
                    0a:ca:f4:e1:f8:53:82:f9:9d:c9:b6:ef:eb:1d:27:
                    83:b4:2e:a4:e9:9d:b5:d4:d0:12:25:64:3d:39:22:
                    81:a4:bc:f1:a2:60:35:02:8d:2b:06:dd:81:6b:01:
                    88:d8:c9:0c:da:53:aa:4f:36:36:2d:8e:94:70:0a:
                    b8:ed:78:5b:15:54:13:2d:1c:2e:25:e6:3a:42:29:
                    7d:9f:28:96:5e:19:1f:1d:0e:21:47:82:ae:a3:6e:
                    97:a0:81:f5:5b:c0:8e:17:81:47:99:a3:67:3a:eb:
                    2d:6d:1c:62:6c:01:ba:70:e6:82:4a:9a:8d:cd:3a:
                    53:11:1d:23:b1:d2:ad:b5:e1:7a:32:05:66:51:83:
                    6a:ab:76:51:5d:7e:40:6d:c7:99:f5:48:f5:a2:ed:
                    bc:0f:3b:d5:fa:ef:32:93:5f:ca:34:bb:7f:8e:3c:
                    f6:7c:af:43:8d:c5:43:b3:5e:3f:fc:9c:fc:af:e3:
                    50:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2B:F2:96:36:8F:8C:1E:2B:AF:63:00:97:41:8E:1C:B5:BE:45:F7
            X509v3 Authority Key Identifier:
                keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a3a2f33342d3334203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b18::/34

    Signature Algorithm: sha256WithRSAEncryption
         62:f1:a1:a0:22:66:fa:23:02:99:56:10:79:76:86:df:32:1d:
         9a:be:37:ad:a8:24:06:4a:a9:05:c2:e0:80:21:f6:5a:27:a9:
         89:65:27:43:2f:4b:af:48:92:3f:92:4b:54:9c:2f:8c:9a:c0:
         be:c5:d7:d5:70:f3:b3:84:8c:61:22:a2:f6:0a:e7:45:30:b4:
         df:72:00:16:11:71:3e:a4:cb:f2:23:58:c6:76:ca:dc:78:65:
         cb:bd:11:53:58:c6:e8:5f:05:bb:50:96:4e:42:bb:75:e8:10:
         e1:a3:49:1d:c6:d5:5d:a0:97:64:1e:a6:61:ef:a9:ed:76:d4:
         2b:78:f5:22:c4:7a:4c:86:90:b7:ed:9a:bf:39:9c:2f:b0:b0:
         53:16:dd:b6:db:08:e1:52:93:da:04:13:5f:b2:e3:2a:1d:da:
         f3:9b:77:a4:f7:67:2e:6b:fa:6c:cb:8b:f9:32:43:b3:06:13:
         77:63:eb:0c:95:ce:38:b4:ef:7d:81:ab:8d:87:c0:a3:8b:f6:
         06:a2:56:2a:04:9a:cd:d2:72:ad:25:63:ac:74:4b:63:f0:82:
         6d:b8:83:3a:5e:56:ca:23:02:58:11:fb:53:f6:f6:6d:05:00:
         33:bd:a9:7d:8a:cc:e5:60:a6:c0:fc:18:16:3e:9d:9d:17:30:
         04:14:fa:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:19 2026 by rpki-client