Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a3a2f33342d3334203d3e20323635393335.roa
File:                     323830343a343031633a3a2f33342d3334203d3e20323635393335.roa (raw, json)
Hash identifier:          U/ovWadhGltgw0D0M1sX0nDnEp7KUWwkhB9kAvT0gHA=
Subject key identifier:   43:F1:99:0B:47:D7:BD:F7:49:10:41:2F:22:DA:F4:53:D2:F5:70:E2
Certificate issuer:       /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Certificate serial:       0D3A1D3AB2A39610BF1F6DCDA8CEBA79C20E5FAE
Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a3a2f33342d3334203d3e20323635393335.roa
Signing time:             Thu 05 Feb 2026 08:00:12 +0000
ROA not before:           Thu 05 Feb 2026 07:55:12 +0000
ROA not after:            Thu 04 Feb 2027 08:00:12 +0000
asID:                     265935
IP address blocks:        2804:401c::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl
                          rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3a:1d:3a:b2:a3:96:10:bf:1f:6d:cd:a8:ce:ba:79:c2:0e:5f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
        Validity
            Not Before: Feb  5 07:55:12 2026 GMT
            Not After : Feb  4 08:00:12 2027 GMT
        Subject: CN=43F1990B47D7BDF74910412F22DAF453D2F570E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a5:e1:89:d4:95:d9:65:6f:3e:6f:2c:d8:a3:
                    a4:58:de:d4:99:03:b6:d7:ff:5a:bb:42:f9:a1:52:
                    7d:c6:d7:4f:93:25:a2:c9:b7:54:c6:5d:a0:49:29:
                    7f:81:d0:ab:27:8c:55:84:a4:94:b7:c0:20:7a:aa:
                    73:73:c0:76:60:12:ff:ff:24:af:9c:5d:46:da:97:
                    61:80:9d:c1:d5:13:b6:bf:57:73:6d:44:53:3f:68:
                    b9:4d:91:b6:4f:c0:c7:5c:6c:ad:9d:9d:a9:bf:9e:
                    37:2e:0f:5a:98:e3:c3:81:95:e3:d7:bf:4e:8b:9d:
                    f7:d1:d7:aa:9f:f5:46:d1:e6:b8:b5:b8:57:6d:57:
                    7c:f2:d9:7c:75:66:b8:e8:67:87:c9:6d:e2:7b:e9:
                    cf:ef:67:45:71:ed:27:93:69:b7:25:97:de:18:6d:
                    65:32:e3:d7:b1:69:85:f3:87:d6:c2:2f:a7:9c:80:
                    7a:c5:05:37:53:1c:7f:16:61:48:37:c2:1a:60:32:
                    a7:de:c5:b5:0d:7d:b3:ef:32:47:04:4d:6d:0a:6f:
                    95:6d:6d:10:a9:4c:fc:e7:bf:ee:98:df:14:0d:9a:
                    fb:c8:9f:17:86:09:f1:2f:5e:01:50:80:39:2e:f3:
                    8c:62:a7:c3:7f:58:d5:85:82:66:5c:85:bc:99:4b:
                    88:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F1:99:0B:47:D7:BD:F7:49:10:41:2F:22:DA:F4:53:D2:F5:70:E2
            X509v3 Authority Key Identifier:
                keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a3a2f33342d3334203d3e20323635393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:401c::/34

    Signature Algorithm: sha256WithRSAEncryption
         53:27:41:d9:fa:a9:ea:b9:4f:2d:5b:c5:d8:2f:de:f5:07:bf:
         d5:2f:3d:86:56:c1:70:36:ff:dd:73:09:05:40:ff:a3:b8:92:
         51:49:a0:c4:c0:ec:9d:1d:e6:25:c5:ff:0e:a4:ea:e8:81:94:
         c3:f7:9b:41:1f:9d:85:70:77:85:c9:99:96:bb:1f:84:e5:24:
         86:b4:1a:89:f6:af:51:79:d3:2d:cb:0f:09:9b:74:86:5e:48:
         f2:31:7a:eb:5d:0c:42:88:d2:d1:50:d9:24:21:e4:d9:36:2b:
         45:a9:2a:b4:bc:e0:9f:36:87:17:f7:94:51:f8:91:00:a4:c9:
         5d:80:ee:28:0e:d3:83:92:73:90:2b:b9:c5:d1:94:5a:ed:13:
         00:6c:89:0b:e7:35:82:52:b5:56:eb:e3:9a:f0:86:4d:3f:3b:
         1c:36:0c:8a:f7:4f:5a:8c:98:15:df:12:1d:13:25:bd:47:71:
         0d:be:43:f6:eb:e7:95:07:74:fb:58:80:92:30:8a:2d:76:80:
         bf:b3:4d:86:73:a0:5b:69:a2:7c:46:01:12:29:97:07:36:5b:
         ac:f9:1b:b4:aa:07:79:32:33:88:20:dc:11:26:be:e6:2e:cd:
         7b:0b:87:0b:ad:66:ba:bc:f7:6b:ad:4f:db:f3:00:2b:ea:37:
         76:16:9b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:23:14 2026 by rpki-client