Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/323830343a366232633a3a2f33322d3335203d3e20323730333833.roa
File:                     323830343a366232633a3a2f33322d3335203d3e20323730333833.roa (raw, json)
Hash identifier:          +MEKwdws3x3s9D2KqYylPSLBoKLUSSShhawfHhm3wbM=
Subject key identifier:   CF:EA:82:AF:45:21:64:59:3A:CB:2C:30:F4:14:1E:36:86:7C:FE:6F
Certificate issuer:       /CN=062347D8F4F770415633E22D794F8D58F390BA86
Certificate serial:       4D7BE962F33EF9D2CF15A4BE7262084C2CC1813C
Authority key identifier: 06:23:47:D8:F4:F7:70:41:56:33:E2:2D:79:4F:8D:58:F3:90:BA:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/062347D8F4F770415633E22D794F8D58F390BA86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/323830343a366232633a3a2f33322d3335203d3e20323730333833.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     270383
IP address blocks:        2804:6b2c::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.crl
                          rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/062347D8F4F770415633E22D794F8D58F390BA86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7b:e9:62:f3:3e:f9:d2:cf:15:a4:be:72:62:08:4c:2c:c1:81:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=062347D8F4F770415633E22D794F8D58F390BA86
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:39:5d:01:3c:f4:77:17:26:ef:8c:ab:4b:47:
                    21:3c:86:9b:a1:cf:a3:70:c3:63:85:72:83:23:db:
                    e4:92:ef:63:75:5e:41:54:bd:40:bc:5d:68:93:11:
                    3a:c8:87:ad:f5:dc:23:09:10:a4:bc:08:1f:69:da:
                    5b:27:82:94:b9:da:08:91:02:f6:31:9e:bf:87:df:
                    48:2f:7a:f4:62:6f:c7:d6:ed:a2:de:32:3d:7e:95:
                    da:2d:69:2e:bc:9e:ff:b3:ab:42:9f:5f:78:3d:7f:
                    a9:c7:90:b1:d9:1c:46:77:b4:0e:09:51:63:56:f9:
                    7f:b9:dd:54:cd:4a:3a:7f:67:52:ca:81:a9:2a:ff:
                    23:74:b8:91:28:71:90:cf:32:8d:7b:4d:17:55:94:
                    5c:cf:8e:ed:72:a3:17:f5:dd:23:94:93:96:15:bb:
                    63:3c:34:0d:99:13:41:3a:65:f4:ca:4f:1f:be:a8:
                    36:79:06:65:67:9b:1b:a0:38:fa:52:64:88:04:5a:
                    ad:c9:67:5d:15:99:7f:c7:52:bb:11:ad:0d:2a:60:
                    c5:f9:f3:d4:2d:11:56:c5:23:9e:23:5a:c2:2c:ba:
                    c5:2b:fc:0e:9b:4e:a2:c2:e2:13:23:3a:cd:ed:bb:
                    d5:54:54:e0:95:7c:b5:a0:01:03:c6:24:d1:28:88:
                    3d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:EA:82:AF:45:21:64:59:3A:CB:2C:30:F4:14:1E:36:86:7C:FE:6F
            X509v3 Authority Key Identifier:
                keyid:06:23:47:D8:F4:F7:70:41:56:33:E2:2D:79:4F:8D:58:F3:90:BA:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/062347D8F4F770415633E22D794F8D58F390BA86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/323830343a366232633a3a2f33322d3335203d3e20323730333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:55:d6:36:f4:04:48:c9:39:0c:71:80:72:77:33:95:d0:45:
         ae:7a:5c:30:79:2c:69:d9:47:84:59:8a:fd:37:a4:00:84:fe:
         16:c6:fa:5f:12:d7:73:78:8e:62:5f:7e:94:c6:34:c3:25:80:
         bf:2c:30:22:44:e8:47:f9:28:7a:23:7f:aa:35:43:5d:d9:99:
         fb:77:22:7a:0a:c3:9d:36:ca:bc:96:63:05:25:68:fb:d7:e1:
         26:e6:fe:da:a7:c1:bd:de:92:5e:07:72:59:ea:8a:4c:94:01:
         6c:58:35:1a:f5:6c:5e:37:a3:54:a9:2c:21:fd:ec:d5:0d:45:
         1b:ae:c3:2c:11:70:6d:09:a7:39:97:10:00:44:cc:5d:f9:99:
         2e:cd:d4:0b:8b:6f:e5:79:76:2a:73:ef:30:10:dc:6b:cc:b5:
         3f:0f:9a:7c:9a:5e:a3:e0:46:a9:2a:97:b2:37:66:ac:cf:8b:
         cc:e7:38:12:20:35:fb:1f:19:c8:2a:5b:6e:f4:81:89:bf:32:
         03:fd:41:7f:75:77:aa:10:88:27:4b:9c:be:f8:38:be:a9:31:
         d6:38:ee:64:df:82:74:7f:5b:ea:4a:03:35:1e:bd:59:aa:e5:
         91:e8:d5:0a:1e:70:8b:0e:22:14:c8:ef:65:67:cd:6d:e6:0f:
         3c:4b:2b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:41:49 2026 by rpki-client