Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a363030303a3a2f33352d3335203d3e20323635343239.roa
File:                     323830343a333366633a363030303a3a2f33352d3335203d3e20323635343239.roa (raw, json)
Hash identifier:          S32H6hz1Se52Cp2cF+aUCi63DGqjq0YWcUUM1kuUsqY=
Subject key identifier:   5C:CE:A0:C6:AD:F2:CE:00:A1:09:C8:E4:4E:27:7E:0C:98:79:07:E1
Certificate issuer:       /CN=0059BA88737DAD2C55270BBCF409B62E1276558F
Certificate serial:       5F8A478618D24DF3211F82C8AC93276E1C46566B
Authority key identifier: 00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a363030303a3a2f33352d3335203d3e20323635343239.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     265429
IP address blocks:        2804:33fc:6000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl
                          rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:8a:47:86:18:d2:4d:f3:21:1f:82:c8:ac:93:27:6e:1c:46:56:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0059BA88737DAD2C55270BBCF409B62E1276558F
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ba:df:9d:0b:01:de:41:31:c8:08:6e:19:58:
                    16:5d:ce:29:97:14:0f:fb:73:fc:de:54:a4:02:99:
                    fd:fa:de:9c:79:dd:70:1c:4a:79:16:9c:0c:32:64:
                    8e:e6:37:3f:23:04:c2:4d:4d:b9:cf:a8:a1:34:8c:
                    b1:6c:19:2c:d9:58:12:40:b8:33:f5:d6:54:22:2c:
                    50:01:86:7a:31:2a:0b:ef:41:14:17:fa:6e:c5:28:
                    0d:94:04:e1:61:d4:37:15:f7:7f:72:7b:1e:9c:75:
                    1c:0d:d6:9b:3b:dd:74:a3:8c:a5:ce:e6:08:0f:5d:
                    16:51:2d:71:7c:76:e2:ce:a3:a6:1b:15:c4:5d:ca:
                    f7:01:a0:85:53:4e:de:a4:0d:e7:24:1e:08:7a:3b:
                    0d:25:d3:c0:bc:2a:b4:85:66:25:a7:04:9c:1d:57:
                    a3:d1:05:54:96:fe:bb:80:14:bd:00:6d:80:62:cb:
                    b3:b7:85:b3:cb:d1:31:de:b4:e2:38:4f:49:e3:69:
                    5f:fe:f2:0f:8c:05:3c:68:98:36:81:f0:76:af:2f:
                    91:72:62:eb:36:68:b1:86:78:75:42:eb:48:5e:f5:
                    d8:c9:0c:ad:62:9e:2a:fb:27:08:b0:c9:33:ef:d8:
                    50:48:c9:18:9e:55:30:d5:56:c6:d3:14:6b:d8:88:
                    2f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CE:A0:C6:AD:F2:CE:00:A1:09:C8:E4:4E:27:7E:0C:98:79:07:E1
            X509v3 Authority Key Identifier:
                keyid:00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a363030303a3a2f33352d3335203d3e20323635343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33fc:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         94:e6:e2:02:0f:1d:35:ec:68:8a:a3:7e:eb:68:07:32:c7:55:
         92:38:23:10:02:f9:19:8d:9f:ca:7d:24:98:54:0f:6a:48:74:
         06:7f:8d:fa:67:89:a3:a5:a4:54:ce:0b:6b:2e:58:11:d1:13:
         7c:fb:c3:eb:51:c9:16:5b:23:a2:53:94:30:76:f9:ef:92:a1:
         a9:4a:b5:2b:38:fd:8c:20:8b:ef:42:af:da:a5:2e:d3:f8:c9:
         6d:a9:ac:ae:f4:72:5a:b4:15:e1:e3:5b:7a:2a:31:25:28:61:
         40:d9:ee:da:87:99:78:6f:ae:71:d3:79:13:76:fd:24:0b:aa:
         6a:34:ae:42:ce:b0:73:3b:1b:de:a5:b3:ee:eb:e4:bf:14:ed:
         08:86:ea:4c:55:87:fe:6b:b9:92:18:c6:b5:b5:ff:a0:80:3c:
         c4:b7:ad:0f:94:2c:c1:a7:f0:9f:d7:88:1b:8a:d3:e6:d4:cc:
         da:1d:5d:e2:03:67:d1:83:96:9e:7f:f2:58:08:fe:be:73:6e:
         da:2f:01:64:71:6a:d6:27:06:9c:56:bf:47:90:06:47:a4:5c:
         02:2b:e4:95:86:bb:73:f0:97:a3:a9:45:50:2b:7e:66:ed:0f:
         3a:d1:b1:f6:76:fa:4b:aa:3a:b0:78:49:f5:be:3f:a2:bf:b0:
         f8:fc:18:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:15:52 2026 by rpki-client