Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a3a2f33322d3334203d3e20323635343239.roa
File:                     323830343a333366633a3a2f33322d3334203d3e20323635343239.roa (raw, json)
Hash identifier:          wNnXDjfQFu1ApIHEKrb9hZF17hu6qlFtZjjm+yuagPo=
Subject key identifier:   35:23:1E:CA:C4:7C:D9:F9:E4:F5:1B:D7:A7:5E:B2:52:16:CC:6A:0A
Certificate issuer:       /CN=0059BA88737DAD2C55270BBCF409B62E1276558F
Certificate serial:       6E96B941D8FC4B300744560A275A5C667C1C4EED
Authority key identifier: 00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a3a2f33322d3334203d3e20323635343239.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     265429
IP address blocks:        2804:33fc::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl
                          rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:96:b9:41:d8:fc:4b:30:07:44:56:0a:27:5a:5c:66:7c:1c:4e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0059BA88737DAD2C55270BBCF409B62E1276558F
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:99:df:14:ac:f5:58:3e:12:7e:64:b7:4f:5e:
                    3b:ce:a1:9b:15:3a:2d:8b:d7:4a:1f:5a:b0:12:dd:
                    b3:aa:b9:c1:53:c8:fc:44:33:5f:7d:d3:5e:86:f6:
                    e0:92:ec:d8:98:c0:17:ea:c9:d3:69:57:2b:d6:79:
                    96:d6:c9:6a:70:85:fe:9b:7c:f1:db:d8:90:96:da:
                    7c:3f:ec:1a:7f:68:54:9a:68:ba:d5:2d:02:00:35:
                    81:19:6c:3a:f8:b0:52:8e:d9:5b:11:ff:9d:4a:35:
                    7d:88:6d:b7:5f:03:b5:76:6f:69:0b:f7:b7:d5:e0:
                    c9:8c:cb:1e:f2:38:f9:14:de:6b:36:8e:23:e7:f8:
                    dc:03:b1:89:27:de:cc:91:d2:6e:50:81:55:ed:9d:
                    99:1d:46:8c:38:7d:17:8c:2c:bd:b0:b9:8f:64:29:
                    92:8a:bc:ac:f0:ee:3b:c3:45:25:97:a7:94:27:d9:
                    c4:36:be:8a:22:ed:39:11:40:19:9f:fd:a8:0e:1f:
                    99:1a:6c:31:3d:19:6d:28:ba:53:1c:5c:c0:11:82:
                    2f:e3:a8:1b:2c:42:34:d9:a4:5d:4e:88:6e:84:37:
                    86:42:05:26:d0:c5:73:26:cc:3d:32:6c:2d:44:69:
                    8b:1c:5e:e4:22:f5:d8:8c:17:84:6d:1d:3b:c5:da:
                    03:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:23:1E:CA:C4:7C:D9:F9:E4:F5:1B:D7:A7:5E:B2:52:16:CC:6A:0A
            X509v3 Authority Key Identifier:
                keyid:00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a3a2f33322d3334203d3e20323635343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:05:e2:bf:cb:1e:30:4e:be:2c:91:f9:43:d0:47:b2:3d:d3:
         87:b3:b5:98:96:04:36:51:f4:3e:24:2d:9e:3e:cc:31:5e:9d:
         8a:93:24:93:d4:d6:b7:cf:ea:5b:65:90:bc:5c:8a:e6:d0:99:
         eb:db:3e:86:b9:8f:29:5f:9c:a2:51:62:4d:8e:07:ef:d9:95:
         60:d4:10:70:63:9b:aa:17:6c:7a:d2:1d:f5:94:36:e1:27:70:
         1b:72:e2:68:94:21:01:2a:d4:b7:7e:4b:c4:8c:fd:f4:fc:20:
         82:15:7b:21:a2:c9:ff:02:ed:4b:e5:cd:c8:f2:ed:4e:a0:a1:
         25:a3:23:6c:00:60:80:3a:c5:e8:eb:5d:c0:03:dd:59:9c:1f:
         29:d9:7f:92:33:af:67:7f:f5:95:51:a7:02:f7:44:54:c3:20:
         f6:22:c3:31:d2:91:96:ca:01:eb:8a:d5:be:2a:60:93:a8:93:
         ec:49:2f:8f:c7:98:a9:9f:51:6b:14:6a:da:d2:57:d3:e2:87:
         24:61:6e:70:19:4b:66:ea:04:2f:2e:b8:e5:a0:ad:f3:a7:a8:
         fd:5d:90:5a:95:59:11:3c:00:fd:56:29:df:eb:6d:c0:ec:c2:
         5f:48:3b:f3:d7:55:e8:8c:81:ea:2d:4c:12:f1:4d:2c:e5:97:
         cd:21:a5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:24:02 2026 by rpki-client