Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a613030303a3a2f33352d3335203d3e20323635343239.roa
File:                     323830343a333366633a613030303a3a2f33352d3335203d3e20323635343239.roa (raw, json)
Hash identifier:          MbqdiNq3V6bRLqbKerzhrE93ldhsmhEdSISZVV7k54c=
Subject key identifier:   D9:3B:2F:45:54:39:78:E6:76:98:CC:DD:20:6A:8C:C1:D9:BA:F3:B2
Certificate issuer:       /CN=0059BA88737DAD2C55270BBCF409B62E1276558F
Certificate serial:       4A3D2461690C6D7F39239025EAF4EABA60BAA883
Authority key identifier: 00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a613030303a3a2f33352d3335203d3e20323635343239.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     265429
IP address blocks:        2804:33fc:a000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl
                          rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:3d:24:61:69:0c:6d:7f:39:23:90:25:ea:f4:ea:ba:60:ba:a8:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0059BA88737DAD2C55270BBCF409B62E1276558F
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bc:78:38:a6:b8:50:23:a9:b2:e3:5c:58:de:
                    4e:b3:16:d8:29:9e:81:0d:8b:62:07:a5:4c:78:9c:
                    7e:06:ab:33:f3:33:3d:3f:43:34:1b:9f:b6:0d:62:
                    35:82:f4:3a:76:86:c1:78:66:12:c4:c2:1a:df:cc:
                    f9:b7:42:cc:b3:2a:e3:65:8b:08:8d:b5:aa:f7:7a:
                    0c:5e:58:71:54:4f:ce:45:ae:ab:e0:1f:da:d2:b2:
                    97:1b:7b:6f:76:d0:c8:21:3f:53:8a:1f:06:46:03:
                    1d:77:f9:f4:62:37:f5:33:f1:ba:2e:05:3f:8b:eb:
                    22:b3:12:54:72:b3:b5:16:27:b0:26:d0:af:19:6e:
                    19:4c:d3:28:a6:c2:f8:05:44:3d:49:f1:e2:ce:60:
                    8f:85:f5:f3:23:67:c3:85:e2:9d:23:f2:21:b2:55:
                    e1:4b:06:13:a5:09:78:19:6a:42:a0:30:b8:37:6a:
                    ad:52:c8:3d:f8:53:c1:f9:98:23:ac:77:fd:d4:c1:
                    e9:e0:c5:3d:6e:0e:99:05:cb:81:78:36:1a:08:fc:
                    8b:77:c3:61:36:11:8e:01:7a:85:dc:73:cc:d5:69:
                    56:67:38:92:24:e7:d9:cf:12:ad:4f:e7:e2:43:ba:
                    97:24:dc:7a:56:20:f9:81:95:07:5b:77:57:68:fb:
                    11:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3B:2F:45:54:39:78:E6:76:98:CC:DD:20:6A:8C:C1:D9:BA:F3:B2
            X509v3 Authority Key Identifier:
                keyid:00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a613030303a3a2f33352d3335203d3e20323635343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33fc:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         5e:16:00:e8:fc:00:56:6c:2f:a0:6b:62:11:f6:45:8a:34:90:
         7a:27:b7:8e:4d:ca:c8:ff:50:40:bd:47:e7:88:c3:f1:d7:df:
         12:c4:76:1f:1c:7f:be:73:58:8f:61:0d:5a:c2:5f:39:2d:59:
         f9:8f:77:f4:00:28:a2:7a:92:d8:fa:bf:01:67:32:1d:42:c1:
         07:31:2f:9c:6c:01:4a:30:74:31:65:ef:fd:0a:8b:d8:9e:0e:
         a8:32:97:98:52:f1:68:38:75:35:ca:cc:41:80:2a:7c:cf:fd:
         5b:07:9d:1b:bd:19:1c:48:f5:40:aa:d6:be:f9:47:9f:a0:73:
         18:03:af:59:11:a1:1b:d1:d5:21:fa:06:6d:3e:d1:07:77:fe:
         11:4e:4e:00:94:c6:17:73:52:aa:23:7a:94:1e:10:78:7b:7d:
         c9:b2:59:44:20:6d:ad:dc:ef:20:1e:24:f3:c7:8e:4a:ea:a2:
         8b:a5:99:e8:eb:6c:21:c8:45:97:ec:32:e2:4d:24:17:77:9e:
         9d:16:5c:96:ed:6b:e5:fb:fe:10:98:e8:77:b7:f6:0d:a6:81:
         4a:71:e9:f7:15:49:da:16:d3:ed:3f:c9:c4:9e:75:cc:55:45:
         ca:40:e2:7d:c8:e4:b8:81:98:96:c3:96:21:d4:87:8a:83:40:
         64:8b:2a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:56:34 2026 by rpki-client