Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a653030303a3a2f33352d3335203d3e20323635343239.roa
File:                     323830343a333366633a653030303a3a2f33352d3335203d3e20323635343239.roa (raw, json)
Hash identifier:          i6LUKRYQwWC/hKZtryfv2i/2qwkbdhY1TKSfVdlBmoI=
Subject key identifier:   4D:05:DD:60:C5:AA:30:37:62:3E:13:DB:C8:2B:E3:13:C7:3A:FF:5E
Certificate issuer:       /CN=0059BA88737DAD2C55270BBCF409B62E1276558F
Certificate serial:       414CE35D415BBF6D40D235BCB1C87D58D69B46
Authority key identifier: 00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a653030303a3a2f33352d3335203d3e20323635343239.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     265429
IP address blocks:        2804:33fc:e000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl
                          rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:4c:e3:5d:41:5b:bf:6d:40:d2:35:bc:b1:c8:7d:58:d6:9b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0059BA88737DAD2C55270BBCF409B62E1276558F
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c2:a4:85:14:35:61:90:fc:35:3c:2c:88:9e:
                    a1:0d:05:a8:7b:0b:ff:d5:2a:e3:89:cc:0d:d0:46:
                    f0:c8:e1:85:5b:85:23:ca:62:98:56:60:23:b8:04:
                    b3:45:a3:53:fb:29:91:d4:46:b2:c4:14:df:8a:ef:
                    04:0b:39:22:d5:9f:79:b1:35:c7:1f:2b:d1:6a:81:
                    99:96:98:55:9b:8f:b9:29:86:c5:89:72:32:a2:53:
                    7d:ae:12:dd:cd:59:d5:73:47:79:89:68:e7:04:e8:
                    68:ad:71:15:0e:ac:ba:81:9a:31:6a:7b:46:ff:0a:
                    4c:73:70:01:f1:55:35:1e:61:db:9e:e9:c6:91:78:
                    49:fe:e9:76:39:0a:04:93:53:ce:93:06:d3:15:1a:
                    f7:80:96:5f:16:45:70:cc:7a:21:8f:73:0d:b5:0d:
                    33:a4:c9:48:d6:ae:29:73:a3:b0:a7:ca:e8:2a:c4:
                    db:8c:62:a0:bc:b5:f7:a5:05:9a:ee:70:1d:54:04:
                    e7:db:d1:9d:e6:b5:b4:9f:f8:66:6c:f8:c7:9f:bc:
                    f5:8e:50:a3:13:40:38:ab:a0:6b:54:ae:26:67:f7:
                    64:04:a2:0d:da:fa:39:21:37:de:07:d3:50:22:ae:
                    b2:d5:b4:95:60:aa:97:86:20:22:cd:fc:b8:54:22:
                    f5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:05:DD:60:C5:AA:30:37:62:3E:13:DB:C8:2B:E3:13:C7:3A:FF:5E
            X509v3 Authority Key Identifier:
                keyid:00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a653030303a3a2f33352d3335203d3e20323635343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33fc:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         40:f6:b9:d6:5f:95:65:c5:03:d2:e0:e3:8d:b7:27:8e:7c:57:
         07:99:5c:86:ef:2c:9f:0e:d6:97:87:92:a5:f3:64:e3:d4:31:
         da:39:d9:a3:7b:1b:82:95:e8:68:59:02:20:06:c5:c3:6c:79:
         f1:09:01:e2:fc:59:d3:bf:d1:fd:82:ea:c1:6a:af:3f:eb:f5:
         3e:e9:b7:7d:a0:36:7a:a3:cb:23:29:36:90:6f:0d:2a:e0:05:
         f9:03:f0:d1:07:6e:48:69:58:b4:cb:07:90:06:a3:6e:be:de:
         69:e6:46:88:16:d2:01:33:1b:70:15:4f:41:75:f2:e1:5c:eb:
         80:61:29:55:7e:45:6b:76:6f:0c:3b:ac:e1:0b:16:d6:6e:2c:
         3b:1f:63:51:ef:15:e2:a3:49:32:59:55:d6:f0:ca:7b:18:4d:
         1c:78:98:1a:07:fb:20:f3:e7:59:e9:38:95:39:e9:a8:d0:d7:
         80:8f:15:69:ab:2c:1b:03:37:12:aa:35:00:2f:8a:10:9f:a8:
         b1:33:77:6c:04:b7:1e:9e:21:80:86:09:fe:90:6d:2b:72:50:
         4b:34:13:56:dd:95:38:2a:25:a4:e7:d4:21:b9:18:98:42:78:
         e5:45:63:7a:46:63:c7:09:5f:d4:3e:e6:32:d7:13:33:7d:c0:
         c5:46:b3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:15:54 2026 by rpki-client