Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/323830343a3632343a3a2f33322d3438203d3e203238323833.roa
File:                     323830343a3632343a3a2f33322d3438203d3e203238323833.roa (raw, json)
Hash identifier:          W0b7LXtMLz7brYVujzOhWsImJ6p8VOWzsd8tMLZtL98=
Subject key identifier:   6D:34:80:23:21:9E:98:3C:2E:83:37:1B:F6:6E:02:E5:65:E3:7E:53
Certificate issuer:       /CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
Certificate serial:       5329456F104AE22315538682EDCD82551E880F3C
Authority key identifier: A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/323830343a3632343a3a2f33322d3438203d3e203238323833.roa
Signing time:             Fri 06 Feb 2026 20:00:01 +0000
ROA not before:           Fri 06 Feb 2026 19:55:01 +0000
ROA not after:            Sat 06 Feb 2027 20:00:01 +0000
asID:                     28283
IP address blocks:        2804:624::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl
                          rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:29:45:6f:10:4a:e2:23:15:53:86:82:ed:cd:82:55:1e:88:0f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
        Validity
            Not Before: Feb  6 19:55:01 2026 GMT
            Not After : Feb  6 20:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f6:fe:28:3f:25:85:31:22:fb:41:74:0e:b8:
                    12:cd:d7:b7:45:c9:44:e6:a1:95:81:0b:f7:41:29:
                    91:f2:8b:2a:65:a2:e7:67:73:91:c9:66:ee:8a:53:
                    ac:b6:d6:17:80:41:78:c2:a9:c2:d8:70:87:b4:50:
                    0c:b3:b6:7f:c5:16:28:0b:0d:88:66:76:4f:b8:19:
                    fb:d2:ad:f9:dd:6a:24:9a:87:2e:07:5d:ab:e0:1b:
                    62:ad:1b:9e:8d:f6:2f:1a:dd:77:23:28:d7:68:5b:
                    ca:ff:9a:47:d9:17:da:f7:8f:9c:d8:38:e8:6f:14:
                    30:17:bc:5b:e5:53:be:7c:91:44:44:50:16:51:78:
                    9a:36:aa:25:f9:d3:b8:5d:f1:11:e0:ea:7b:93:d9:
                    39:17:e0:ec:79:f4:d8:a8:75:b5:8f:f0:35:d5:65:
                    65:0f:4a:c8:f7:cf:8a:64:b9:33:89:9f:65:0e:75:
                    6f:b4:2f:ad:ae:ec:7c:27:c1:de:56:52:a4:9b:2d:
                    b3:b2:74:cb:02:53:ef:f9:ed:6a:dd:3f:7c:7e:b1:
                    d8:52:9f:59:37:48:39:17:95:e9:d9:1b:84:ae:c8:
                    62:01:7f:eb:46:1e:58:40:cd:bc:b6:19:ab:e0:c8:
                    18:ad:a9:eb:2e:13:99:c3:b9:a4:8e:78:20:e8:3b:
                    e9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:34:80:23:21:9E:98:3C:2E:83:37:1B:F6:6E:02:E5:65:E3:7E:53
            X509v3 Authority Key Identifier:
                keyid:A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/323830343a3632343a3a2f33322d3438203d3e203238323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:624::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:3a:73:bf:7c:f2:d4:b5:d5:a3:1b:67:fe:31:4f:3b:d9:51:
         99:0a:dd:8f:68:b3:95:f2:5f:c7:07:18:c6:25:5a:22:48:2d:
         5e:c7:8d:53:a8:ae:7e:1f:3f:95:59:76:ac:0b:9d:b1:4a:fe:
         c2:41:84:87:98:7a:6e:50:af:34:99:3d:80:8b:60:2d:0d:b9:
         96:f2:0e:01:4a:a0:b9:8c:ea:d7:38:ca:2f:5f:d4:97:5d:84:
         cd:7c:7b:46:d6:fd:b6:55:00:01:a9:7b:c3:6c:76:67:4f:8a:
         ec:7b:00:e3:01:d7:ee:18:c1:4f:c6:b2:73:31:8a:d7:18:d3:
         bf:5a:4d:55:d8:f4:8c:af:69:8b:3b:92:5c:53:33:8d:33:8a:
         e0:a9:1a:a1:9a:6b:f1:50:6e:73:46:36:86:9a:09:ed:78:b4:
         db:52:dc:a4:24:5d:b0:a4:7f:8e:93:ed:34:dd:2f:d8:bf:b0:
         f1:83:30:14:f3:6c:86:fd:44:a6:5f:e8:f9:78:10:d1:86:bf:
         4f:e0:20:dd:a7:a2:f5:51:31:bc:24:90:07:d7:a8:3c:07:65:
         47:3e:ca:53:19:a4:ba:aa:1f:2f:5b:e4:bc:6f:5c:ce:4a:ce:
         93:06:7e:5b:1a:84:47:b1:bc:90:ee:27:58:35:ec:7b:3e:62:
         62:03:f3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:38:18 2026 by rpki-client