Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a343230303a3a2f34302d3430203d3e20323634393936.roa
File:                     323830343a333132343a343230303a3a2f34302d3430203d3e20323634393936.roa (raw, json)
Hash identifier:          dJLn85g5KzY6B4D1rT7fl0RSVuI5bUTYNTMD3/TLH4I=
Subject key identifier:   60:FD:29:51:0F:11:EF:8A:75:EA:08:F5:DC:91:9E:4C:7C:40:1F:02
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       01D697DAEEA7F4DBE1E2D88F275B7002674DB230
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a343230303a3a2f34302d3430203d3e20323634393936.roa
Signing time:             Thu 05 Feb 2026 09:43:52 +0000
ROA not before:           Thu 05 Feb 2026 09:38:52 +0000
ROA not after:            Thu 04 Feb 2027 09:43:52 +0000
asID:                     264996
IP address blocks:        2804:3124:4200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d6:97:da:ee:a7:f4:db:e1:e2:d8:8f:27:5b:70:02:67:4d:b2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Feb  5 09:38:52 2026 GMT
            Not After : Feb  4 09:43:52 2027 GMT
        Subject: CN=60FD29510F11EF8A75EA08F5DC919E4C7C401F02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2c:6f:b7:9d:e0:83:b3:5d:26:d6:db:9c:7a:
                    6e:ed:1f:43:7d:84:70:7b:f5:b8:d2:70:ed:da:fb:
                    ac:b9:3d:1a:79:9a:8a:a6:27:3f:ee:7f:a7:9e:a1:
                    d1:bc:5c:c4:4e:cc:7b:65:a0:c8:45:d5:7a:12:cd:
                    85:78:8e:fd:5d:ef:91:87:b5:4a:6d:43:0a:9c:e2:
                    dc:15:d4:a4:ca:c8:06:e7:65:08:45:06:91:0b:22:
                    74:e7:2c:99:de:f4:f7:b7:b8:2b:6d:2e:57:8d:39:
                    f8:e8:7d:39:2a:80:06:ba:52:78:b4:7c:d7:78:8d:
                    7e:15:2a:d8:c2:09:b8:ee:70:89:bf:5e:ee:14:8c:
                    75:bd:56:54:3d:dd:66:d2:92:82:a6:84:75:7d:73:
                    94:ed:ad:02:4d:7b:f2:5d:c4:02:a4:21:46:c9:54:
                    8d:38:43:06:a0:35:e5:0b:9e:06:f4:74:f5:b9:77:
                    6b:22:51:7d:11:74:db:a5:b3:39:ac:82:fe:f5:e1:
                    f1:c2:df:3c:6d:6a:87:5c:81:72:b4:79:e7:c5:75:
                    45:a3:63:b0:23:66:36:af:04:08:d5:04:ef:16:d6:
                    9f:59:b3:07:62:53:e2:7a:94:d8:1d:ec:c1:98:d0:
                    52:07:bb:9d:18:95:3a:46:52:74:8e:f9:70:c5:ef:
                    a6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FD:29:51:0F:11:EF:8A:75:EA:08:F5:DC:91:9E:4C:7C:40:1F:02
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a343230303a3a2f34302d3430203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124:4200::/40

    Signature Algorithm: sha256WithRSAEncryption
         17:4c:26:10:99:a5:23:c8:41:b8:8d:61:03:94:29:a5:ac:f2:
         41:49:0e:d5:43:89:a4:d6:25:6d:e6:76:5c:0f:d1:f9:55:d9:
         63:ec:8f:87:59:6b:b2:a2:22:f5:48:9c:64:38:ea:97:96:95:
         cb:42:68:2f:6a:85:68:59:f0:69:ff:d1:d6:f8:83:c2:66:91:
         a7:11:29:58:8c:f0:a8:a3:28:26:0b:90:3a:51:fb:5b:14:f8:
         fd:90:c5:71:03:3a:20:7c:63:15:3a:9c:2e:e1:2f:b1:f6:4f:
         ed:cb:4e:ef:8c:96:0e:eb:e3:ba:be:0f:35:8c:04:24:82:37:
         20:a7:5f:b9:31:22:5e:86:fc:8c:95:4d:0d:b5:c9:49:2c:86:
         01:28:3c:33:32:f4:c0:77:55:18:ff:6d:6f:eb:ba:26:5a:4f:
         30:22:9c:82:8a:94:e7:3f:52:d1:05:75:e2:f6:0a:fd:80:00:
         bb:03:d3:6d:1a:42:6f:e8:dd:56:17:bd:e2:9d:1d:35:a6:ef:
         98:c8:5c:28:41:69:9a:d4:7b:31:98:1c:fc:6b:50:8e:1c:c4:
         fb:a3:d2:1c:25:24:8a:40:01:21:fe:79:be:a7:86:67:45:e2:
         ee:e6:f2:de:12:3a:0f:b1:87:ac:1c:dd:84:af:58:63:3f:34:
         98:ce:f2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:37:47 2026 by rpki-client