Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/323830343a313138343a3a2f33322d3438203d3e203631383935.roa
File:                     323830343a313138343a3a2f33322d3438203d3e203631383935.roa (raw, json)
Hash identifier:          Qj+DIVT+m+4pbdbPQeyXP6joCp2XzbwC8zZTQ8srcvQ=
Subject key identifier:   70:19:87:E4:98:A9:4A:D2:1C:C0:FC:57:49:06:E4:30:94:09:1E:EE
Certificate issuer:       /CN=3C2A58CCB64DE28EB38CE734A2577F2CBD3D9212
Certificate serial:       1A203C57323387B0CD5F956483D00331DB20A6BF
Authority key identifier: 3C:2A:58:CC:B6:4D:E2:8E:B3:8C:E7:34:A2:57:7F:2C:BD:3D:92:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C2A58CCB64DE28EB38CE734A2577F2CBD3D9212.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/323830343a313138343a3a2f33322d3438203d3e203631383935.roa
Signing time:             Tue 20 Jan 2026 12:35:17 +0000
ROA not before:           Tue 20 Jan 2026 12:30:17 +0000
ROA not after:            Tue 19 Jan 2027 12:35:17 +0000
asID:                     61895
IP address blocks:        2804:1184::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/3C2A58CCB64DE28EB38CE734A2577F2CBD3D9212.crl
                          rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/3C2A58CCB64DE28EB38CE734A2577F2CBD3D9212.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C2A58CCB64DE28EB38CE734A2577F2CBD3D9212.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:20:3c:57:32:33:87:b0:cd:5f:95:64:83:d0:03:31:db:20:a6:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C2A58CCB64DE28EB38CE734A2577F2CBD3D9212
        Validity
            Not Before: Jan 20 12:30:17 2026 GMT
            Not After : Jan 19 12:35:17 2027 GMT
        Subject: CN=701987E498A94AD21CC0FC574906E43094091EEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b7:7e:b7:69:24:e2:30:5b:f4:20:92:2e:9e:
                    f3:85:74:7b:13:4a:74:54:c3:30:36:d0:8c:d1:ec:
                    65:26:7d:8c:ac:cc:f5:0d:94:6d:f1:0e:f6:a5:11:
                    13:ec:36:08:d7:7b:72:c4:b3:e6:6a:10:e7:22:3f:
                    87:55:c8:cb:4b:35:6d:c1:c5:9e:0f:02:9b:6c:c0:
                    7d:98:76:5c:f8:03:9b:e5:57:b0:41:a0:a8:89:b5:
                    a2:a5:70:c3:2d:8b:bf:92:c2:86:74:cd:61:9b:7b:
                    3b:8d:d7:4e:82:41:c3:83:a3:43:d4:67:70:1a:1e:
                    51:b2:87:71:d3:1c:ba:bd:26:ea:ce:00:79:69:ba:
                    23:38:b4:e2:b2:ca:2d:59:e1:c7:40:53:f7:10:7a:
                    b6:a8:c7:20:6b:dc:78:6b:51:2a:5d:f9:23:f5:21:
                    42:49:e9:cf:4d:9e:eb:0f:29:3d:7d:53:33:50:96:
                    07:6e:78:2b:83:76:13:43:47:80:fd:54:7b:46:48:
                    db:0e:12:4a:b8:5f:c9:ac:a4:2f:3f:18:83:de:22:
                    ac:04:b1:6f:df:0c:05:cb:9b:18:8f:4a:5b:6c:02:
                    39:ac:18:c9:12:e0:30:88:e8:e1:d8:e4:85:e8:eb:
                    f3:1a:b1:ca:bd:67:7a:de:0c:de:3a:11:df:4e:14:
                    2a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:19:87:E4:98:A9:4A:D2:1C:C0:FC:57:49:06:E4:30:94:09:1E:EE
            X509v3 Authority Key Identifier:
                keyid:3C:2A:58:CC:B6:4D:E2:8E:B3:8C:E7:34:A2:57:7F:2C:BD:3D:92:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/3C2A58CCB64DE28EB38CE734A2577F2CBD3D9212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C2A58CCB64DE28EB38CE734A2577F2CBD3D9212.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/323830343a313138343a3a2f33322d3438203d3e203631383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1184::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:c4:ff:c9:b8:8f:6c:8e:39:07:62:dc:0a:ad:26:ff:27:c2:
         9f:50:44:45:fa:f3:45:fa:1b:f1:22:04:1a:a7:99:b1:89:05:
         36:c9:50:f9:bf:10:af:5c:2d:e7:8f:67:49:15:3b:e4:bd:2c:
         de:ac:51:40:89:9c:21:08:50:df:6a:22:ba:91:ff:ed:cd:f1:
         44:2f:34:72:78:6f:9b:b7:48:bf:99:da:7f:a2:ae:08:26:07:
         05:07:7f:45:5a:f4:d7:38:99:45:24:07:64:02:49:66:fd:59:
         50:27:c6:bf:8c:cf:cc:34:83:c2:58:1b:b2:4c:96:29:3d:b6:
         b3:09:e7:9c:d0:2e:ae:27:34:78:89:63:1e:e9:88:5e:4a:e5:
         f8:16:e9:eb:64:cc:c3:46:30:b6:c8:bd:76:aa:d0:82:03:1d:
         b4:6a:39:df:37:1b:96:11:53:ab:f2:fe:3a:11:03:71:ad:f7:
         62:9f:46:bb:9d:27:d0:fa:18:46:28:b6:01:42:68:8b:c6:b4:
         0b:0a:a9:7c:88:88:21:0b:99:0f:2e:dd:0e:bb:f8:1a:58:5c:
         1f:ed:04:b5:50:70:ac:55:44:2a:c8:dc:8a:65:4a:b0:3d:cc:
         dd:b1:7e:49:ff:1d:76:2b:8e:28:f6:06:93:19:24:55:32:b5:
         f8:a6:44:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:52:25 2026 by rpki-client