Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/323830343a323730303a3a2f33322d3335203d3e20323633383639.roa
File:                     323830343a323730303a3a2f33322d3335203d3e20323633383639.roa (raw, json)
Hash identifier:          jZxhJTQqmwny21y8m5P5/HKateUCwxPl8xRM7krjfJ0=
Subject key identifier:   5C:F4:BF:E7:1F:E7:29:E2:EA:B6:B3:35:0F:45:EA:5A:EB:89:B4:FA
Certificate issuer:       /CN=3E3635534C5268C5F8F31D910454018D21BBA954
Certificate serial:       384B1931ED4A77EA2406D385644668B79A91CDC1
Authority key identifier: 3E:36:35:53:4C:52:68:C5:F8:F3:1D:91:04:54:01:8D:21:BB:A9:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3635534C5268C5F8F31D910454018D21BBA954.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/323830343a323730303a3a2f33322d3335203d3e20323633383639.roa
Signing time:             Wed 04 Feb 2026 20:00:02 +0000
ROA not before:           Wed 04 Feb 2026 19:55:02 +0000
ROA not after:            Wed 03 Feb 2027 20:00:02 +0000
asID:                     263869
IP address blocks:        2804:2700::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.crl
                          rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3635534C5268C5F8F31D910454018D21BBA954.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4b:19:31:ed:4a:77:ea:24:06:d3:85:64:46:68:b7:9a:91:cd:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E3635534C5268C5F8F31D910454018D21BBA954
        Validity
            Not Before: Feb  4 19:55:02 2026 GMT
            Not After : Feb  3 20:00:02 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:12:22:79:f8:d0:22:84:dd:d0:21:f5:ef:
                    28:91:22:b5:04:99:16:29:1c:cb:3a:ca:68:f5:c2:
                    20:46:f5:9e:99:3d:d2:12:61:47:18:2a:18:ca:cb:
                    3f:41:bf:67:07:81:75:04:1f:52:43:ec:69:b2:2e:
                    88:01:f4:02:cd:8b:9e:b6:15:14:c6:63:98:08:0f:
                    63:c9:9c:c3:1d:1b:da:10:e5:36:fe:36:89:67:e0:
                    76:21:fa:7c:cf:41:96:ca:fb:7f:2b:0c:0e:34:8e:
                    7a:ac:48:dc:db:f7:78:4f:4a:af:50:ca:89:35:f0:
                    b5:11:af:71:9c:9f:47:54:e3:44:01:dc:79:c3:ef:
                    ab:92:6a:86:f3:41:dc:f0:7b:ad:9c:d0:35:b5:b2:
                    2e:66:b7:8d:91:34:17:f2:cc:e3:34:44:88:69:cd:
                    e1:46:92:75:c7:cb:8d:b9:42:0b:25:1c:59:94:4d:
                    43:da:8d:b1:38:28:48:e8:21:19:9e:dd:68:c8:de:
                    de:ba:d4:77:3a:c6:2f:9f:e7:09:74:6b:e9:0a:0c:
                    84:ba:d0:cc:1a:cb:3b:72:48:03:6b:62:ea:45:f3:
                    0e:22:32:9d:e1:4c:1f:db:0e:46:dd:32:8b:e2:df:
                    c7:d7:80:50:3a:b8:7f:2d:79:8e:bc:e8:9f:53:46:
                    f2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F4:BF:E7:1F:E7:29:E2:EA:B6:B3:35:0F:45:EA:5A:EB:89:B4:FA
            X509v3 Authority Key Identifier:
                keyid:3E:36:35:53:4C:52:68:C5:F8:F3:1D:91:04:54:01:8D:21:BB:A9:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3635534C5268C5F8F31D910454018D21BBA954.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/323830343a323730303a3a2f33322d3335203d3e20323633383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2700::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:79:b5:e8:54:88:f7:37:dc:2b:e8:dc:81:87:db:59:01:80:
         7e:8d:b1:fe:8f:05:a4:3e:b7:72:16:6a:4c:05:d6:20:a0:01:
         00:1c:9a:65:c3:51:3b:c0:f8:48:14:6b:19:40:0d:40:8e:72:
         cc:d4:69:60:61:d6:4c:27:74:30:d2:92:64:db:bc:9d:b2:b9:
         b4:9b:8c:28:ae:38:97:7a:3a:8a:f1:48:31:5b:ec:40:08:73:
         48:a6:4f:49:88:02:f7:61:47:91:6a:45:27:4d:a9:7a:a0:65:
         15:48:ca:4c:28:22:79:03:be:1b:3a:ad:c1:74:ba:d9:ba:8c:
         89:04:81:52:aa:52:d7:19:42:08:1b:20:02:7c:5f:a2:28:2c:
         6d:2d:55:67:91:1a:90:6e:8e:db:72:f1:b5:25:cc:23:24:b9:
         d3:09:32:61:67:70:54:88:c8:70:df:66:60:2b:aa:3b:fe:91:
         ae:c9:6c:37:f3:45:d7:53:a5:0e:74:93:9f:77:71:36:fd:c9:
         ba:a5:00:24:6e:4a:20:92:a1:d9:0e:81:b6:54:4f:f8:29:ad:
         b1:c7:ff:44:10:1b:b0:11:a6:82:48:80:95:d1:8c:e8:8f:df:
         70:24:8e:09:48:35:36:66:c5:fd:90:50:15:94:07:13:86:a0:
         43:b3:d8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:11:45 2026 by rpki-client