Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/323830343a376566303a3a2f33322d313238203d3e20323731363536.roa
File:                     323830343a376566303a3a2f33322d313238203d3e20323731363536.roa (raw, json)
Hash identifier:          sclsUtdBQRqfjuu39NM53Gfx9Sul3Ns7F4Is0L4g/zo=
Subject key identifier:   A3:B2:D9:96:96:D2:D5:7A:75:9C:C3:F1:B6:A6:AC:4E:17:AA:60:27
Certificate issuer:       /CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
Certificate serial:       6E06B703601CC04D80F14C0E3DE5C43721CFC1D5
Authority key identifier: 40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/323830343a376566303a3a2f33322d313238203d3e20323731363536.roa
Signing time:             Wed 07 Jan 2026 13:33:24 +0000
ROA not before:           Wed 07 Jan 2026 13:28:24 +0000
ROA not after:            Wed 06 Jan 2027 13:33:24 +0000
asID:                     271656
IP address blocks:        2804:7ef0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl
                          rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:54:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:06:b7:03:60:1c:c0:4d:80:f1:4c:0e:3d:e5:c4:37:21:cf:c1:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
        Validity
            Not Before: Jan  7 13:28:24 2026 GMT
            Not After : Jan  6 13:33:24 2027 GMT
        Subject: CN=A3B2D99696D2D57A759CC3F1B6A6AC4E17AA6027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:70:98:5c:1b:c0:8e:b7:45:39:d7:45:86:8b:
                    ff:47:aa:d5:94:9f:6f:39:57:2c:b7:6c:32:c2:4f:
                    5b:b1:b5:e6:36:fe:ce:49:71:2b:07:d7:38:75:12:
                    8b:cd:d8:1b:58:81:9e:d1:c0:b2:0c:6d:f6:1f:29:
                    65:6e:50:90:af:8d:07:e5:29:14:3d:f7:e9:f2:05:
                    57:d5:2f:98:45:7a:03:72:d2:c8:a8:f4:22:e8:85:
                    92:13:ac:7a:28:ce:55:a2:65:87:71:b3:ff:bb:6f:
                    97:a2:22:0c:b3:f7:27:3a:2b:95:3c:e4:50:79:78:
                    89:12:70:87:39:a3:90:dc:cb:2b:75:96:5b:40:4d:
                    cd:64:15:10:f3:84:e8:59:a3:44:51:c3:db:3e:37:
                    ab:3f:01:50:0e:3e:bb:66:f6:45:d0:8c:6b:58:16:
                    fc:68:10:2c:74:d1:db:dd:a7:16:72:73:ad:6a:d1:
                    92:dc:b1:5b:6d:8e:40:84:cd:6e:0b:80:b9:b1:1e:
                    78:b2:d8:db:b7:ea:20:bf:81:57:b7:36:97:66:ed:
                    74:ce:de:d9:01:20:b2:fe:56:60:90:56:35:64:b9:
                    df:3a:5c:06:66:74:72:99:45:7a:a7:88:a1:a0:7f:
                    7f:f8:8d:10:64:e4:56:9a:fd:49:33:c3:24:87:91:
                    2e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B2:D9:96:96:D2:D5:7A:75:9C:C3:F1:B6:A6:AC:4E:17:AA:60:27
            X509v3 Authority Key Identifier:
                keyid:40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/323830343a376566303a3a2f33322d313238203d3e20323731363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ef0::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:8f:a6:bd:be:de:ae:c2:ff:b5:eb:4f:e8:00:1a:67:60:b0:
         d5:be:01:35:04:1b:13:11:af:77:dc:7f:4e:80:6e:43:40:2f:
         ba:75:5e:d1:34:1d:84:b5:37:81:12:a4:b0:a7:e8:07:19:72:
         75:df:37:5a:1f:1c:60:3d:03:a2:ed:8e:3f:81:88:e9:38:bf:
         83:31:f8:3e:13:ba:3b:ac:f4:0a:b7:26:6c:0e:cb:80:45:fc:
         36:f2:d3:92:66:7e:27:52:01:e6:0e:ef:be:d8:87:09:3a:e2:
         1f:9b:79:87:56:d2:c3:0c:a6:d9:2d:95:77:57:14:b4:4d:42:
         aa:6f:5c:ad:b0:6f:f9:cd:05:a1:d3:1b:11:49:ee:b9:8b:f0:
         ba:03:57:75:e2:9c:77:72:1b:69:19:9d:d8:b8:c4:8c:d1:90:
         08:94:31:0a:20:13:e2:5a:fd:41:59:0e:cb:d1:0a:04:b0:af:
         c4:c8:5a:44:62:7e:71:81:8c:45:f1:1a:8b:85:c4:2d:9e:61:
         a8:8c:5b:31:c7:71:38:41:f8:b4:30:0a:30:93:6c:c8:03:6d:
         95:84:e3:f7:3b:05:30:56:d5:69:1a:51:e7:d5:b1:5e:20:5d:
         c0:ab:3c:44:ca:2a:36:ae:10:e4:77:fd:e8:98:80:0b:78:2d:
         c0:51:4e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:25:12 2026 by rpki-client