Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/323830343a366534383a3a2f33322d3335203d3e20323730353836.roa
File:                     323830343a366534383a3a2f33322d3335203d3e20323730353836.roa (raw, json)
Hash identifier:          nFPOmSAfLWs6YOnilTluglYMDMDhIuQzPgJg2Usfc4M=
Subject key identifier:   F0:5C:D8:EF:23:63:29:5D:AE:C8:01:A5:56:4A:19:F4:5F:1A:D4:16
Certificate issuer:       /CN=EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6
Certificate serial:       3A6BBA0DAD503C4F81DFB4FCBCD13259DBE50B22
Authority key identifier: EA:35:0D:DF:6B:8B:36:1C:D6:83:E0:FE:B3:EB:B5:3F:41:71:A9:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/323830343a366534383a3a2f33322d3335203d3e20323730353836.roa
Signing time:             Wed 04 Feb 2026 20:00:02 +0000
ROA not before:           Wed 04 Feb 2026 19:55:02 +0000
ROA not after:            Wed 03 Feb 2027 20:00:02 +0000
asID:                     270586
IP address blocks:        2804:6e48::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.crl
                          rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6b:ba:0d:ad:50:3c:4f:81:df:b4:fc:bc:d1:32:59:db:e5:0b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6
        Validity
            Not Before: Feb  4 19:55:02 2026 GMT
            Not After : Feb  3 20:00:02 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:35:da:3e:18:38:f6:42:d1:7c:22:35:b9:83:
                    53:fc:3e:31:90:43:69:30:5b:b9:64:d5:75:7b:2e:
                    0e:2d:27:f0:c2:41:fd:35:b2:31:65:10:59:e2:49:
                    a4:63:90:71:05:82:06:be:9f:cf:b9:ae:4b:f3:fc:
                    9e:98:68:ba:41:e8:67:75:9f:05:e0:e6:e7:41:6f:
                    3d:02:fd:94:fe:2c:67:75:d8:73:7e:e3:74:18:4f:
                    d5:ff:e8:26:41:26:3b:6d:df:8c:af:03:6e:9a:f1:
                    55:d0:1d:4f:74:a0:b2:86:34:5b:09:c1:37:5e:6d:
                    2c:87:57:bb:38:3a:75:07:b6:db:23:3d:ec:31:9a:
                    70:fa:89:d3:d5:a5:0b:08:72:ee:07:8b:e9:56:8c:
                    b7:a3:d7:37:65:2d:a5:32:1c:be:53:08:0c:87:36:
                    57:8e:88:c2:68:3e:74:84:25:bd:78:97:24:18:a3:
                    5b:2e:e9:b7:41:df:46:6f:c8:24:3d:67:37:0d:7c:
                    69:38:f9:3e:10:ba:b0:aa:51:56:fa:2c:3c:8f:53:
                    0a:c0:d6:62:9b:cc:f7:42:3c:b9:2f:e0:4e:9e:1d:
                    dc:c0:f2:17:e1:a3:73:d2:26:ad:b6:71:4c:c5:f0:
                    94:c6:d2:35:bf:6b:f8:68:7b:7e:42:74:76:7b:2f:
                    15:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5C:D8:EF:23:63:29:5D:AE:C8:01:A5:56:4A:19:F4:5F:1A:D4:16
            X509v3 Authority Key Identifier:
                keyid:EA:35:0D:DF:6B:8B:36:1C:D6:83:E0:FE:B3:EB:B5:3F:41:71:A9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/323830343a366534383a3a2f33322d3335203d3e20323730353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e48::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:26:95:0e:73:ed:af:58:f4:60:7c:f3:b9:40:e1:4b:b7:db:
         2d:e0:a0:1e:ef:90:81:a2:26:29:7a:e9:29:94:81:f0:f1:ca:
         be:4f:1d:25:c6:49:96:a5:66:5f:99:f6:9e:72:13:60:84:ed:
         3a:1d:77:cd:05:96:03:25:87:b3:5a:15:16:49:fb:dc:51:d5:
         46:0f:da:e0:7c:57:26:1d:b4:13:11:c3:4c:ad:a6:d1:c1:d6:
         cb:de:23:e6:a2:29:66:5f:f2:21:4f:0b:07:38:d8:ec:98:42:
         a6:1c:81:12:83:64:5f:3d:a7:ba:3e:12:14:e9:9e:cc:7e:55:
         55:39:14:18:7e:09:ff:dd:71:c5:54:ad:d3:99:1e:c9:9c:b1:
         c4:f6:46:97:c9:20:09:16:23:9f:81:20:35:bf:4a:f5:ae:d4:
         55:6e:ff:ec:79:3d:ab:fd:54:98:f6:b7:c7:ea:9d:2f:9e:0c:
         25:99:8c:aa:db:4d:49:da:77:8a:21:41:0f:64:b8:1b:9d:4d:
         14:18:c3:60:8e:88:a3:66:72:48:e2:19:44:23:e7:49:cb:43:
         c9:90:3c:ba:5a:af:f8:03:a4:b6:b1:b6:7a:74:50:af:6f:1a:
         b4:b7:d2:2e:39:7e:fb:23:ca:33:5b:ae:1a:af:07:ee:a6:4b:
         c4:12:31:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:20:04 2026 by rpki-client