Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a3a2f33322d3332203d3e20323639353332.roa
File:                     323830343a363631343a3a2f33322d3332203d3e20323639353332.roa (raw, json)
Hash identifier:          ZbjsSwMRWm9SrcYoBYdOEKdQGPU9q8shbg/hbHCpkQk=
Subject key identifier:   AA:C1:0B:FE:AB:FC:94:32:46:A3:05:AD:E9:BF:68:17:2E:83:55:74
Certificate issuer:       /CN=C3976BFC098E04D93A5507BBB046C3608B889670
Certificate serial:       47087FB61E9E417F53A4207D8329BB00DA2EB4B5
Authority key identifier: C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a3a2f33322d3332203d3e20323639353332.roa
Signing time:             Wed 04 Feb 2026 20:00:01 +0000
ROA not before:           Wed 04 Feb 2026 19:55:01 +0000
ROA not after:            Wed 03 Feb 2027 20:00:01 +0000
asID:                     269532
IP address blocks:        2804:6614::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl
                          rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:08:7f:b6:1e:9e:41:7f:53:a4:20:7d:83:29:bb:00:da:2e:b4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3976BFC098E04D93A5507BBB046C3608B889670
        Validity
            Not Before: Feb  4 19:55:01 2026 GMT
            Not After : Feb  3 20:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:af:82:97:12:ce:d5:0e:64:f8:a5:f3:7e:f8:
                    44:10:da:36:1a:dd:b4:67:7e:74:7d:71:ea:ba:8c:
                    ad:3d:fe:ae:72:55:1d:ad:bc:bb:bf:03:ee:c9:47:
                    4a:3e:e3:80:82:45:6f:db:57:20:eb:ee:63:fd:1d:
                    92:09:ec:57:d8:00:47:7d:c4:62:7d:f2:d2:41:41:
                    4a:94:1c:39:48:5f:a2:68:3f:4a:9d:26:9d:b6:a9:
                    9e:09:52:eb:44:14:3f:85:bf:c6:41:bf:db:97:ca:
                    53:e7:ef:47:48:27:d9:0d:15:1b:71:2a:c5:ce:c7:
                    b0:16:6a:24:0e:24:65:d3:0f:f5:23:fc:2c:cb:aa:
                    47:a9:92:08:3e:4f:81:20:93:19:ed:ff:19:a9:b1:
                    66:3f:78:41:9d:02:a4:00:fa:df:fb:e4:6d:82:d7:
                    e6:a5:c6:3b:8f:c3:16:78:38:09:6d:5b:fb:b5:fa:
                    f2:a1:a7:8f:15:35:1a:a7:59:7d:21:87:d8:5d:45:
                    bd:56:53:6e:59:d0:44:a9:6b:d5:4c:27:53:80:48:
                    ec:76:b9:a6:e4:6e:f2:be:11:f3:d4:74:60:9f:60:
                    51:93:39:24:94:f8:18:d0:28:77:94:5e:db:0c:b1:
                    0e:a4:42:97:70:a4:aa:96:90:0f:40:d0:61:a7:9d:
                    00:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C1:0B:FE:AB:FC:94:32:46:A3:05:AD:E9:BF:68:17:2E:83:55:74
            X509v3 Authority Key Identifier:
                keyid:C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a3a2f33322d3332203d3e20323639353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6614::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:38:ef:0e:ac:24:d2:8a:99:ff:2d:44:56:17:99:7e:de:07:
         e5:c8:b3:46:c3:0d:14:56:4a:35:8b:a8:52:04:c6:11:fd:f3:
         fe:7d:5b:2e:1f:64:8e:ff:dd:ae:64:6d:ae:85:26:88:65:19:
         92:3e:95:1a:90:82:0a:49:5d:6f:11:01:cf:70:01:b3:a6:3d:
         43:74:b1:62:b0:2d:fd:30:06:6f:b0:fb:a4:40:b7:bc:5c:de:
         5e:a3:40:a9:4d:d8:d3:56:d7:07:e9:3f:5b:7f:a9:6f:9b:9d:
         bb:81:f1:9b:2c:57:51:4d:45:b1:ba:4f:b7:41:3d:43:69:31:
         47:ef:b4:c2:ab:28:b8:e2:08:e8:21:fb:74:11:a1:58:c9:29:
         e0:c6:2f:d7:d0:8c:c0:6d:c8:6c:82:c4:f0:11:50:4a:53:2e:
         ca:ad:cc:e7:dc:42:72:f1:69:ab:f2:05:b6:e1:e0:11:30:6a:
         fb:0a:88:94:b6:d6:e0:4d:16:58:e7:e2:9a:a0:7b:cb:39:e5:
         22:28:9b:03:fb:b9:16:be:5e:70:d6:38:81:78:35:ef:39:07:
         97:1c:fb:c7:b6:10:e4:f8:ea:ce:b6:f0:5e:48:09:1b:4e:86:
         39:17:3c:18:a2:d3:12:b8:8b:34:6d:8c:fd:5e:20:01:ad:ab:
         87:2e:29:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:57:17 2026 by rpki-client