Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/323830343a323930633a3a2f33362d3336203d3e20323633393934.roa
File:                     323830343a323930633a3a2f33362d3336203d3e20323633393934.roa (raw, json)
Hash identifier:          OoFY8c3GVM//33sDtQyF/fuLC3kPOTFUk0efCFmrndM=
Subject key identifier:   EB:DC:21:A8:0B:F0:12:FB:6D:CF:FD:99:BA:B8:52:9C:BA:F1:66:50
Certificate issuer:       /CN=6933A3E9616B92D4A6606885C3C206355CC19035
Certificate serial:       683B20E020BE6889DBB2F6B411EF24E1B3346825
Authority key identifier: 69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/323830343a323930633a3a2f33362d3336203d3e20323633393934.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     263994
IP address blocks:        2804:290c::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl
                          rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 09:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3b:20:e0:20:be:68:89:db:b2:f6:b4:11:ef:24:e1:b3:34:68:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6933A3E9616B92D4A6606885C3C206355CC19035
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject: CN=EBDC21A80BF012FB6DCFFD99BAB8529CBAF16650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3e:39:22:c9:32:4f:20:7e:a6:e7:cd:41:e5:
                    6d:d1:64:de:65:6a:00:0e:7a:8e:01:14:82:10:90:
                    34:74:c9:fd:e4:1c:01:e5:a0:5c:63:b1:69:d5:e6:
                    2f:c0:85:b7:e6:a5:38:8f:7a:35:01:9b:a2:c1:b0:
                    34:99:c9:17:bf:aa:45:25:46:14:db:05:90:01:1f:
                    79:9d:d4:dd:ee:5c:04:4c:93:c3:b5:b2:25:0b:a3:
                    9e:c7:64:2d:d2:df:a0:53:ec:47:34:bf:df:41:3d:
                    58:cf:40:06:80:24:a5:15:98:45:f3:bf:32:72:4a:
                    c1:9d:cd:1d:1d:b9:71:98:77:06:e3:ec:2d:ce:61:
                    f5:bb:11:3b:a0:d1:0e:7a:c0:06:c2:6e:c2:7a:d2:
                    37:b3:8b:85:c9:44:4c:37:65:61:c5:02:e5:bc:16:
                    f6:85:01:7e:3d:d1:68:c1:30:a3:d5:a9:dc:72:07:
                    8c:30:06:20:3b:c1:e0:84:33:59:78:2a:ca:f8:f8:
                    ff:3a:0f:ea:b8:16:06:75:a3:37:28:ed:bd:f7:89:
                    c8:b7:7d:2e:25:a7:b5:ef:5e:80:9e:3e:3b:39:8a:
                    d3:4b:39:19:e0:43:50:4f:21:6a:c0:af:14:18:69:
                    14:7b:bc:59:d0:c3:95:2f:ce:03:ab:de:9c:bf:58:
                    ef:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DC:21:A8:0B:F0:12:FB:6D:CF:FD:99:BA:B8:52:9C:BA:F1:66:50
            X509v3 Authority Key Identifier:
                keyid:69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/323830343a323930633a3a2f33362d3336203d3e20323633393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:290c::/36

    Signature Algorithm: sha256WithRSAEncryption
         50:b3:28:d6:b5:2d:01:d2:47:cd:56:e0:f8:cf:9f:d6:89:96:
         ee:53:b8:05:38:b9:44:65:f9:27:1e:fc:85:e2:10:12:6a:68:
         10:c7:e5:26:5e:74:65:af:a1:9d:76:bb:b2:65:62:ce:74:b2:
         94:e2:f8:75:58:f0:1b:4c:ce:ad:d1:62:c8:e4:4a:88:13:67:
         27:78:46:50:21:e5:f4:8d:05:26:03:0b:9f:30:d6:61:dd:5b:
         f0:fc:bc:8a:47:75:03:5b:c3:c9:0c:99:d4:30:05:2c:9b:cd:
         81:88:0f:f5:06:53:e5:5b:91:63:47:08:82:ec:fc:2e:1b:af:
         b1:a8:79:86:91:97:c9:7b:50:ed:61:ec:51:fa:e8:1a:d6:4b:
         ce:af:3b:8a:fc:72:e1:bb:53:2a:40:a5:e4:b0:29:48:3f:d2:
         b0:ac:4e:b8:a9:04:ba:8d:18:83:23:d2:1f:3e:2b:6b:bb:0d:
         b9:99:d5:f9:16:1d:02:67:41:79:83:bd:12:67:f9:1f:af:76:
         90:8e:68:65:79:46:6a:48:05:45:f1:34:b1:c1:b6:2c:18:f7:
         37:03:0a:87:11:23:9b:df:12:38:d9:13:e4:c0:04:35:d4:ef:
         80:4d:86:7a:24:cf:ec:8b:0e:27:28:58:c1:a0:cb:d7:c8:1b:
         c6:94:0d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:35:15 2026 by rpki-client