Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/323830343a323563303a3a2f33322d3332203d3e20323634333030.roa
File:                     323830343a323563303a3a2f33322d3332203d3e20323634333030.roa (raw, json)
Hash identifier:          Qt/16yBf/d9VDc61zX8YWcToo6McOC1RgotZJnO7rvI=
Subject key identifier:   6F:37:AC:F3:95:84:84:9B:A5:33:B5:15:AA:CD:2C:8F:54:95:44:8F
Certificate issuer:       /CN=9BAD7480D68EE59406D3FBBE7F30557285587474
Certificate serial:       C1E691A8536CCB2CDE8B4A72E62B17D70B98CB
Authority key identifier: 9B:AD:74:80:D6:8E:E5:94:06:D3:FB:BE:7F:30:55:72:85:58:74:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAD7480D68EE59406D3FBBE7F30557285587474.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/323830343a323563303a3a2f33322d3332203d3e20323634333030.roa
Signing time:             Thu 05 Feb 2026 06:18:37 +0000
ROA not before:           Thu 05 Feb 2026 06:13:37 +0000
ROA not after:            Thu 04 Feb 2027 06:18:37 +0000
asID:                     264300
IP address blocks:        2804:25c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.crl
                          rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAD7480D68EE59406D3FBBE7F30557285587474.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:04:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c1:e6:91:a8:53:6c:cb:2c:de:8b:4a:72:e6:2b:17:d7:0b:98:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BAD7480D68EE59406D3FBBE7F30557285587474
        Validity
            Not Before: Feb  5 06:13:37 2026 GMT
            Not After : Feb  4 06:18:37 2027 GMT
        Subject: CN=6F37ACF39584849BA533B515AACD2C8F5495448F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ea:31:7d:ee:ab:89:63:3c:f0:1d:b6:f5:a1:
                    17:9e:ab:36:0d:a5:b5:92:d7:4d:99:93:e1:51:7c:
                    b3:32:4a:c2:b0:8c:53:7f:15:22:87:5d:cb:8c:7c:
                    2b:e6:ae:0a:00:83:d8:18:4d:85:72:d4:bd:c4:d3:
                    30:86:dd:b3:2f:4e:a6:d4:6b:4d:7d:bd:2f:12:9c:
                    51:27:b1:ec:ae:71:7e:6a:78:60:57:1f:73:27:22:
                    ee:c9:01:f6:41:a2:9e:e8:aa:3b:23:f9:46:ce:2c:
                    ba:1e:44:fd:43:80:5b:87:eb:cb:73:d2:e3:91:0d:
                    74:87:07:c2:17:c9:92:de:d0:c1:94:22:55:ac:ab:
                    25:e5:ba:e6:ad:a3:6b:78:4e:dd:b2:99:ca:c6:f1:
                    2e:c3:af:b4:d5:19:aa:ac:91:11:87:2f:f3:9f:0f:
                    21:90:0a:97:ee:5a:89:a2:2c:cb:37:f6:86:d3:a4:
                    18:43:8f:58:dd:cb:d3:24:03:cd:f7:6d:4e:53:53:
                    7e:db:cb:ff:7b:3b:80:f6:28:8e:4e:97:06:cd:fd:
                    88:54:db:0f:c6:69:5a:1b:c6:20:4b:eb:40:74:6c:
                    cb:e2:be:36:fa:0a:2d:43:6a:6d:89:7d:02:6b:cf:
                    fa:db:10:17:a3:56:92:a7:61:17:fc:2e:cf:eb:25:
                    e4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:37:AC:F3:95:84:84:9B:A5:33:B5:15:AA:CD:2C:8F:54:95:44:8F
            X509v3 Authority Key Identifier:
                keyid:9B:AD:74:80:D6:8E:E5:94:06:D3:FB:BE:7F:30:55:72:85:58:74:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAD7480D68EE59406D3FBBE7F30557285587474.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/323830343a323563303a3a2f33322d3332203d3e20323634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:2a:c8:e1:11:9e:46:c7:5d:57:82:2e:0b:eb:d9:23:4c:7c:
         f5:28:ce:5f:01:39:93:54:47:00:a6:ee:8b:6c:e3:49:4b:40:
         49:79:0e:99:c9:32:0c:61:8f:2f:2b:c9:f6:98:53:9f:14:9f:
         87:35:a0:a4:40:f5:96:43:ee:bc:5d:61:0b:e2:da:fe:2e:e2:
         39:e5:4f:da:68:7b:02:5c:9e:96:78:bf:df:10:c1:6b:42:f1:
         6d:9e:a3:a6:42:7c:61:b3:26:89:ab:1c:d2:c6:7d:a6:08:c3:
         7b:2e:33:19:0f:31:ab:3b:f4:3d:83:41:b1:69:89:35:26:24:
         59:af:0b:2f:db:01:b2:2f:90:db:42:e1:5d:0a:63:44:3f:3b:
         f7:61:16:5e:eb:18:f3:09:46:17:3e:3a:83:17:79:42:1c:6a:
         b0:c2:ed:98:bb:a6:4e:1b:ac:89:05:ca:77:fb:d6:bc:2e:00:
         bd:50:31:c4:47:ba:e4:06:38:92:ae:e3:18:09:e1:4d:5f:38:
         05:91:a2:8e:8b:7c:8a:a4:b8:52:b6:57:da:c1:53:83:89:b4:
         3a:20:47:32:0e:e4:de:df:5b:65:15:47:7c:a1:52:6c:e5:0b:
         29:0d:3b:f3:95:f8:c8:cc:74:46:07:02:de:e6:fe:21:a1:35:
         64:92:f4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:46:00 2026 by rpki-client