Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/323830343a323133633a3a2f33322d3332203d3e20323634353434.roa
File:                     323830343a323133633a3a2f33322d3332203d3e20323634353434.roa (raw, json)
Hash identifier:          XQ9a/mK/wzbVfiGhxxmLgAEYPiOkfiwVFMVMjLE8kKI=
Subject key identifier:   3C:2A:FA:17:C4:B0:53:C5:F4:E9:3A:C9:5C:CB:FB:EF:34:DE:5F:74
Certificate issuer:       /CN=6B6F4383A1C4D663F536EE4346C3937F192D49C5
Certificate serial:       07A43188C180CB5061D21486B00403E32F4793DB
Authority key identifier: 6B:6F:43:83:A1:C4:D6:63:F5:36:EE:43:46:C3:93:7F:19:2D:49:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B6F4383A1C4D663F536EE4346C3937F192D49C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/323830343a323133633a3a2f33322d3332203d3e20323634353434.roa
Signing time:             Fri 23 Jan 2026 14:31:51 +0000
ROA not before:           Fri 23 Jan 2026 14:26:51 +0000
ROA not after:            Fri 22 Jan 2027 14:31:51 +0000
asID:                     264544
IP address blocks:        2804:213c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/6B6F4383A1C4D663F536EE4346C3937F192D49C5.crl
                          rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/6B6F4383A1C4D663F536EE4346C3937F192D49C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B6F4383A1C4D663F536EE4346C3937F192D49C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:52:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a4:31:88:c1:80:cb:50:61:d2:14:86:b0:04:03:e3:2f:47:93:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B6F4383A1C4D663F536EE4346C3937F192D49C5
        Validity
            Not Before: Jan 23 14:26:51 2026 GMT
            Not After : Jan 22 14:31:51 2027 GMT
        Subject: CN=3C2AFA17C4B053C5F4E93AC95CCBFBEF34DE5F74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ee:82:cb:26:2f:3d:e0:45:27:c1:58:bb:5b:
                    c3:64:c6:51:5d:ca:46:f3:ad:63:12:3d:2d:1c:7f:
                    8d:9d:15:0c:b4:4f:6f:02:be:81:ba:56:85:85:3a:
                    48:e3:dd:52:dc:e8:1b:9a:bc:c0:e2:d4:65:88:e6:
                    8e:dc:13:1d:71:36:61:0f:61:32:06:fb:a5:75:dc:
                    86:0b:f1:5d:78:f2:af:b6:a7:8a:de:96:bb:48:a4:
                    9e:32:03:57:e8:5f:75:15:2b:4b:ee:b5:fb:58:ea:
                    f6:dc:ff:32:48:15:ef:86:f7:12:6a:58:46:f8:16:
                    44:99:d1:44:52:62:42:1c:02:ca:e2:b4:05:90:ff:
                    22:76:8b:03:79:c3:13:9b:99:92:50:39:a0:d6:fe:
                    83:b0:15:dd:d9:da:22:18:96:61:d6:90:d7:e4:f1:
                    59:35:a2:48:9e:a9:f2:4c:ff:e3:78:20:65:c5:d1:
                    2a:46:c3:9f:2c:fc:90:1a:33:0d:fd:4b:00:44:90:
                    68:5d:19:a7:e0:ec:98:64:02:32:31:e3:f2:52:eb:
                    3c:6a:0b:a8:af:02:ef:e4:b6:2a:ec:4b:1d:77:5d:
                    48:a6:ef:fe:06:ad:b2:a5:a2:4c:35:ee:11:3f:ba:
                    44:be:bf:e7:24:b2:8b:00:19:7f:fd:60:fb:ed:de:
                    0f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2A:FA:17:C4:B0:53:C5:F4:E9:3A:C9:5C:CB:FB:EF:34:DE:5F:74
            X509v3 Authority Key Identifier:
                keyid:6B:6F:43:83:A1:C4:D6:63:F5:36:EE:43:46:C3:93:7F:19:2D:49:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/6B6F4383A1C4D663F536EE4346C3937F192D49C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B6F4383A1C4D663F536EE4346C3937F192D49C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/323830343a323133633a3a2f33322d3332203d3e20323634353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:213c::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:f1:5f:bd:b6:87:8e:e2:fb:5a:9d:49:05:b1:5f:e4:44:4a:
         be:ff:4e:24:ec:19:d3:63:5e:5d:03:ce:76:72:ed:5e:05:3d:
         df:9c:36:c2:92:a1:b9:58:d7:24:90:bd:a0:c4:96:b2:a2:74:
         8f:b5:a8:aa:18:8f:22:1a:9d:45:ff:c4:f2:4b:98:48:da:9d:
         d3:0a:d8:db:d8:26:f6:17:bc:14:5c:68:02:cd:4a:20:11:63:
         4d:3f:3b:66:53:8d:3b:2a:54:a0:4f:40:71:d3:f7:6d:01:08:
         5f:30:8a:23:c9:db:11:51:e6:06:9c:8f:79:50:ab:47:4e:be:
         3a:8f:bc:71:67:0b:39:ab:68:60:ed:62:38:16:82:25:9f:e7:
         ad:07:2f:5d:e5:3c:9f:ed:fc:01:3e:f8:ea:d3:f4:dd:9e:21:
         7b:0a:60:7f:67:98:c6:12:16:47:89:26:c4:e1:d2:42:bc:ad:
         7f:c1:ac:a8:e2:f1:e8:cd:31:83:d9:34:4b:21:98:91:64:79:
         13:ca:8f:9f:63:e7:0f:fb:87:3e:d7:76:4a:6c:f1:85:21:88:
         97:86:41:12:25:b5:db:a2:6c:3f:76:3c:75:fa:db:46:a7:44:
         09:44:92:64:05:a6:11:9a:9c:de:43:a4:b6:08:df:20:7d:a1:
         af:61:c2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:58:05 2026 by rpki-client