Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/323830343a383632633a3a2f33322d3335203d3e20323732363236.roa
File:                     323830343a383632633a3a2f33322d3335203d3e20323732363236.roa (raw, json)
Hash identifier:          8oEyJaHkTAGhqcaJWslRXlZGf9/t7Q/yYXxkDlK28T4=
Subject key identifier:   32:82:7D:A5:07:A6:8F:47:BD:5A:93:AE:3D:C0:A3:BF:6D:6F:E7:02
Certificate issuer:       /CN=CBED8B77145C146C6E2002637F70D52E41B65B78
Certificate serial:       2383C4E79564CC1A41BBA1761E89CC457974CF75
Authority key identifier: CB:ED:8B:77:14:5C:14:6C:6E:20:02:63:7F:70:D5:2E:41:B6:5B:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED8B77145C146C6E2002637F70D52E41B65B78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/323830343a383632633a3a2f33322d3335203d3e20323732363236.roa
Signing time:             Wed 04 Feb 2026 22:46:09 +0000
ROA not before:           Wed 04 Feb 2026 22:41:09 +0000
ROA not after:            Wed 03 Feb 2027 22:46:09 +0000
asID:                     272626
IP address blocks:        2804:862c::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.crl
                          rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED8B77145C146C6E2002637F70D52E41B65B78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:83:c4:e7:95:64:cc:1a:41:bb:a1:76:1e:89:cc:45:79:74:cf:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBED8B77145C146C6E2002637F70D52E41B65B78
        Validity
            Not Before: Feb  4 22:41:09 2026 GMT
            Not After : Feb  3 22:46:09 2027 GMT
        Subject: CN=32827DA507A68F47BD5A93AE3DC0A3BF6D6FE702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:39:3b:dc:92:0e:73:5a:aa:1c:c4:f7:82:83:
                    99:3a:da:f3:ab:b2:4a:e6:2f:1a:66:a4:f2:ca:1a:
                    ae:cb:9d:34:86:48:fb:e8:fd:c9:4f:37:02:29:34:
                    29:28:6b:d2:7c:d1:fe:e1:c8:76:b4:cf:1b:42:db:
                    cc:e1:e7:ac:bc:de:50:dd:40:eb:60:b6:86:30:c2:
                    17:3f:fd:db:88:f1:20:50:94:23:9e:ba:01:10:b6:
                    c7:28:c5:8e:dc:25:0a:e7:32:bb:18:81:2a:76:ca:
                    f0:f7:dd:a6:80:fa:9c:97:a5:54:0e:51:21:9b:25:
                    fb:ca:d2:77:c2:45:b0:32:db:27:1c:89:da:ed:f8:
                    10:e0:d0:d8:80:1c:f9:0b:23:90:46:49:b1:f7:f9:
                    41:30:04:fd:75:e8:39:14:c7:ca:4e:2b:71:c3:5c:
                    c7:6b:aa:00:3d:ee:99:b8:97:f8:67:aa:4e:29:65:
                    96:c7:73:af:54:dd:f7:a7:e2:16:5f:a5:3f:93:9c:
                    1b:40:2a:9e:dc:71:da:07:d9:f3:75:1a:be:7b:59:
                    3b:34:09:ff:01:b7:f8:76:6e:ac:3b:88:c7:af:45:
                    79:ed:87:64:30:7f:fa:60:28:5f:03:f2:39:d2:86:
                    58:0e:cf:6a:ff:e5:03:5a:1b:f9:30:e1:7c:72:58:
                    56:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:82:7D:A5:07:A6:8F:47:BD:5A:93:AE:3D:C0:A3:BF:6D:6F:E7:02
            X509v3 Authority Key Identifier:
                keyid:CB:ED:8B:77:14:5C:14:6C:6E:20:02:63:7F:70:D5:2E:41:B6:5B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED8B77145C146C6E2002637F70D52E41B65B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/323830343a383632633a3a2f33322d3335203d3e20323732363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:862c::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:18:c9:d7:f5:0c:f7:67:81:83:29:67:e2:0e:28:d1:32:11:
         e0:bb:52:0d:f1:c9:28:7f:28:97:e0:ca:45:60:99:02:ba:6f:
         3b:64:db:06:ae:33:6a:81:b6:47:90:f5:f8:4a:c0:2d:c2:f5:
         49:a6:2d:6c:f5:5f:4f:c1:1e:8c:43:9d:b9:a2:e9:45:70:2e:
         27:00:8d:8f:24:90:76:5d:77:01:8b:e7:2d:7b:2b:0d:02:c9:
         2a:10:30:5d:d8:11:c5:0c:f0:e3:5c:a3:11:87:47:01:4e:0b:
         b1:8a:c8:94:ce:e9:df:0c:4f:12:41:56:03:3a:d7:7c:1b:22:
         1d:f0:4d:79:7d:41:72:92:d6:53:32:03:a9:9e:2c:6c:6a:25:
         28:3b:3f:a3:b5:6d:2a:c9:95:24:18:b4:f2:a4:29:ac:b4:58:
         84:9d:d2:02:95:14:b9:49:d2:56:b9:83:1f:23:bf:b8:b7:ed:
         80:d4:2b:f0:71:3a:c5:28:23:ab:9e:25:b4:02:f9:a2:1d:2f:
         00:20:f1:25:cf:f3:83:b8:50:e4:a3:f8:c4:54:7b:c3:d2:dd:
         3e:18:58:de:b2:7f:db:b2:1d:ba:37:20:17:c5:62:c2:be:5f:
         c0:aa:23:06:c2:af:08:15:94:81:2b:98:51:e3:d1:07:7e:de:
         38:94:8c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:20:52 2026 by rpki-client