Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a343030303a3a2f33342d3334203d3e20323636333230.roa
File:                     323830343a333630303a343030303a3a2f33342d3334203d3e20323636333230.roa (raw, json)
Hash identifier:          3YOSdlF0/WjO9/uxapKu6mRCUft8cRfun1hmMXKISVQ=
Subject key identifier:   6F:EB:F2:CB:62:73:C9:45:3D:A2:E9:EA:A5:37:7F:02:B6:6D:EC:D2
Certificate issuer:       /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial:       2F750C45F14B62FE9A38DB8DDF5E4BF8250612DC
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a343030303a3a2f33342d3334203d3e20323636333230.roa
Signing time:             Wed 04 Feb 2026 20:00:03 +0000
ROA not before:           Wed 04 Feb 2026 19:55:03 +0000
ROA not after:            Wed 03 Feb 2027 20:00:03 +0000
asID:                     266320
IP address blocks:        2804:3600:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
                          rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:75:0c:45:f1:4b:62:fe:9a:38:db:8d:df:5e:4b:f8:25:06:12:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
        Validity
            Not Before: Feb  4 19:55:03 2026 GMT
            Not After : Feb  3 20:00:03 2027 GMT
        Subject: CN=6FEBF2CB6273C9453DA2E9EAA5377F02B66DECD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:60:d5:d3:92:47:d5:30:13:6b:6a:dc:4b:5a:
                    73:a4:c3:8a:1b:4f:c9:e9:6d:ef:ba:f0:41:f5:c8:
                    f4:94:03:92:3e:12:02:9d:7f:4d:e8:e1:37:d3:b1:
                    b9:19:c8:8a:11:1a:dc:f0:14:2b:88:5c:53:4d:b5:
                    4e:11:6a:7a:92:a7:1c:da:0a:45:8c:a3:78:07:3d:
                    e6:4f:ad:07:67:aa:f6:3a:09:06:05:85:bc:c1:9d:
                    58:8d:13:53:2e:e0:2c:4b:e7:66:80:68:0b:2d:e6:
                    f0:66:2d:3d:61:5f:c7:db:83:81:bc:8c:77:cf:25:
                    92:b4:02:e7:31:fd:eb:d4:0b:fa:01:ef:ec:1e:81:
                    a4:2b:da:94:e2:13:e8:34:05:75:c8:d9:62:96:42:
                    7d:2c:10:4a:2a:95:d4:e8:a1:ed:0d:fe:2f:11:57:
                    c6:02:ea:9d:54:0b:ba:16:3e:8f:57:fb:0a:95:7a:
                    a4:16:f9:81:1e:98:97:d6:ee:a9:bd:89:02:77:1b:
                    38:ce:25:36:97:4e:18:78:4e:e7:f3:d0:45:2f:d1:
                    2c:e9:dc:a4:1b:a1:f8:08:73:1a:b4:00:38:00:9e:
                    58:10:dd:58:d4:a4:c8:41:a4:1f:79:05:bc:11:3c:
                    be:ef:9e:01:0d:f5:45:ca:37:8c:1a:b8:bf:c6:62:
                    f8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:EB:F2:CB:62:73:C9:45:3D:A2:E9:EA:A5:37:7F:02:B6:6D:EC:D2
            X509v3 Authority Key Identifier:
                keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a343030303a3a2f33342d3334203d3e20323636333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3600:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         53:ff:ca:8f:71:cb:0a:a5:da:5d:dc:2e:89:35:35:36:02:e3:
         15:2a:cd:db:be:a7:a1:6a:81:59:7c:51:28:05:18:bf:f6:f7:
         41:94:9d:f4:9e:ee:cc:d9:6a:e5:1b:20:f0:5f:96:0f:6b:00:
         e4:76:19:ae:42:19:da:e0:c5:68:4f:5a:ba:a7:00:4d:ee:f5:
         5a:b7:9a:f4:2e:7f:aa:47:bb:fa:56:7c:88:b6:14:86:b3:9e:
         d6:19:c4:06:3b:b1:be:74:ea:08:09:a9:93:99:9e:27:b6:ed:
         b3:49:be:03:0f:45:d5:a8:d9:c3:47:10:4e:ed:e9:87:88:23:
         00:ce:14:01:29:0c:16:42:a0:21:e9:25:e6:36:49:57:b2:a6:
         91:f2:f4:81:c1:3e:b3:d1:7f:5d:52:91:ed:d6:da:20:a4:7b:
         60:3e:6a:00:73:bd:4a:b3:d2:27:72:a0:ca:83:c5:d5:8e:39:
         23:3f:0f:31:03:58:cb:2a:26:6e:71:43:3f:7e:d3:a2:bd:e9:
         40:42:e0:e6:a6:54:51:b1:d6:e3:fa:10:9a:be:ec:30:7b:7d:
         ca:ab:98:de:7b:fd:6d:b2:2f:a1:ea:4c:0b:fb:7f:1d:a3:58:
         80:90:d2:f9:dc:20:65:2e:47:a1:59:83:14:97:ff:f2:d1:3f:
         9e:aa:1e:a6
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUL3UMRfFLYv6aONuN315L+CUGEtwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM3RDgzOEYxQjU5ODk5RDQ0QjRGQzQwMEZCQzFEREEz
QzBCM0QzMDAeFw0yNjAyMDQxOTU1MDNaFw0yNzAyMDMyMDAwMDNaMDMxMTAvBgNV
BAMTKDZGRUJGMkNCNjI3M0M5NDUzREEyRTlFQUE1Mzc3RjAyQjY2REVDRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOYNXTkkfVMBNratxLWnOkw4ob
T8npbe+68EH1yPSUA5I+EgKdf03o4TfTsbkZyIoRGtzwFCuIXFNNtU4RanqSpxza
CkWMo3gHPeZPrQdnqvY6CQYFhbzBnViNE1Mu4CxL52aAaAst5vBmLT1hX8fbg4G8
jHfPJZK0Aucx/evUC/oB7+wegaQr2pTiE+g0BXXI2WKWQn0sEEoqldTooe0N/i8R
V8YC6p1UC7oWPo9X+wqVeqQW+YEemJfW7qm9iQJ3GzjOJTaXThh4Tufz0EUv0Szp
3KQbofgIcxq0ADgAnlgQ3VjUpMhBpB95BbwRPL7vngEN9UXKN4wauL/GYvglAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUb+vyy2JzyUU9ounqpTd/ArZt7NIwHwYDVR0j
BBgwFoAUHH2DjxtZiZ1EtPxAD7wd2jwLPTAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzZSTnlWamlxWkhRSnM0eGU5OVBuaTU1WndjMzZhcldhdHpEVFIzM0I1
OFcvMS8xQzdEODM4RjFCNTk4OTlENDRCNEZDNDAwRkJDMUREQTNDMEIzRDMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDN0Q4MzhGMUI1OTg5OUQ0
NEI0RkM0MDBGQkMxRERBM0MwQjNEMzAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c2Uk55VmppcVpIUUpzNHhlOTlQbmk1NVp3YzM2YXJXYXR6RFRSMzNCNThXLzEv
MzIzODMwMzQzYTMzMzYzMDMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNjMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigENgBAMA0GCSqGSIb3DQEBCwUA
A4IBAQBT/8qPccsKpdpd3C6JNTU2AuMVKs3bvqehaoFZfFEoBRi/9vdBlJ30nu7M
2WrlGyDwX5YPawDkdhmuQhna4MVoT1q6pwBN7vVat5r0Ln+qR7v6VnyIthSGs57W
GcQGO7G+dOoICamTmZ4ntu2zSb4DD0XVqNnDRxBO7emHiCMAzhQBKQwWQqAh6SXm
NklXsqaR8vSBwT6z0X9dUpHt1togpHtgPmoAc71Ks9IncqDKg8XVjjkjPw8xA1jL
KiZucUM/ftOivelAQuDmplRRsdbj+hCavuwwe33Kq5jee/1tsi+h6kwL+38do1iA
kNL53CBlLkehWYMUl//y0T+eqh6m
-----END CERTIFICATE-----
Generated at Thu Feb 19 03:04:36 2026 by rpki-client