Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a3a2f33322d3332203d3e20323636333230.roa
File:                     323830343a333630303a3a2f33322d3332203d3e20323636333230.roa (raw, json)
Hash identifier:          KoZmD/idQKS3R1BDmhm+ffCJi5A4XJF92B3jhKYnqtc=
Subject key identifier:   A5:20:EB:FA:94:07:3C:19:6E:AD:40:37:10:CF:36:F2:6A:7A:EF:B2
Certificate issuer:       /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial:       421A55EA7FB0DB60B9DDB4CFE37EF2FB83BEDFC3
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a3a2f33322d3332203d3e20323636333230.roa
Signing time:             Wed 04 Feb 2026 20:00:01 +0000
ROA not before:           Wed 04 Feb 2026 19:55:01 +0000
ROA not after:            Wed 03 Feb 2027 20:00:01 +0000
asID:                     266320
IP address blocks:        2804:3600::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
                          rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1a:55:ea:7f:b0:db:60:b9:dd:b4:cf:e3:7e:f2:fb:83:be:df:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
        Validity
            Not Before: Feb  4 19:55:01 2026 GMT
            Not After : Feb  3 20:00:01 2027 GMT
        Subject: CN=A520EBFA94073C196EAD403710CF36F26A7AEFB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4c:bf:b5:fc:c2:91:7c:f3:48:bc:d0:85:01:
                    af:4b:cd:af:50:62:3e:7b:15:97:86:36:38:70:9e:
                    0a:df:56:03:77:54:ac:cd:62:3a:fe:a8:c2:38:d4:
                    ab:0b:55:26:7e:f5:e0:bb:af:0f:fb:61:ea:d2:62:
                    c6:29:26:24:5e:59:1b:4d:3b:80:df:e4:4d:94:f0:
                    35:30:75:d1:be:ea:44:25:25:78:8e:68:10:a7:d1:
                    71:2a:e3:c0:b5:55:cb:29:df:62:f7:3d:00:63:60:
                    9d:0c:74:1e:b4:3c:c6:b6:1a:45:da:26:c0:b4:44:
                    63:e3:20:61:73:5a:10:4d:6a:67:5c:2d:de:c5:98:
                    d6:85:d2:49:3d:c8:5d:ff:96:3d:e4:2e:bf:e2:7c:
                    e9:bb:e0:f3:e0:ad:d2:5f:53:a1:23:79:be:c5:7d:
                    b0:d3:40:e3:44:7d:7e:ce:37:37:fe:04:1c:9f:32:
                    1c:b8:9e:10:33:a6:da:28:94:8d:7f:eb:0c:cd:56:
                    46:47:23:b6:01:7d:06:af:8e:84:af:84:4b:1e:d2:
                    89:5d:00:01:cc:52:3d:fb:f3:15:da:1c:fd:c8:99:
                    3b:7f:38:f2:92:ed:18:1f:1f:0c:59:e5:33:d8:ce:
                    25:e0:00:df:23:68:b9:f0:28:6c:da:a7:83:a3:8e:
                    41:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:20:EB:FA:94:07:3C:19:6E:AD:40:37:10:CF:36:F2:6A:7A:EF:B2
            X509v3 Authority Key Identifier:
                keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a3a2f33322d3332203d3e20323636333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3600::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:c4:c9:63:56:4f:c0:ec:37:3c:0e:a8:1f:8e:5c:e6:27:34:
         b7:35:24:76:e2:c7:be:e1:4f:a3:f9:99:56:28:31:f6:e4:51:
         6e:4d:61:f4:4f:25:2f:34:fe:51:ab:25:c1:9f:8d:b9:0b:55:
         40:e3:b6:c9:d4:f8:08:8d:5b:7f:bb:16:4e:e7:33:81:7b:11:
         01:96:06:27:e5:b0:e2:31:b0:5a:55:4e:7d:22:76:46:f6:4f:
         23:03:b1:a0:4e:b7:c7:b2:a0:92:9d:6d:b7:21:d1:91:35:71:
         b8:c7:7d:73:9d:e0:f9:2e:97:61:39:d2:89:11:80:be:ef:db:
         c8:87:e6:59:05:1f:e3:15:f6:ca:4a:5b:81:11:58:76:28:10:
         0f:b6:93:8c:79:6e:96:f6:5d:31:9f:37:3d:13:ce:88:be:ee:
         6f:7a:05:8a:a7:61:40:f3:71:d0:f3:85:94:7d:f6:6c:98:a8:
         57:80:eb:cc:7a:06:6d:11:86:3c:bd:32:be:b6:3d:67:10:6b:
         5e:5e:d3:ef:08:a5:6e:af:86:ec:81:4d:67:c4:1c:5b:89:dd:
         45:94:ec:0f:4c:07:c6:58:3c:d1:a9:0f:9e:5f:f6:24:e8:7d:
         a8:60:9c:78:92:b5:1b:d6:e1:69:0a:a1:3a:7a:7a:f2:4c:59:
         47:f9:f7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:04:04 2026 by rpki-client