Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a3a2f33342d3334203d3e20323636333230.roa
File:                     323830343a333630303a3a2f33342d3334203d3e20323636333230.roa (raw, json)
Hash identifier:          bs9qNakZHvN+cmLSwXFt1jhxPd5X7PQQV69Wi/Z2Cz8=
Subject key identifier:   54:D7:D0:C9:C4:E0:51:AF:E7:66:08:31:D8:A3:ED:7A:E6:C9:1D:D9
Certificate issuer:       /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial:       135D7B8442FE86F31697CAC76EDA9E26C6DBA4F9
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a3a2f33342d3334203d3e20323636333230.roa
Signing time:             Wed 04 Feb 2026 20:00:03 +0000
ROA not before:           Wed 04 Feb 2026 19:55:03 +0000
ROA not after:            Wed 03 Feb 2027 20:00:03 +0000
asID:                     266320
IP address blocks:        2804:3600::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
                          rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5d:7b:84:42:fe:86:f3:16:97:ca:c7:6e:da:9e:26:c6:db:a4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
        Validity
            Not Before: Feb  4 19:55:03 2026 GMT
            Not After : Feb  3 20:00:03 2027 GMT
        Subject: CN=54D7D0C9C4E051AFE7660831D8A3ED7AE6C91DD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c1:d7:ea:d3:ad:3f:b3:0c:de:79:b1:10:ac:
                    e1:5a:54:38:f6:d5:3d:78:3e:82:c5:0f:59:4b:1e:
                    02:3c:9c:86:7c:bd:cc:cf:6c:82:b3:8c:90:bf:87:
                    5d:72:b3:19:48:d4:58:c9:ba:d5:d7:50:2d:20:a3:
                    fd:76:df:fb:21:dd:cd:0b:0e:ad:1e:af:3a:f3:8c:
                    9c:39:6d:45:47:05:b4:84:a0:9e:d3:8f:6f:97:24:
                    9c:0c:c0:ef:8d:73:c8:b6:3e:7b:4f:3a:da:27:20:
                    65:2f:a7:79:9f:ce:39:0f:0a:7f:03:32:e2:6d:67:
                    e2:b1:d0:0c:c4:79:10:cd:ea:b0:70:04:bd:39:ca:
                    7c:b0:22:8c:57:c2:63:3f:b5:56:40:7d:f6:01:eb:
                    52:ff:98:b9:c1:95:7d:41:b0:f9:a1:35:07:f0:d4:
                    38:32:67:f5:d3:74:1e:bb:2d:52:17:df:0f:4a:07:
                    ba:40:93:a1:9a:09:58:a2:54:c5:55:96:37:aa:96:
                    13:07:6f:a7:95:51:62:60:5f:52:a5:0c:d4:9a:bb:
                    49:48:80:52:1b:b9:d5:64:95:51:17:ed:2d:ee:f5:
                    37:29:08:b7:89:7a:38:0b:66:a1:8a:3a:43:ef:cb:
                    1e:6f:54:d4:b6:2b:a0:f0:75:01:4e:b2:35:17:fb:
                    73:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D7:D0:C9:C4:E0:51:AF:E7:66:08:31:D8:A3:ED:7A:E6:C9:1D:D9
            X509v3 Authority Key Identifier:
                keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a3a2f33342d3334203d3e20323636333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3600::/34

    Signature Algorithm: sha256WithRSAEncryption
         bc:6f:46:88:01:b3:b9:c0:65:b3:e3:41:eb:38:6a:7d:8d:a6:
         05:5f:0f:c2:ad:68:31:83:dd:dc:dd:e1:ab:8b:1d:af:06:fb:
         af:60:fe:61:08:8b:2e:9d:b2:81:bd:51:b4:9c:ff:bb:04:15:
         a8:e6:dc:ef:04:27:98:39:c3:8d:80:f4:44:4b:51:3b:cd:85:
         8c:eb:17:2b:56:ed:6d:0c:09:d4:63:82:59:8e:80:30:97:64:
         c1:7c:6f:94:43:1c:0f:17:d1:ef:17:bf:00:3d:9c:cb:22:9d:
         47:29:ce:41:8f:33:f4:27:bd:b7:6f:09:a3:f1:09:35:04:51:
         a5:4d:66:b4:f9:39:4b:78:b6:c8:31:ee:ba:50:d8:78:4f:1f:
         ce:1d:c8:98:94:32:f6:c7:b0:5d:97:43:2b:f9:44:a1:e1:2f:
         39:80:08:80:1e:f8:3b:a6:05:e8:5d:e2:e0:6c:83:b8:f8:cf:
         4e:42:2c:90:8d:ca:b1:f5:6e:5f:b6:74:a5:fe:06:e7:2c:72:
         c2:86:9e:6a:48:97:47:88:19:91:01:77:07:5a:fc:50:e2:d1:
         bc:c6:2c:2c:1d:f6:46:96:d8:74:f1:c5:78:be:ce:dc:44:50:
         c8:cd:76:21:59:3e:a1:4c:9f:ba:17:e7:cf:ce:c6:c6:e6:23:
         e8:b2:4a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:33:43 2026 by rpki-client