Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/323830343a323964303a383030303a3a2f33332d3333203d3e20323634303336.roa
File:                     323830343a323964303a383030303a3a2f33332d3333203d3e20323634303336.roa (raw, json)
Hash identifier:          bMZRiDJZfvpXMvyNKZOy/m32iuSPLcGIg7ky+Zs70wI=
Subject key identifier:   68:22:DE:56:D8:5F:CD:5A:E5:39:13:F1:59:5C:79:80:77:E0:1C:EF
Certificate issuer:       /CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
Certificate serial:       46DED9B1F68A9B6970634AA9D89065DF1DB5099C
Authority key identifier: 8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/323830343a323964303a383030303a3a2f33332d3333203d3e20323634303336.roa
Signing time:             Mon 02 Feb 2026 12:28:50 +0000
ROA not before:           Mon 02 Feb 2026 12:23:50 +0000
ROA not after:            Mon 01 Feb 2027 12:28:50 +0000
asID:                     264036
IP address blocks:        2804:29d0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl
                          rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:de:d9:b1:f6:8a:9b:69:70:63:4a:a9:d8:90:65:df:1d:b5:09:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
        Validity
            Not Before: Feb  2 12:23:50 2026 GMT
            Not After : Feb  1 12:28:50 2027 GMT
        Subject: CN=6822DE56D85FCD5AE53913F1595C798077E01CEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:79:48:96:e2:95:ae:06:65:df:27:5e:c3:92:
                    58:22:d4:6f:00:aa:ae:42:af:52:66:40:0e:5c:73:
                    3d:4c:98:8c:39:fe:65:27:20:48:75:e2:b6:95:5c:
                    88:96:c5:5b:79:8d:c8:fa:43:d6:3d:07:9f:a8:c5:
                    28:73:64:ed:b8:5f:8f:7b:1a:b0:7d:6e:82:c9:0d:
                    56:b5:14:52:0c:53:ee:f7:27:26:85:cf:62:cc:09:
                    ab:5b:0a:a8:a3:0a:6a:8c:b6:3c:d2:57:dc:31:b4:
                    2d:ac:56:4d:49:19:04:b4:83:b5:5e:4e:03:3a:17:
                    53:5f:31:44:c8:d1:78:df:3c:74:6f:2b:fc:e7:35:
                    48:9e:e5:7c:ca:17:c9:3c:15:d7:5e:a2:45:2f:37:
                    b3:1b:fe:b2:fb:66:af:62:c8:8c:cd:c1:64:2c:ad:
                    23:da:cc:04:69:73:ac:fb:90:6d:b4:82:f9:e7:70:
                    22:87:00:c3:87:d4:dc:29:66:79:1a:fd:fd:a8:9e:
                    38:69:6f:e1:c7:c9:a6:6c:0d:d3:c1:50:f7:22:d7:
                    6a:bd:77:8b:aa:56:a2:f4:1a:a9:7e:25:81:17:58:
                    83:2a:76:14:d1:bd:77:b0:87:91:d7:5a:d5:d4:62:
                    2b:cb:61:ec:1b:e3:ee:60:44:e5:ca:94:d4:f5:81:
                    6f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:22:DE:56:D8:5F:CD:5A:E5:39:13:F1:59:5C:79:80:77:E0:1C:EF
            X509v3 Authority Key Identifier:
                keyid:8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/323830343a323964303a383030303a3a2f33332d3333203d3e20323634303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:29d0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8a:94:d7:81:fa:5c:4d:57:37:62:45:ca:68:32:6f:38:e6:fb:
         c7:5c:15:0e:c6:59:c1:60:dd:77:ac:11:3a:14:0a:9c:9a:0c:
         7d:a0:7e:4f:79:37:cd:f6:79:cc:37:b7:7a:82:4a:7c:4d:7c:
         fd:b3:a1:79:f0:87:a4:8f:99:17:05:ef:20:78:2c:9c:a4:33:
         c2:8c:8c:6e:82:bc:b5:69:68:b1:bb:66:6b:95:d8:09:83:24:
         9f:97:2d:1f:27:06:9b:ba:24:5b:e9:78:87:ed:95:11:a5:e2:
         98:f8:4b:47:10:20:5d:2b:02:65:b0:b0:e9:be:84:03:2d:8b:
         61:5b:3e:8a:2d:fd:cc:de:e3:1f:8c:d7:f3:02:4b:e0:fa:42:
         1d:5d:3f:f8:a9:6c:6f:ab:10:28:da:11:39:61:60:b5:ab:0e:
         e8:6d:f2:d7:06:bb:08:fd:15:cc:b0:86:34:ce:6f:82:a8:f7:
         0b:7f:f8:c6:4b:fb:16:4f:fe:50:03:d2:86:75:a4:4e:97:10:
         57:a9:5d:63:f7:46:ce:8d:85:7d:4c:d8:50:e7:9c:d1:1f:fc:
         a0:17:4f:19:47:30:a9:8d:7d:47:2d:46:94:ab:af:4d:97:c8:
         68:44:d7:c0:b5:5d:1a:62:ed:ec:9a:1d:b9:2c:5c:9e:3a:56:
         ca:8f:5d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:07:30 2026 by rpki-client