Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/323830343a323964303a3a2f33332d3333203d3e20323634303336.roa
File:                     323830343a323964303a3a2f33332d3333203d3e20323634303336.roa (raw, json)
Hash identifier:          wWbxHfvF9GnidGTEqyu+J2EKuLdU6+0ggtFCS5wDyIc=
Subject key identifier:   2C:F3:DE:46:45:45:3E:87:7B:0F:A2:B2:22:21:5E:FC:58:02:42:93
Certificate issuer:       /CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
Certificate serial:       08998FCAA9ECF499927037106175C85FC04CC961
Authority key identifier: 8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/323830343a323964303a3a2f33332d3333203d3e20323634303336.roa
Signing time:             Mon 02 Feb 2026 12:28:50 +0000
ROA not before:           Mon 02 Feb 2026 12:23:50 +0000
ROA not after:            Mon 01 Feb 2027 12:28:50 +0000
asID:                     264036
IP address blocks:        2804:29d0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl
                          rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:99:8f:ca:a9:ec:f4:99:92:70:37:10:61:75:c8:5f:c0:4c:c9:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
        Validity
            Not Before: Feb  2 12:23:50 2026 GMT
            Not After : Feb  1 12:28:50 2027 GMT
        Subject: CN=2CF3DE4645453E877B0FA2B222215EFC58024293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e8:2c:60:24:de:b1:af:6d:92:d8:d3:2d:56:
                    49:23:b5:6a:7a:39:76:a3:21:1a:8c:cd:80:6f:04:
                    ce:59:17:a8:2c:6b:8b:6b:75:88:46:59:62:58:47:
                    27:52:67:35:18:1c:63:37:72:47:42:ff:ab:e6:88:
                    76:23:62:9b:83:46:40:21:4f:b0:4a:b6:cd:cf:e7:
                    3b:25:b3:ce:17:1d:56:46:3d:fe:e5:7c:d3:a8:13:
                    57:d1:de:a5:fa:42:85:af:7f:71:3f:eb:25:a5:08:
                    10:eb:67:e2:4f:14:13:7b:7c:30:59:48:3b:3f:50:
                    9f:af:06:42:f4:38:0c:fc:52:55:87:32:7a:70:75:
                    fa:16:3b:84:4f:81:b6:00:0b:f2:0b:ad:83:70:58:
                    78:fe:36:25:ab:da:c6:dd:b7:77:f0:39:ce:5a:48:
                    06:52:44:7b:9a:d9:f2:30:86:fd:b5:80:9b:cc:44:
                    d4:50:4a:58:91:9e:cb:b8:05:3d:31:72:8f:da:8e:
                    87:8c:5f:45:a9:27:fa:86:fb:aa:7b:77:7d:48:f3:
                    6d:71:57:ad:cd:03:77:2f:45:24:b6:2f:6d:53:ef:
                    8f:36:24:ea:38:1c:71:50:5e:bf:c1:de:da:8f:a9:
                    a8:36:02:79:7c:80:8c:65:25:48:8b:58:33:46:67:
                    e3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F3:DE:46:45:45:3E:87:7B:0F:A2:B2:22:21:5E:FC:58:02:42:93
            X509v3 Authority Key Identifier:
                keyid:8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/323830343a323964303a3a2f33332d3333203d3e20323634303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:29d0::/33

    Signature Algorithm: sha256WithRSAEncryption
         6e:7a:5a:e1:69:64:d2:03:2b:40:89:be:da:1e:44:e7:ff:3e:
         e7:23:14:e3:db:6a:c7:54:af:2c:ea:39:0d:1a:af:bb:c5:cc:
         a0:57:1a:12:2d:d6:70:d8:99:aa:f6:73:ec:ce:52:bc:f7:27:
         e5:de:9a:3d:db:cc:6a:02:f6:f8:e0:54:2a:70:7c:4b:1b:8a:
         30:33:50:45:51:32:bb:09:69:8a:8e:36:15:0d:38:25:f7:36:
         43:77:b6:7b:21:eb:9c:57:0f:e2:8e:03:bc:d6:4c:b0:9a:6b:
         1a:f6:b0:84:af:12:81:eb:f9:2d:8c:25:2c:d8:86:35:90:37:
         a8:bf:b7:3a:c4:9d:f7:af:4f:b8:04:53:51:e5:b6:5e:dc:a8:
         31:13:19:e6:b1:3b:9b:4d:7a:7e:09:1d:8c:2b:0d:6c:53:b5:
         87:84:51:91:f5:bf:c6:44:88:ad:ed:1a:f6:2b:ba:8f:71:46:
         a7:6a:1e:fd:a5:9d:a5:b9:a7:dd:ce:0a:15:12:23:77:42:b8:
         1e:58:db:76:3f:da:5c:5f:0c:81:a4:7d:83:64:f1:1b:82:d0:
         d7:d0:41:d9:f2:98:10:87:9b:0f:7b:a9:e4:24:d9:69:ce:9e:
         c2:a7:1d:7e:af:0e:41:f6:c1:d1:77:a8:ed:91:29:03:34:8b:
         e0:23:bd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:34:37 2026 by rpki-client