Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/323830343a336333343a3530303a3a2f34382d3438203d3e20323636313936.roa
File:                     323830343a336333343a3530303a3a2f34382d3438203d3e20323636313936.roa (raw, json)
Hash identifier:          +q3cBzv9ah4LjoIZGEiSavYgLm+YZUrAJpD5FEJhSfE=
Subject key identifier:   7C:CB:27:6E:67:A6:7A:A6:E1:01:D0:A8:EE:A7:C0:3B:C6:62:E4:C5
Certificate issuer:       /CN=234C60379F9378C4E127C3D54D29A62E7B997221
Certificate serial:       23244A77B56D3F119C3D278DAC0EF6F805E80F3F
Authority key identifier: 23:4C:60:37:9F:93:78:C4:E1:27:C3:D5:4D:29:A6:2E:7B:99:72:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/234C60379F9378C4E127C3D54D29A62E7B997221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/323830343a336333343a3530303a3a2f34382d3438203d3e20323636313936.roa
Signing time:             Tue 03 Feb 2026 13:28:44 +0000
ROA not before:           Tue 03 Feb 2026 13:23:44 +0000
ROA not after:            Tue 02 Feb 2027 13:28:44 +0000
asID:                     266196
IP address blocks:        2804:3c34:500::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/234C60379F9378C4E127C3D54D29A62E7B997221.crl
                          rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/234C60379F9378C4E127C3D54D29A62E7B997221.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/234C60379F9378C4E127C3D54D29A62E7B997221.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:35:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:24:4a:77:b5:6d:3f:11:9c:3d:27:8d:ac:0e:f6:f8:05:e8:0f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234C60379F9378C4E127C3D54D29A62E7B997221
        Validity
            Not Before: Feb  3 13:23:44 2026 GMT
            Not After : Feb  2 13:28:44 2027 GMT
        Subject: CN=7CCB276E67A67AA6E101D0A8EEA7C03BC662E4C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1a:22:58:bc:87:7f:02:4c:70:fe:18:87:48:
                    22:40:f4:09:88:85:f8:74:88:67:9f:30:13:24:b1:
                    66:d3:c6:f4:33:53:19:96:d9:b2:4d:6a:d1:a0:6d:
                    f4:69:75:dc:d1:82:94:d6:a3:01:7b:a3:60:4a:2a:
                    ef:ea:bc:45:67:78:1d:14:e7:23:00:8a:0a:c9:37:
                    f0:20:73:ec:be:0e:5d:2e:f7:63:db:81:54:79:0a:
                    ab:ff:0b:8f:42:6a:17:22:43:40:de:bd:52:04:ac:
                    1b:1f:b6:2b:7a:3d:b7:50:25:ea:1b:a7:e0:f9:9c:
                    fd:8d:5e:93:db:50:e5:80:0b:26:c5:70:e8:87:cd:
                    d6:e3:ef:9a:2a:0d:0c:d6:fc:78:85:14:17:c6:58:
                    cb:f5:25:6c:70:ff:3d:76:57:7f:c6:9e:d4:39:1e:
                    30:25:74:21:63:15:50:c6:3a:f3:9f:fa:ad:21:e2:
                    57:41:d6:95:22:c9:f5:24:4c:fc:06:01:1f:ad:e7:
                    86:3d:52:7b:76:98:89:e7:18:48:0f:c6:91:05:bc:
                    70:d7:d8:a9:50:57:4a:d6:1d:09:84:80:a3:8a:1f:
                    c5:1c:d4:1b:ec:1b:bf:d9:ba:be:99:f0:95:f0:f9:
                    53:c0:93:c8:f1:dc:4e:aa:a1:f8:4b:27:1b:c0:52:
                    c3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CB:27:6E:67:A6:7A:A6:E1:01:D0:A8:EE:A7:C0:3B:C6:62:E4:C5
            X509v3 Authority Key Identifier:
                keyid:23:4C:60:37:9F:93:78:C4:E1:27:C3:D5:4D:29:A6:2E:7B:99:72:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/234C60379F9378C4E127C3D54D29A62E7B997221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/234C60379F9378C4E127C3D54D29A62E7B997221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/323830343a336333343a3530303a3a2f34382d3438203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c34:500::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:3b:24:d7:aa:9c:86:17:eb:02:3f:2e:7e:d6:38:ef:dc:d4:
         ae:8e:30:a2:b7:ef:68:c0:92:11:4a:16:e0:e0:09:b3:b4:f0:
         08:da:09:12:1e:c1:f9:37:3d:18:ec:30:16:b1:37:a3:28:35:
         aa:58:41:b3:24:b7:27:76:d3:65:55:7e:9d:7a:0c:76:ae:72:
         14:22:bb:17:1e:ba:a7:63:8c:37:f5:71:3e:cd:ce:03:c0:9f:
         7e:3a:09:83:4f:ea:2e:f5:b1:d8:e7:c1:bb:4d:8f:2f:f3:cc:
         0b:62:31:02:4c:c6:8b:1b:8f:fd:5a:59:93:f9:3b:56:6a:16:
         92:94:bf:ea:7f:78:44:f8:75:9a:be:17:e3:eb:60:a9:c4:84:
         6d:44:11:c0:27:65:ef:a8:80:cd:a4:8a:55:81:18:d1:23:13:
         d5:0f:45:87:16:cc:39:2f:65:66:76:8c:24:94:58:06:fd:aa:
         03:f1:54:2f:32:a6:6d:5c:77:e7:e5:7a:37:44:3c:06:a4:39:
         79:df:b4:a0:33:94:b8:19:1c:8d:2f:9c:f1:1d:42:c7:a2:2c:
         6d:23:16:d4:0e:4b:bc:63:5c:2b:50:bd:0f:56:d4:4a:9f:de:
         94:cd:ee:31:97:fd:5c:79:b6:4d:af:67:0e:56:1c:09:d8:3a:
         7a:4e:f4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:39:38 2026 by rpki-client