Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/323830343a336333343a3a2f33322d3332203d3e20323636313936.roa
File:                     323830343a336333343a3a2f33322d3332203d3e20323636313936.roa (raw, json)
Hash identifier:          xNNYyZIYIfCRc9ephZTWllP1/zc5K39iUge6pfmVnj0=
Subject key identifier:   D0:38:62:C3:3D:1D:98:60:E2:BA:D3:C4:94:61:6A:D3:7B:5E:A0:62
Certificate issuer:       /CN=234C60379F9378C4E127C3D54D29A62E7B997221
Certificate serial:       4AD23E88187396F01FBAECB8DCCE97C351054F5E
Authority key identifier: 23:4C:60:37:9F:93:78:C4:E1:27:C3:D5:4D:29:A6:2E:7B:99:72:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/234C60379F9378C4E127C3D54D29A62E7B997221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/323830343a336333343a3a2f33322d3332203d3e20323636313936.roa
Signing time:             Tue 03 Feb 2026 13:28:39 +0000
ROA not before:           Tue 03 Feb 2026 13:23:39 +0000
ROA not after:            Tue 02 Feb 2027 13:28:39 +0000
asID:                     266196
IP address blocks:        2804:3c34::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/234C60379F9378C4E127C3D54D29A62E7B997221.crl
                          rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/234C60379F9378C4E127C3D54D29A62E7B997221.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/234C60379F9378C4E127C3D54D29A62E7B997221.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d2:3e:88:18:73:96:f0:1f:ba:ec:b8:dc:ce:97:c3:51:05:4f:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234C60379F9378C4E127C3D54D29A62E7B997221
        Validity
            Not Before: Feb  3 13:23:39 2026 GMT
            Not After : Feb  2 13:28:39 2027 GMT
        Subject: CN=D03862C33D1D9860E2BAD3C494616AD37B5EA062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:21:b3:6c:77:6b:cb:e0:77:8f:5f:5d:34:32:
                    1a:61:56:1a:87:b3:2b:40:7b:46:ab:2f:b0:0c:65:
                    5e:66:3f:7a:72:0e:38:bc:55:1d:c3:0f:88:72:e5:
                    81:08:f3:1a:31:7b:d4:90:d2:4f:f2:53:8c:d1:d8:
                    bd:81:5a:06:76:3f:64:d4:16:c7:ba:54:0f:6f:7e:
                    4a:ea:7b:43:97:5c:39:48:fb:f1:df:8b:97:ba:b5:
                    1b:a9:13:18:56:ad:2e:e2:d9:d2:3d:35:e2:0f:cb:
                    c3:1f:36:a2:0a:ac:45:2d:e1:dc:5e:43:b1:ff:89:
                    a5:0c:bf:25:ee:36:40:ea:77:16:15:12:58:e3:f2:
                    17:23:8a:ac:7a:14:ed:49:32:63:cc:e6:85:a5:70:
                    a9:e4:5a:e5:b1:bd:cb:7a:d1:09:63:e6:73:22:ff:
                    f8:e2:0f:1e:7b:8b:1f:44:f2:dd:8c:84:cf:d6:40:
                    66:1a:2c:d1:a8:76:0d:aa:6a:d0:75:c4:8b:03:d1:
                    38:df:a6:8a:2c:e4:70:bc:dc:4c:13:92:6f:ef:20:
                    41:1e:86:d3:0b:ff:fb:13:1c:1e:17:2f:a4:1d:1b:
                    4c:4c:57:97:c8:a2:06:da:23:0f:4b:57:66:96:a6:
                    9c:ef:cc:ea:09:d8:8d:ea:6a:80:10:ec:00:b2:81:
                    b9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:38:62:C3:3D:1D:98:60:E2:BA:D3:C4:94:61:6A:D3:7B:5E:A0:62
            X509v3 Authority Key Identifier:
                keyid:23:4C:60:37:9F:93:78:C4:E1:27:C3:D5:4D:29:A6:2E:7B:99:72:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/234C60379F9378C4E127C3D54D29A62E7B997221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/234C60379F9378C4E127C3D54D29A62E7B997221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/323830343a336333343a3a2f33322d3332203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c34::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:b5:44:4d:bd:48:84:6e:55:56:1c:40:38:38:3b:26:d4:e9:
         c8:88:c2:30:31:c2:5b:1a:ee:6a:29:72:27:8b:32:21:a0:6a:
         f3:1d:16:b3:c2:c7:e5:12:fe:48:a2:3a:cd:53:40:ef:b1:21:
         86:07:31:f2:80:92:81:cc:f2:3f:be:58:ad:ee:dc:d7:8d:3f:
         c0:06:b9:52:bb:ad:57:54:ca:9c:e8:93:78:a2:05:91:dc:7d:
         97:fc:28:cd:00:d4:b5:4c:37:a3:ea:45:b0:59:ae:1b:9a:b4:
         c3:e8:75:eb:3d:d8:f0:9e:83:b7:bf:72:0a:2a:f2:2f:d3:54:
         65:c4:25:f6:0a:ef:3f:17:ad:0e:18:0b:0e:4c:c3:94:6b:55:
         b5:ba:9c:f1:d2:22:7a:08:ea:06:51:76:32:f2:00:2e:7c:98:
         98:68:b6:c9:28:65:ab:c4:66:7d:10:52:05:c2:27:8a:76:7c:
         06:af:4c:1a:80:fa:65:82:b4:cf:8d:49:c5:29:f6:a0:6b:d6:
         43:ba:05:69:68:10:bb:41:0c:86:95:91:0b:a3:b0:aa:dd:e6:
         34:05:5e:d9:10:ab:61:62:0e:08:52:8b:cc:ad:a7:ae:49:20:
         3c:b9:92:34:34:94:a9:63:5c:9b:8a:3a:d3:44:9e:eb:0c:80:
         06:55:2b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:25:02 2026 by rpki-client