Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/323830343a336562633a3a2f33322d313238203d3e20323636363138.roa
File:                     323830343a336562633a3a2f33322d313238203d3e20323636363138.roa (raw, json)
Hash identifier:          Mvd05f87jEjT+ZtXA4vMj/31PWsW0OXzhH65bZHMeuQ=
Subject key identifier:   88:DA:D4:13:08:8D:02:20:34:B0:E9:35:39:B5:CD:25:F2:C0:37:DF
Certificate issuer:       /CN=500BE7BB5F89AF961567F51B45FD813BDFA6B436
Certificate serial:       70B5267B72CB75121B3B34FFEA373A33D24DC9D5
Authority key identifier: 50:0B:E7:BB:5F:89:AF:96:15:67:F5:1B:45:FD:81:3B:DF:A6:B4:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/323830343a336562633a3a2f33322d313238203d3e20323636363138.roa
Signing time:             Wed 04 Feb 2026 22:34:12 +0000
ROA not before:           Wed 04 Feb 2026 22:29:12 +0000
ROA not after:            Wed 03 Feb 2027 22:34:12 +0000
asID:                     266618
IP address blocks:        2804:3ebc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.crl
                          rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b5:26:7b:72:cb:75:12:1b:3b:34:ff:ea:37:3a:33:d2:4d:c9:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500BE7BB5F89AF961567F51B45FD813BDFA6B436
        Validity
            Not Before: Feb  4 22:29:12 2026 GMT
            Not After : Feb  3 22:34:12 2027 GMT
        Subject: CN=88DAD413088D022034B0E93539B5CD25F2C037DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:78:71:78:64:2d:29:63:d7:e2:a0:3e:32:0e:
                    1d:2a:f5:2c:ba:6c:c1:76:f4:a6:ba:80:77:c6:2d:
                    54:b2:52:f8:fc:c4:60:fb:cc:ee:4d:35:d7:e7:ad:
                    e6:ed:07:aa:ef:f0:b9:a3:e3:81:ca:51:14:a4:09:
                    59:26:c4:e2:f5:6c:2e:01:d1:22:ba:40:33:c0:1f:
                    7e:69:1e:0c:05:ac:6e:89:3c:33:53:5a:d3:00:3d:
                    e2:f1:ae:81:db:1d:d3:df:d9:ea:b0:97:14:53:d5:
                    f8:78:e9:f6:c0:7f:d1:04:90:eb:c0:2d:5b:b6:57:
                    9b:2a:65:fb:84:ca:22:cf:58:34:21:e5:28:d4:3c:
                    02:e1:f7:a7:e1:86:23:a6:94:60:ee:a8:21:6a:a9:
                    8a:96:cf:50:dc:34:66:b2:c2:97:76:af:b6:1d:ab:
                    4b:0d:1b:8e:da:d1:83:ac:7d:5c:33:29:09:7b:13:
                    23:59:7c:09:5b:e5:fd:80:53:81:9d:22:d2:bb:6d:
                    e7:57:87:e5:74:40:cf:82:17:f4:9a:0b:a4:14:0f:
                    c2:b1:46:d5:37:c9:39:da:86:1f:36:73:3e:4b:38:
                    38:30:e2:47:59:43:de:bc:c1:b2:b5:ed:5e:2a:cb:
                    9f:23:b3:ac:32:eb:a3:b8:42:f0:01:66:72:b7:9f:
                    40:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:DA:D4:13:08:8D:02:20:34:B0:E9:35:39:B5:CD:25:F2:C0:37:DF
            X509v3 Authority Key Identifier:
                keyid:50:0B:E7:BB:5F:89:AF:96:15:67:F5:1B:45:FD:81:3B:DF:A6:B4:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/323830343a336562633a3a2f33322d313238203d3e20323636363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ebc::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:9f:3a:33:7d:8e:98:1c:fd:6f:c3:90:fb:2a:21:b0:87:8f:
         c3:f0:74:79:12:58:9a:6d:17:9f:fe:83:24:78:fb:c9:3c:9c:
         b3:bb:26:70:5a:d0:7d:fc:55:08:6d:65:fc:3c:fa:2a:fb:21:
         c6:59:6d:ad:7f:cf:ac:ab:65:a6:c3:a0:61:f5:73:bf:12:12:
         20:3d:b5:2d:0d:fe:b4:66:12:ab:85:d7:af:63:3e:a9:51:96:
         46:29:43:2d:af:ab:81:2d:61:6c:df:f4:61:1f:c7:ef:a6:61:
         e6:53:19:57:60:fe:cc:8d:4b:86:65:f1:38:a5:ab:a0:df:b6:
         c0:09:2b:69:84:b8:46:7e:bc:66:e8:8d:4c:78:83:08:f0:01:
         52:be:71:a4:1e:9e:e1:09:7a:6b:f0:90:a8:8b:17:1f:9d:85:
         bf:88:70:69:bd:16:2b:e9:61:f4:db:b0:dd:1d:44:90:49:2c:
         4f:ce:1f:99:74:49:50:55:8b:cc:9b:4d:3f:36:a3:56:9c:12:
         8b:32:2e:1a:46:83:40:b0:82:2e:8c:8d:e9:9d:bf:f3:e6:5b:
         8d:ff:83:07:d1:30:bf:f1:3d:f2:6e:72:85:31:97:af:bc:30:
         f0:74:60:c0:13:16:fe:ed:89:1c:63:32:97:65:ad:dd:ae:a8:
         9a:31:f4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:59:49 2026 by rpki-client