Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/323830343a363730303a3a2f33322d3438203d3e20323639353937.roa
File:                     323830343a363730303a3a2f33322d3438203d3e20323639353937.roa (raw, json)
Hash identifier:          JWa456VFmFLZhuazmykM6ZiecCQuVWAy6s6K41xTNtc=
Subject key identifier:   E0:96:E3:2B:F3:12:4E:B3:F0:66:57:29:E0:29:EE:04:3F:C4:B6:94
Certificate issuer:       /CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
Certificate serial:       3F1D41CA5184591AABF6F347FAF3B30C7B37CF6F
Authority key identifier: EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/323830343a363730303a3a2f33322d3438203d3e20323639353937.roa
Signing time:             Thu 05 Feb 2026 15:06:08 +0000
ROA not before:           Thu 05 Feb 2026 15:01:08 +0000
ROA not after:            Thu 04 Feb 2027 15:06:08 +0000
asID:                     269597
IP address blocks:        2804:6700::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl
                          rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:21:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1d:41:ca:51:84:59:1a:ab:f6:f3:47:fa:f3:b3:0c:7b:37:cf:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
        Validity
            Not Before: Feb  5 15:01:08 2026 GMT
            Not After : Feb  4 15:06:08 2027 GMT
        Subject: CN=E096E32BF3124EB3F0665729E029EE043FC4B694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:69:92:74:2c:34:c0:e8:42:17:bf:22:4c:0f:
                    bf:22:be:eb:37:c6:3e:0b:4c:87:58:d0:02:12:f1:
                    41:2a:e8:b6:26:57:40:3f:07:85:b3:88:f1:bc:e2:
                    61:b8:3a:ee:ee:68:81:38:c2:87:32:dd:99:ad:c6:
                    be:4e:cd:ee:13:81:64:e1:50:cf:0b:0b:27:63:ac:
                    4e:da:ab:84:13:f4:c7:9e:41:32:c0:7e:d7:a7:2f:
                    e5:32:e0:55:e5:4a:18:a3:56:ec:08:0a:19:74:35:
                    1e:1b:f9:e4:ba:c8:3d:4e:bb:7d:a0:81:89:00:25:
                    f2:5a:0e:53:52:f2:8b:61:f9:97:f1:59:71:93:d1:
                    ea:5d:6e:3e:d3:74:42:ad:73:28:e2:33:d4:fd:63:
                    c0:05:75:6a:6e:36:cf:61:a3:4f:a5:3e:f1:d1:6a:
                    00:a2:b1:b8:dd:35:c9:f0:a3:b7:27:ed:f2:4b:ce:
                    a3:2c:ac:36:21:88:b8:45:0d:32:0a:6b:75:81:71:
                    40:54:a4:b3:ab:e9:5b:17:34:5a:3c:e9:64:68:dd:
                    02:f1:cc:37:b6:00:91:ec:3b:bf:bb:51:68:61:0f:
                    03:ab:18:d2:6f:6f:1d:27:80:c4:af:93:d2:03:c9:
                    d4:10:cd:22:92:eb:79:ef:bb:fe:7e:52:4f:10:fb:
                    25:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:96:E3:2B:F3:12:4E:B3:F0:66:57:29:E0:29:EE:04:3F:C4:B6:94
            X509v3 Authority Key Identifier:
                keyid:EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/323830343a363730303a3a2f33322d3438203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6700::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:91:0f:00:a4:6c:d6:c7:f6:50:8d:e8:21:ce:5e:cf:1d:38:
         7d:bd:b4:26:db:5f:c5:32:d5:15:74:66:b6:f4:6d:72:05:ce:
         f8:3b:09:4a:12:38:70:50:c6:5d:c1:9a:e9:a2:db:21:1d:30:
         ef:4a:89:8b:2c:57:6f:5b:96:4d:ff:e7:fb:18:02:d6:6f:0c:
         14:3a:ef:56:8b:5d:20:b7:4a:66:f3:2c:15:f9:fe:68:2c:25:
         b6:73:68:5b:de:3a:02:d4:41:8f:0e:1e:15:93:e5:cb:ae:b9:
         93:03:37:3c:e0:ae:05:1e:09:6f:75:1a:63:09:6e:cd:62:98:
         3d:66:93:d4:d3:c5:f5:b0:69:60:a6:6a:de:14:c8:07:78:54:
         bd:ae:79:c3:24:f1:a6:38:84:8f:70:3c:28:ed:d3:8a:9d:23:
         80:f6:c4:69:93:86:03:9e:5b:72:2d:e7:26:55:8a:c9:62:bf:
         8a:3c:e9:c9:b0:a4:65:94:a5:06:17:fd:70:5d:80:80:9f:a3:
         95:73:b5:66:36:74:0c:96:ee:a2:9a:f4:2d:35:67:4b:ed:5d:
         aa:43:09:24:28:ef:ab:b2:57:05:b5:29:6a:cd:a6:8c:82:9b:
         0e:7a:d1:41:d6:5f:55:f2:af:18:29:46:ef:1a:61:85:23:88:
         02:68:3a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:07:27 2026 by rpki-client