Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/323830343a333230303a3a2f33322d3438203d3e20323635303530.roa
File:                     323830343a333230303a3a2f33322d3438203d3e20323635303530.roa (raw, json)
Hash identifier:          JNkuPVkslJhEy5vxVPsp0mnwk/L8rP8+/jTHXEJg2FI=
Subject key identifier:   E6:F0:5D:00:3E:CF:3D:91:EE:05:1C:AF:1D:61:D1:34:E2:2E:DC:24
Certificate issuer:       /CN=2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD
Certificate serial:       49AC0EF98C9E07C1F94D6A6BED1991C2C6D0141C
Authority key identifier: 2B:A7:E3:F6:A0:6E:73:CE:8F:AE:47:0E:EF:DC:07:F8:1A:C0:4C:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/323830343a333230303a3a2f33322d3438203d3e20323635303530.roa
Signing time:             Thu 29 Jan 2026 19:32:27 +0000
ROA not before:           Thu 29 Jan 2026 19:27:27 +0000
ROA not after:            Thu 28 Jan 2027 19:32:27 +0000
asID:                     265050
IP address blocks:        2804:3200::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.crl
                          rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 12:35:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ac:0e:f9:8c:9e:07:c1:f9:4d:6a:6b:ed:19:91:c2:c6:d0:14:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD
        Validity
            Not Before: Jan 29 19:27:27 2026 GMT
            Not After : Jan 28 19:32:27 2027 GMT
        Subject: CN=E6F05D003ECF3D91EE051CAF1D61D134E22EDC24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6e:b1:ac:f8:89:55:80:fd:e3:08:5f:4c:b1:
                    1d:12:69:a9:ce:70:65:63:26:7c:fb:e5:e3:09:f8:
                    07:78:59:20:ff:49:23:18:be:4b:c1:1d:f8:9f:fd:
                    26:0b:ba:96:29:37:50:b6:3f:ba:fd:8a:37:b9:e2:
                    a2:58:d4:77:af:11:46:80:27:ef:15:b0:dd:9e:85:
                    ec:6e:78:73:54:9b:a6:47:2e:2c:e5:87:af:46:97:
                    1b:b9:19:66:ac:a4:7a:d5:c5:2b:b6:9b:ec:9a:d7:
                    57:a6:60:cb:e4:d3:c8:6b:f5:82:e3:e0:b2:8f:59:
                    48:c4:63:74:46:db:0d:21:c5:90:1c:69:d1:0c:7c:
                    68:ed:a1:3b:37:64:dc:e3:cb:36:a9:e0:7f:22:90:
                    e9:59:a9:07:3d:0c:4e:32:d1:75:27:bf:2f:eb:ba:
                    9e:32:ad:ed:76:e8:56:73:06:0f:6d:51:a7:be:aa:
                    df:7f:4f:5a:f9:94:48:84:ac:09:01:d1:be:58:1b:
                    bb:88:e6:ff:8e:8c:46:15:44:d0:e2:2f:df:19:02:
                    36:3e:5c:4a:ba:2d:18:45:dd:fc:4b:7c:ea:97:f1:
                    18:f0:40:f5:bf:8e:ee:d3:ea:ca:4e:fc:5a:0d:c6:
                    43:d9:64:e1:c2:a1:c6:dd:d0:b4:0b:3a:57:10:98:
                    9a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F0:5D:00:3E:CF:3D:91:EE:05:1C:AF:1D:61:D1:34:E2:2E:DC:24
            X509v3 Authority Key Identifier:
                keyid:2B:A7:E3:F6:A0:6E:73:CE:8F:AE:47:0E:EF:DC:07:F8:1A:C0:4C:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/323830343a333230303a3a2f33322d3438203d3e20323635303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3200::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:87:85:92:86:a1:0b:06:98:1f:4f:37:73:e7:7b:e6:9e:85:
         3f:ab:4e:a2:94:75:86:34:67:ef:58:b3:8c:69:33:c7:ad:a6:
         0d:a3:a9:63:d7:60:15:0f:42:13:c1:86:eb:f1:3d:95:09:bd:
         a5:ba:8f:db:95:2a:6c:df:07:52:68:11:42:19:92:9c:99:4b:
         16:87:b3:fa:39:eb:d2:8f:d4:16:6b:7b:06:65:f2:7a:79:8f:
         0f:0f:f4:65:cb:6f:16:42:fc:df:df:17:ac:a1:75:93:a0:2c:
         5d:39:c2:22:65:da:59:01:f9:b1:ae:47:41:0e:a6:30:02:58:
         3b:27:44:95:45:d0:bd:4d:0d:29:00:d7:18:c6:5a:ce:6c:e5:
         42:55:3f:d6:22:24:a9:32:07:59:ea:64:c2:94:8e:e2:45:8a:
         3f:15:b8:14:6f:de:d0:4d:21:b3:ea:05:6e:c3:14:0a:a3:cf:
         0b:25:1b:06:54:19:b3:43:0d:13:d1:81:a7:b7:d3:26:2b:37:
         ca:b8:b9:f8:71:50:4d:32:14:7f:58:35:d5:17:be:93:1d:c1:
         f0:46:3a:84:a1:b0:48:38:9d:ee:22:79:6d:f4:7f:a0:0a:8c:
         09:50:af:2d:2a:26:24:f4:f8:14:6d:5d:78:85:a8:96:00:20:
         b7:25:97:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:07:14 2026 by rpki-client