Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/323830343a336561343a3a2f33322d3332203d3e20323636363131.roa
File:                     323830343a336561343a3a2f33322d3332203d3e20323636363131.roa (raw, json)
Hash identifier:          Pfi9EZ2FpTVV3XGfgK+WESCPSuS/MgJ6SIGRLXgRaW4=
Subject key identifier:   CF:33:C3:32:D5:4C:19:DA:E0:9C:CB:DB:35:61:24:C9:A6:0A:D6:08
Certificate issuer:       /CN=C70EC4383B792424E71BC6853AD1C792781070B3
Certificate serial:       252BC2CD0F91EA863ABD2E6043A2ED8E7910B5B3
Authority key identifier: C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/323830343a336561343a3a2f33322d3332203d3e20323636363131.roa
Signing time:             Thu 05 Feb 2026 03:53:45 +0000
ROA not before:           Thu 05 Feb 2026 03:48:45 +0000
ROA not after:            Thu 04 Feb 2027 03:53:45 +0000
asID:                     266611
IP address blocks:        2804:3ea4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl
                          rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:2b:c2:cd:0f:91:ea:86:3a:bd:2e:60:43:a2:ed:8e:79:10:b5:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C70EC4383B792424E71BC6853AD1C792781070B3
        Validity
            Not Before: Feb  5 03:48:45 2026 GMT
            Not After : Feb  4 03:53:45 2027 GMT
        Subject: CN=CF33C332D54C19DAE09CCBDB356124C9A60AD608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9e:05:ee:e6:8a:df:90:f7:cc:3a:3e:3e:74:
                    47:86:de:e4:d1:67:17:24:a7:22:26:13:23:37:da:
                    a2:79:e5:99:59:0d:2b:ca:79:31:d4:57:4e:44:e2:
                    a0:a4:1d:f3:8d:db:0b:df:ee:bc:dd:a9:5f:ec:a5:
                    83:24:79:2d:f7:f9:81:13:37:ea:48:18:0c:2b:b0:
                    74:06:12:ea:41:84:82:6a:ba:53:41:dd:c0:e8:ad:
                    10:f8:c8:49:e4:6f:f3:09:1e:67:03:fb:d2:f3:7a:
                    14:36:4e:99:53:4e:74:06:ce:e0:3b:c8:13:08:10:
                    3e:cb:5a:b0:08:36:81:87:37:77:4c:85:6a:35:84:
                    82:a4:b7:a8:dc:b3:07:58:b2:b5:c8:0c:fe:05:54:
                    64:60:d4:91:1a:61:5a:12:0d:54:2f:b8:6e:79:bc:
                    f4:39:de:4a:eb:b6:cd:44:e6:e3:93:a6:64:24:22:
                    97:71:f3:9d:a7:8f:48:fd:0b:ca:15:87:f1:52:10:
                    7c:35:cc:6d:01:22:e9:1f:49:c3:b9:d8:77:02:6a:
                    3e:a0:61:4e:9b:10:1c:09:d7:29:8a:44:35:6d:26:
                    e6:f8:45:35:bd:c5:ab:5e:d2:d8:ed:f8:52:45:c8:
                    6c:d1:7f:fb:37:2a:00:b9:d3:3c:54:d2:fc:9a:3b:
                    b0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:33:C3:32:D5:4C:19:DA:E0:9C:CB:DB:35:61:24:C9:A6:0A:D6:08
            X509v3 Authority Key Identifier:
                keyid:C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/323830343a336561343a3a2f33322d3332203d3e20323636363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ea4::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:a7:82:c5:00:ba:39:bf:09:a8:32:e2:6b:06:95:90:83:2c:
         dc:a0:67:16:59:f2:de:f7:03:fd:54:c2:4d:61:b6:26:dc:fc:
         a6:28:6a:1f:9b:b9:46:a5:d4:9d:df:84:88:be:ef:ef:06:ef:
         09:b6:4d:91:05:6b:5f:ec:2b:5e:b1:c7:b2:0c:ca:d2:c8:15:
         9c:24:93:0a:9b:c6:b8:c7:b0:20:c4:21:41:4f:2f:81:42:83:
         a4:64:96:c1:03:58:4f:c9:f6:d1:b0:40:11:01:6c:bb:c6:14:
         c8:89:25:58:aa:3a:9a:06:3c:18:30:e7:45:5e:6c:19:23:39:
         c9:62:bc:e9:98:b2:e7:d0:99:66:ec:6a:d1:b3:6e:1e:57:be:
         5b:4e:c1:5c:82:ab:d5:8f:4c:ab:be:ca:76:7e:95:b0:e4:27:
         de:93:e2:61:7d:81:8d:d6:54:e9:1e:a9:30:0a:6e:7f:55:4e:
         7b:8d:ca:bc:db:c9:50:a5:18:8f:6d:36:37:1c:66:9e:2c:6f:
         eb:d9:dc:bd:59:67:90:dc:e4:83:b6:43:dc:1d:32:c0:b3:98:
         8b:37:8a:8b:b1:ca:97:01:54:bf:54:b7:3d:44:57:a8:e1:fe:
         39:8e:ee:d2:6c:5b:9d:e0:8c:84:a4:55:a3:00:1d:0c:ef:3d:
         61:b2:7f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:50:45 2026 by rpki-client