Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/323830343a353839343a343030303a3a2f33342d3334203d3e20323638313337.roa
File:                     323830343a353839343a343030303a3a2f33342d3334203d3e20323638313337.roa (raw, json)
Hash identifier:          bz1VOpj7Z4SDIz4QZ8GlIWPYemr430Xkb+/DgZugT5Y=
Subject key identifier:   F8:D0:ED:D8:4E:E0:F5:4F:5F:04:3F:8D:81:0C:13:80:FC:36:9D:8E
Certificate issuer:       /CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
Certificate serial:       0B8C3E6282FCBE9A540DEDBF829F9C8F67710D10
Authority key identifier: 3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/323830343a353839343a343030303a3a2f33342d3334203d3e20323638313337.roa
Signing time:             Wed 04 Feb 2026 19:00:01 +0000
ROA not before:           Wed 04 Feb 2026 18:55:01 +0000
ROA not after:            Wed 03 Feb 2027 19:00:01 +0000
asID:                     268137
IP address blocks:        2804:5894:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl
                          rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:8c:3e:62:82:fc:be:9a:54:0d:ed:bf:82:9f:9c:8f:67:71:0d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
        Validity
            Not Before: Feb  4 18:55:01 2026 GMT
            Not After : Feb  3 19:00:01 2027 GMT
        Subject: CN=F8D0EDD84EE0F54F5F043F8D810C1380FC369D8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d2:e4:b3:50:a2:1d:53:17:2e:0b:1f:b2:40:
                    bc:f1:d9:19:ca:f5:4a:56:f6:43:4e:de:34:f7:79:
                    9c:30:3b:1c:6c:fb:ae:83:fd:27:45:e4:50:8b:0d:
                    64:77:f1:93:bd:30:11:1a:c9:97:ea:ed:0d:8b:46:
                    a1:f9:07:27:21:58:46:2a:df:15:56:52:2c:a9:88:
                    f3:34:1e:a4:66:44:05:3e:21:ab:5d:db:33:6d:48:
                    c7:03:36:51:f5:b9:62:7e:52:22:bd:96:5b:2b:94:
                    68:cb:18:ad:3a:06:f6:06:2d:b8:8f:f9:de:71:f3:
                    2e:6f:a6:8f:dd:41:0b:af:62:c9:21:32:13:61:59:
                    63:e8:e3:23:57:5b:be:d5:94:20:77:96:47:99:df:
                    66:b5:c7:bc:88:d8:8e:7f:e2:09:fd:37:23:7a:28:
                    5a:38:36:85:86:bc:42:25:5a:65:5c:36:75:fd:73:
                    e8:79:e7:63:56:93:8a:3c:86:95:6b:11:71:8c:93:
                    19:24:67:1d:59:0c:dd:90:79:ab:c0:a8:d5:11:d6:
                    ca:9a:89:c8:87:8e:83:c4:a4:a9:58:9c:29:da:cf:
                    6d:17:15:a2:27:00:95:c2:21:0b:d0:d3:79:25:4d:
                    8f:be:b0:04:96:90:7a:50:21:17:33:5b:84:52:93:
                    44:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D0:ED:D8:4E:E0:F5:4F:5F:04:3F:8D:81:0C:13:80:FC:36:9D:8E
            X509v3 Authority Key Identifier:
                keyid:3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/323830343a353839343a343030303a3a2f33342d3334203d3e20323638313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5894:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4c:ba:41:cd:ce:77:e8:3f:df:0c:82:e1:8c:66:69:54:cc:49:
         27:50:f2:29:e7:88:5b:ac:a7:9a:99:5e:3c:7c:96:84:c8:d2:
         2b:1e:1f:25:0c:d3:67:03:f3:09:ab:56:23:a3:fd:cf:87:e6:
         ae:53:28:c3:d5:5d:c6:cb:30:77:8e:4e:8d:e9:be:11:69:ee:
         40:4d:8b:e8:77:bd:51:42:fb:79:52:3a:0c:59:54:6d:b9:6e:
         29:a7:2e:a0:6b:a8:ee:2b:73:ee:cd:f2:fb:97:e2:13:f9:f3:
         97:a2:5a:14:4c:e0:52:62:fd:28:76:1c:60:79:68:9b:00:ae:
         f8:38:89:3f:9a:b1:13:0d:6e:36:a4:90:b4:bf:8a:95:9d:27:
         8e:36:92:ca:63:d4:3d:09:ad:f6:c7:bd:96:ca:dc:2c:d4:aa:
         75:13:da:9f:b8:7a:a6:c5:ef:78:f6:eb:d3:dc:85:36:16:c9:
         50:ca:d3:04:80:4c:84:55:de:72:f4:f8:fa:6a:97:a5:0e:56:
         7a:01:2f:58:26:46:2f:c4:eb:f8:d6:27:1c:ef:ab:5f:a0:4a:
         15:35:5c:5d:a8:cf:2b:a3:94:82:47:24:86:ed:f1:35:d5:02:
         46:18:2e:0e:81:0c:90:c6:cf:d1:a9:51:46:18:63:29:ab:91:
         a7:70:0c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:38:10 2026 by rpki-client