Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/323830343a6664343a3a2f33322d3332203d3e20323633363036.roa
File:                     323830343a6664343a3a2f33322d3332203d3e20323633363036.roa (raw, json)
Hash identifier:          Yo271OiucLB/aigZDCLUq3cAGSPHW0PFSAiLJnTJVo0=
Subject key identifier:   7D:7B:10:D4:99:A4:15:88:86:96:21:7E:05:6B:21:73:A0:CD:A9:5A
Certificate issuer:       /CN=561575F60242E48030BC35A771871EB47C6EFF55
Certificate serial:       6B821BCE2EAD3B94173E84377B2EC83071A76EC3
Authority key identifier: 56:15:75:F6:02:42:E4:80:30:BC:35:A7:71:87:1E:B4:7C:6E:FF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/323830343a6664343a3a2f33322d3332203d3e20323633363036.roa
Signing time:             Sat 27 Dec 2025 14:56:34 +0000
ROA not before:           Sat 27 Dec 2025 14:51:34 +0000
ROA not after:            Sat 26 Dec 2026 14:56:34 +0000
asID:                     263606
IP address blocks:        2804:fd4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.crl
                          rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 11:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:82:1b:ce:2e:ad:3b:94:17:3e:84:37:7b:2e:c8:30:71:a7:6e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=561575F60242E48030BC35A771871EB47C6EFF55
        Validity
            Not Before: Dec 27 14:51:34 2025 GMT
            Not After : Dec 26 14:56:34 2026 GMT
        Subject: CN=7D7B10D499A415888696217E056B2173A0CDA95A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7a:d1:ba:04:71:33:59:65:28:22:26:71:7a:
                    3f:94:bc:a2:3f:7d:91:00:df:c9:37:cf:98:b8:f0:
                    09:f8:51:f9:a3:dc:e4:f0:fa:f3:43:a9:93:20:a2:
                    44:05:57:ac:f8:08:dc:73:f2:c7:a3:47:dd:e0:20:
                    b1:26:6e:a9:c7:4d:65:0e:89:cf:8c:a2:40:45:9d:
                    84:89:a7:1d:d2:5e:3a:b5:14:d6:f8:c0:0c:12:07:
                    bd:e4:e2:3f:c4:d0:e6:87:4b:56:44:80:b2:4b:82:
                    02:66:b0:35:2d:38:99:71:97:9c:c0:85:9d:00:10:
                    5a:27:50:af:09:b9:b1:5e:33:4e:ae:1c:09:48:7e:
                    2d:07:a2:c3:15:7f:1a:32:da:8b:e3:17:2a:51:e7:
                    d3:20:8e:87:5b:13:9d:c5:79:06:59:75:05:aa:26:
                    da:a3:6d:5b:c0:55:c7:d8:aa:5f:c7:59:f4:12:5e:
                    39:f3:c8:26:a9:d4:14:fc:26:f7:c4:0c:2a:c5:96:
                    e2:56:a0:b7:d4:a1:8a:39:26:5b:6e:37:6c:f5:82:
                    33:96:0d:0e:6c:f8:77:59:7c:03:ee:e3:27:ae:68:
                    65:80:5a:33:7c:86:a2:ec:bd:ea:08:18:58:51:6a:
                    75:f5:bc:0a:b8:80:82:56:58:38:ea:03:d0:36:4c:
                    97:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7B:10:D4:99:A4:15:88:86:96:21:7E:05:6B:21:73:A0:CD:A9:5A
            X509v3 Authority Key Identifier:
                keyid:56:15:75:F6:02:42:E4:80:30:BC:35:A7:71:87:1E:B4:7C:6E:FF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/323830343a6664343a3a2f33322d3332203d3e20323633363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:ba:db:be:7e:cb:e7:ec:a8:88:c6:d5:44:bd:ca:52:4d:6c:
         c4:80:dd:c7:a9:84:ea:2c:62:72:b6:80:09:2b:01:fb:6c:0c:
         f4:07:1c:19:18:55:8b:40:6d:fd:9d:56:a7:24:33:6c:dc:3d:
         fa:01:64:3b:a7:98:2f:ac:00:54:3b:4f:db:14:d3:45:bc:86:
         b6:6f:29:bd:69:90:5c:c7:9e:a4:5f:7e:f2:8f:68:91:e0:d2:
         5c:db:aa:c9:4f:30:ef:58:21:bb:40:3a:a8:43:f2:33:03:c8:
         d9:32:20:b5:23:03:5a:94:df:c2:e5:bf:24:0c:4a:31:c6:f8:
         10:c7:ce:13:cc:04:d6:43:8d:98:41:fe:41:3f:14:98:40:e8:
         78:83:bd:2e:ab:a8:e8:8d:b7:00:e7:89:18:74:92:ac:d3:c0:
         a4:80:5e:60:1e:63:85:8b:4a:54:de:2d:2a:ee:64:6e:03:04:
         18:22:52:b8:3b:dc:e1:e2:6c:17:83:18:83:59:b9:12:b8:e4:
         f5:40:cf:8e:27:81:04:b1:82:c1:a6:5b:c3:e1:04:7d:a7:ae:
         0d:33:89:d8:9d:31:8d:50:04:cc:88:c7:43:8e:4a:30:e6:33:
         6a:31:73:23:5f:5c:75:d5:75:34:9b:ea:b3:54:6a:29:e4:ce:
         e6:d2:b6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:24:20 2026 by rpki-client