Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/323830343a326232383a3a2f33322d3634203d3e20323635313338.roa
File:                     323830343a326232383a3a2f33322d3634203d3e20323635313338.roa (raw, json)
Hash identifier:          Hj9cdSPv+H0F/JH+uBLkJlCflWIfdhGBsLtOgKc7fGI=
Subject key identifier:   D0:A3:B3:FB:54:FE:EA:73:31:CD:75:55:F2:23:27:23:21:E3:81:C7
Certificate issuer:       /CN=70C1E193B6893E59734B5EDDD766B4889B2E21D7
Certificate serial:       122B7C15639C99F9DDCBCF0D97637962898952B2
Authority key identifier: 70:C1:E1:93:B6:89:3E:59:73:4B:5E:DD:D7:66:B4:88:9B:2E:21:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70C1E193B6893E59734B5EDDD766B4889B2E21D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/323830343a326232383a3a2f33322d3634203d3e20323635313338.roa
Signing time:             Tue 27 Jan 2026 02:46:40 +0000
ROA not before:           Tue 27 Jan 2026 02:41:40 +0000
ROA not after:            Tue 26 Jan 2027 02:46:40 +0000
asID:                     265138
IP address blocks:        2804:2b28::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/70C1E193B6893E59734B5EDDD766B4889B2E21D7.crl
                          rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/70C1E193B6893E59734B5EDDD766B4889B2E21D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70C1E193B6893E59734B5EDDD766B4889B2E21D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 02:54:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2b:7c:15:63:9c:99:f9:dd:cb:cf:0d:97:63:79:62:89:89:52:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70C1E193B6893E59734B5EDDD766B4889B2E21D7
        Validity
            Not Before: Jan 27 02:41:40 2026 GMT
            Not After : Jan 26 02:46:40 2027 GMT
        Subject: CN=D0A3B3FB54FEEA7331CD7555F223272321E381C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ed:a2:ed:b7:23:13:df:57:a3:77:a0:29:6a:
                    db:68:49:41:4d:91:9e:5c:3e:66:e0:68:a4:52:f3:
                    ed:28:75:9c:60:b0:6f:85:8c:a3:6f:cf:55:59:4f:
                    50:13:c0:2c:ec:f5:c0:f3:b6:12:1b:3c:bf:0b:93:
                    8b:0a:9a:ca:4e:14:9f:a8:74:7c:29:d3:50:13:da:
                    fa:fa:9a:d6:c4:98:39:e1:8c:b3:3e:bb:b1:d8:da:
                    3b:2a:5f:19:5a:73:b9:ce:43:cd:cd:5d:cc:fb:d0:
                    2d:e4:4d:c2:cc:4a:e6:56:b8:fe:21:8c:1b:ab:72:
                    23:32:a7:04:7f:df:7c:c3:fe:1d:7d:73:d3:be:2a:
                    29:e9:08:ca:9f:34:61:0e:3e:da:a7:9a:9b:5b:73:
                    bd:88:85:be:32:6e:5d:c0:f0:dd:f9:ce:9b:4b:2b:
                    a2:f7:b2:cf:4f:40:be:43:ed:b7:db:67:ef:a1:d0:
                    59:f2:2c:39:7d:76:c6:6f:83:95:47:92:ae:85:68:
                    64:6c:1b:93:01:d0:88:94:3f:ef:42:22:c7:76:e6:
                    03:63:f7:8e:5a:dd:1d:c3:e9:08:61:62:0b:7a:d6:
                    56:30:e2:e7:6e:7b:27:90:42:62:28:b4:62:38:b2:
                    15:72:e5:c0:52:11:b1:1b:f0:55:3e:82:1f:08:85:
                    03:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A3:B3:FB:54:FE:EA:73:31:CD:75:55:F2:23:27:23:21:E3:81:C7
            X509v3 Authority Key Identifier:
                keyid:70:C1:E1:93:B6:89:3E:59:73:4B:5E:DD:D7:66:B4:88:9B:2E:21:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/70C1E193B6893E59734B5EDDD766B4889B2E21D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70C1E193B6893E59734B5EDDD766B4889B2E21D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/323830343a326232383a3a2f33322d3634203d3e20323635313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b28::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:8f:ce:bb:60:35:b9:7a:39:af:9e:43:ca:36:0b:fe:2e:bc:
         f9:72:34:e6:93:d4:bf:b1:26:08:3b:ba:ce:29:5b:92:e1:a1:
         a2:0e:51:b3:52:75:f9:3f:0f:59:ce:01:bd:c2:1b:58:86:2b:
         22:18:68:2c:03:8e:c7:4f:93:e1:c5:47:f5:97:dd:10:77:47:
         f6:32:50:88:5d:97:5f:c7:6c:d3:26:bf:2a:4e:6b:f3:a4:4c:
         27:2e:66:1d:2f:26:5b:92:96:02:75:56:6f:e4:4f:96:a0:97:
         b6:f4:fa:bd:62:a5:f7:82:de:87:28:c4:1d:c9:38:90:77:f8:
         eb:cb:08:8e:13:10:fb:96:7f:3c:cd:3e:0d:88:34:fc:58:58:
         68:c0:1c:d1:17:53:60:71:53:b1:d4:d2:c4:e8:ba:39:14:50:
         61:0a:dd:fa:6f:6f:09:fb:88:65:90:a0:9b:d1:73:76:0b:c1:
         4d:b9:5d:7a:94:7a:93:2a:b2:e4:6e:49:68:41:aa:46:c6:e7:
         ba:78:99:fc:38:3e:82:71:2a:32:61:90:20:72:64:37:7b:d5:
         63:a6:36:2a:fe:8f:10:a1:bc:74:14:71:f5:f7:9a:ed:de:d3:
         f9:8a:b2:bf:45:89:9d:a1:2f:ec:ca:f2:ed:04:f5:54:81:6d:
         46:a3:4f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:53:10 2026 by rpki-client