Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2y8XoGEhQeY5Eqe7ELaZYUQRY8a9MUg1DvZVkrip7xMj/0/323830343a383135303a333030303a3a2f33372d3337203d3e20323732343436.roa
File:                     323830343a383135303a333030303a3a2f33372d3337203d3e20323732343436.roa (raw, json)
Hash identifier:          gIWAOJ2mnRK0SKp2hofrbk7aG4MAZH99WAH9FOY8xN8=
Subject key identifier:   29:58:E8:C2:0F:78:81:E6:98:05:35:F2:77:01:48:9A:6E:14:0C:5A
Certificate issuer:       /CN=93B967A3058962EF58B529DD08F81E515F85809F
Certificate serial:       5641D335EDB8F7F58A125469AF1491DF1BDE738D
Authority key identifier: 93:B9:67:A3:05:89:62:EF:58:B5:29:DD:08:F8:1E:51:5F:85:80:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93B967A3058962EF58B529DD08F81E515F85809F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2y8XoGEhQeY5Eqe7ELaZYUQRY8a9MUg1DvZVkrip7xMj/0/323830343a383135303a333030303a3a2f33372d3337203d3e20323732343436.roa
Signing time:             Mon 16 Feb 2026 20:19:53 +0000
ROA not before:           Mon 16 Feb 2026 20:14:53 +0000
ROA not after:            Mon 15 Feb 2027 20:19:53 +0000
asID:                     272446
IP address blocks:        2804:8150:3000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2y8XoGEhQeY5Eqe7ELaZYUQRY8a9MUg1DvZVkrip7xMj/0/93B967A3058962EF58B529DD08F81E515F85809F.crl
                          rsync://rpki-repo.registro.br/repo/2y8XoGEhQeY5Eqe7ELaZYUQRY8a9MUg1DvZVkrip7xMj/0/93B967A3058962EF58B529DD08F81E515F85809F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93B967A3058962EF58B529DD08F81E515F85809F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:54:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:41:d3:35:ed:b8:f7:f5:8a:12:54:69:af:14:91:df:1b:de:73:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93B967A3058962EF58B529DD08F81E515F85809F
        Validity
            Not Before: Feb 16 20:14:53 2026 GMT
            Not After : Feb 15 20:19:53 2027 GMT
        Subject: CN=2958E8C20F7881E6980535F27701489A6E140C5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:01:9d:7b:a6:a2:c2:15:14:12:52:dc:c8:a7:
                    24:bd:1a:1c:2f:29:13:2c:fc:2c:41:c5:f3:1c:94:
                    43:5e:9b:9f:e1:b3:05:29:2a:9a:74:53:8f:6a:75:
                    16:10:77:04:1c:24:21:e2:89:d3:e3:b4:13:d3:43:
                    3e:d3:2f:ba:e4:53:a5:e1:60:32:f6:8f:c8:ed:14:
                    3e:4d:f2:8d:25:bb:57:fe:21:2d:dc:d2:b4:c2:a0:
                    ad:18:7c:f9:e1:38:ac:a2:43:51:ab:a9:3c:d9:74:
                    0a:2b:9b:d2:14:14:9b:b2:25:f2:1d:e3:f6:69:f8:
                    fc:f9:bd:28:44:ec:b8:4d:fd:5b:85:a5:d1:77:d8:
                    0f:c2:0e:cc:02:84:a0:47:ef:a8:2a:1e:5e:fb:3a:
                    7c:44:5b:7c:c4:71:85:6d:b4:a2:7f:00:a7:0e:e2:
                    df:b7:51:80:0c:ca:24:1a:8a:4e:79:7c:e9:2d:bb:
                    36:3f:fa:6c:7b:4e:9b:d8:3a:b8:36:8c:23:69:5a:
                    7e:bf:60:8b:b8:d2:e3:fa:41:1b:43:c3:9e:77:40:
                    8e:b3:24:d8:a0:33:b4:40:38:84:d7:8f:47:f4:5e:
                    2a:77:85:33:69:95:95:6b:aa:98:7b:83:73:3e:e6:
                    e5:9d:a1:f3:94:ad:09:00:f2:c7:e8:03:9e:a0:d0:
                    32:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:58:E8:C2:0F:78:81:E6:98:05:35:F2:77:01:48:9A:6E:14:0C:5A
            X509v3 Authority Key Identifier:
                keyid:93:B9:67:A3:05:89:62:EF:58:B5:29:DD:08:F8:1E:51:5F:85:80:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2y8XoGEhQeY5Eqe7ELaZYUQRY8a9MUg1DvZVkrip7xMj/0/93B967A3058962EF58B529DD08F81E515F85809F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93B967A3058962EF58B529DD08F81E515F85809F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2y8XoGEhQeY5Eqe7ELaZYUQRY8a9MUg1DvZVkrip7xMj/0/323830343a383135303a333030303a3a2f33372d3337203d3e20323732343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8150:3000::/37

    Signature Algorithm: sha256WithRSAEncryption
         82:c3:15:01:1e:80:c6:e6:f7:5e:89:de:c1:9b:52:4d:8c:b9:
         8e:17:81:7a:d1:0c:ff:05:3c:27:df:ae:71:43:da:7d:b0:3d:
         21:9f:22:c1:e0:1f:6e:b6:77:4c:71:0a:c9:c1:e2:f7:8e:7e:
         2e:62:b8:fe:9f:25:bb:52:ee:f6:40:b7:eb:1d:7d:fe:db:18:
         47:25:95:59:44:72:fe:c8:a3:60:8a:cc:68:69:d0:ee:ff:5c:
         a9:2c:b7:36:ad:a3:97:7b:91:a9:f8:71:a3:27:4b:26:70:8e:
         06:2f:98:07:77:7e:c2:18:99:2a:fe:ed:e4:ae:4a:fc:fa:e3:
         77:b0:a2:ba:05:c6:0b:65:10:06:34:4c:5e:a7:2e:5e:9e:92:
         d9:19:95:6a:e2:46:29:b3:39:7b:17:5f:1b:07:06:ad:79:20:
         fc:77:9f:03:b8:aa:2b:98:5d:06:da:fa:b5:01:d7:a4:55:88:
         ec:22:0b:c4:1f:56:c3:20:b3:b2:ca:8e:4d:35:9f:35:87:16:
         40:53:0c:56:45:70:54:14:d6:aa:e1:1e:19:13:92:27:e7:68:
         4f:c6:3f:45:5c:98:30:9e:6b:e5:6c:6b:da:a4:72:1c:cb:22:
         37:32:79:f9:f9:cf:f5:f2:90:98:29:20:4d:c0:73:14:65:8b:
         84:88:d7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:53:22 2026 by rpki-client