Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/323830343a336234383a3a2f33322d3438203d3e203532353931.roa
File:                     323830343a336234383a3a2f33322d3438203d3e203532353931.roa (raw, json)
Hash identifier:          JmsFyPGKQEC+Vb2+/NBHj02xN6ulT3TWC6bkxClZNlE=
Subject key identifier:   15:CE:15:3C:D7:3D:96:DB:04:10:A3:13:06:35:EE:BD:FF:42:92:8C
Certificate issuer:       /CN=B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B
Certificate serial:       3E3B2EBE8FC80412206713095CA92E5EC97D0659
Authority key identifier: B2:53:A5:EB:1F:F3:2A:C3:DF:95:67:B9:62:67:35:A6:DB:01:CE:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/323830343a336234383a3a2f33322d3438203d3e203532353931.roa
Signing time:             Mon 09 Feb 2026 11:54:30 +0000
ROA not before:           Mon 09 Feb 2026 11:49:30 +0000
ROA not after:            Mon 08 Feb 2027 11:54:30 +0000
asID:                     52591
IP address blocks:        2804:3b48::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B.crl
                          rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 02:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:3b:2e:be:8f:c8:04:12:20:67:13:09:5c:a9:2e:5e:c9:7d:06:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B
        Validity
            Not Before: Feb  9 11:49:30 2026 GMT
            Not After : Feb  8 11:54:30 2027 GMT
        Subject: CN=15CE153CD73D96DB0410A3130635EEBDFF42928C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bb:bf:5d:87:0f:ab:87:3b:66:6e:fc:43:23:
                    fa:ea:42:75:15:02:bc:7b:9b:bf:6d:24:ac:38:f9:
                    02:47:2a:a2:15:ba:a6:7a:02:8d:3b:ae:ab:34:17:
                    d3:22:ac:10:b6:f6:ff:f8:1b:60:d6:37:ac:ff:6d:
                    57:e6:4b:bd:4c:8d:ac:fa:bb:66:4f:f5:6a:4b:88:
                    e9:15:b7:14:4f:5f:97:99:0d:da:33:48:ba:49:93:
                    62:7d:60:d8:c7:37:a2:93:12:40:09:02:fc:42:4d:
                    e8:55:6a:14:5b:de:eb:fa:87:e0:82:66:1f:95:a1:
                    b2:d3:3f:42:a0:4d:6f:d7:42:f4:b3:b3:45:f9:01:
                    22:74:5b:0c:15:79:9a:3c:aa:db:0f:ca:3b:49:f6:
                    0d:f1:4d:c6:af:17:c6:99:b6:db:c3:a8:63:9a:f2:
                    ea:64:20:f1:f8:0c:52:dc:7e:d6:32:dc:ae:bb:55:
                    2a:0e:75:fb:1a:f6:28:d9:7a:9f:00:b9:e8:e1:06:
                    62:f6:c6:5c:67:4d:d9:82:94:ca:25:62:16:0b:da:
                    ee:e8:a0:99:5b:7d:14:4f:94:c3:8b:ad:25:e1:54:
                    41:48:a8:72:a6:8b:d8:11:e4:63:fd:5e:b5:52:6c:
                    88:88:be:59:d2:ae:f0:ec:4b:3c:40:19:a2:a2:45:
                    47:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CE:15:3C:D7:3D:96:DB:04:10:A3:13:06:35:EE:BD:FF:42:92:8C
            X509v3 Authority Key Identifier:
                keyid:B2:53:A5:EB:1F:F3:2A:C3:DF:95:67:B9:62:67:35:A6:DB:01:CE:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/323830343a336234383a3a2f33322d3438203d3e203532353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b48::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:f1:8b:b2:31:c4:57:6a:02:7b:a4:9a:4c:96:f8:55:06:24:
         5d:1e:8b:47:25:c9:0f:82:a0:c2:15:6c:15:d3:c2:4f:e0:0f:
         cc:3a:6d:a6:c8:64:32:82:da:d7:1d:61:18:47:6a:df:9c:fb:
         de:7d:ef:5a:78:0e:7c:6a:bc:28:c5:09:7d:a6:e2:e8:8d:18:
         93:57:ee:45:66:98:70:7c:75:17:eb:f0:61:9a:54:16:5f:51:
         9f:06:17:de:36:bd:9e:7d:05:65:a3:4d:11:13:b8:e0:80:d4:
         77:98:bd:d9:3c:bf:0b:68:6a:41:c1:27:8a:e5:4d:18:62:2f:
         48:78:0c:a2:d3:b2:3b:c7:ca:6c:08:e1:fa:67:91:e1:1b:13:
         80:6e:b5:ad:dc:df:5f:cd:e8:34:dc:ec:f5:0e:82:47:b6:f3:
         cf:e1:ea:7b:b5:3b:22:a2:e9:cd:40:71:b7:11:02:6f:e6:9d:
         e2:db:f9:73:bb:cc:b8:22:f7:b8:48:54:37:45:ce:16:6c:e3:
         a8:5a:d0:1e:12:45:fd:cd:09:49:59:2d:84:c2:85:aa:fa:19:
         ef:80:4a:85:87:df:10:93:67:9c:c1:8d:8d:56:75:9d:5d:eb:
         14:b6:3c:a2:6a:5f:56:1a:49:fd:07:3a:14:27:0f:4c:da:7a:
         26:7d:15:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:03:52 2026 by rpki-client