Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6gWe8mgk5x55ATqLxjaTS6sZZkk4vcxWr4SSDGjzExNU/0/323830343a393763343a3a2f33322d3438203d3e20323735363434.roa
File:                     323830343a393763343a3a2f33322d3438203d3e20323735363434.roa (raw, json)
Hash identifier:          s3SviicRkDCJTfJHgyl+V7K3RjEWjEF+YSaf7nzrfks=
Subject key identifier:   DD:96:37:D8:6B:61:34:85:FF:6E:EE:75:02:9C:A8:31:31:7B:94:C2
Certificate issuer:       /CN=AECBF3CDCE0A34862EB94E68C559C421CD162F6D
Certificate serial:       6CFC3C0FEB88DD6E54427A8D2F03AA5D244F8A1E
Authority key identifier: AE:CB:F3:CD:CE:0A:34:86:2E:B9:4E:68:C5:59:C4:21:CD:16:2F:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AECBF3CDCE0A34862EB94E68C559C421CD162F6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6gWe8mgk5x55ATqLxjaTS6sZZkk4vcxWr4SSDGjzExNU/0/323830343a393763343a3a2f33322d3438203d3e20323735363434.roa
Signing time:             Mon 09 Feb 2026 17:58:38 +0000
ROA not before:           Mon 09 Feb 2026 17:53:38 +0000
ROA not after:            Mon 08 Feb 2027 17:58:38 +0000
asID:                     275644
IP address blocks:        2804:97c4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6gWe8mgk5x55ATqLxjaTS6sZZkk4vcxWr4SSDGjzExNU/0/AECBF3CDCE0A34862EB94E68C559C421CD162F6D.crl
                          rsync://rpki-repo.registro.br/repo/6gWe8mgk5x55ATqLxjaTS6sZZkk4vcxWr4SSDGjzExNU/0/AECBF3CDCE0A34862EB94E68C559C421CD162F6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AECBF3CDCE0A34862EB94E68C559C421CD162F6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 01:40:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:fc:3c:0f:eb:88:dd:6e:54:42:7a:8d:2f:03:aa:5d:24:4f:8a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AECBF3CDCE0A34862EB94E68C559C421CD162F6D
        Validity
            Not Before: Feb  9 17:53:38 2026 GMT
            Not After : Feb  8 17:58:38 2027 GMT
        Subject: CN=DD9637D86B613485FF6EEE75029CA831317B94C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:57:87:c2:15:c3:9c:57:f6:e7:1c:dd:68:83:
                    b0:07:03:99:87:f4:24:30:03:68:8d:f8:ea:a2:b8:
                    ee:72:ca:50:59:01:c9:1b:45:3f:7e:44:72:a6:40:
                    54:9a:b2:92:28:91:d6:29:3b:94:77:a1:45:22:59:
                    d8:61:09:a4:54:a9:f4:de:de:82:1e:d8:bb:2f:be:
                    78:95:9b:78:32:86:1a:af:2b:11:d2:c4:18:00:0c:
                    24:57:61:6e:76:ef:27:f7:13:eb:c9:fe:bf:5a:7b:
                    a5:0f:14:9d:33:55:22:3b:bf:cc:78:1d:ba:84:a2:
                    53:4b:6c:90:e9:9a:57:a7:c5:a0:e1:ea:be:51:ed:
                    4b:00:3e:3b:7b:35:a5:92:7d:c4:b7:c5:e7:fc:9d:
                    9c:a5:92:95:86:34:93:53:cd:e5:76:fd:85:a3:c2:
                    cb:c3:cf:30:11:a0:c6:06:8f:69:cd:36:7a:9d:08:
                    c3:99:a8:ac:e5:dc:f8:f9:8a:b7:f5:a8:70:0c:cc:
                    80:8d:ec:0a:91:b7:f3:96:68:2e:1e:91:ac:7c:42:
                    a9:76:11:ea:87:94:89:dc:53:e2:6b:b8:5e:f2:6b:
                    67:e2:34:da:31:ff:c5:d0:1b:52:fe:2f:a9:5e:27:
                    1b:93:2c:2e:ae:a5:4d:91:79:37:51:a8:b4:a9:24:
                    ee:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:96:37:D8:6B:61:34:85:FF:6E:EE:75:02:9C:A8:31:31:7B:94:C2
            X509v3 Authority Key Identifier:
                keyid:AE:CB:F3:CD:CE:0A:34:86:2E:B9:4E:68:C5:59:C4:21:CD:16:2F:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6gWe8mgk5x55ATqLxjaTS6sZZkk4vcxWr4SSDGjzExNU/0/AECBF3CDCE0A34862EB94E68C559C421CD162F6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AECBF3CDCE0A34862EB94E68C559C421CD162F6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gWe8mgk5x55ATqLxjaTS6sZZkk4vcxWr4SSDGjzExNU/0/323830343a393763343a3a2f33322d3438203d3e20323735363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:97c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:7c:c8:0e:64:c9:88:7d:dc:72:41:e3:28:48:2e:74:80:af:
         fb:88:e4:06:d6:5f:09:43:cf:62:32:fb:4b:98:ce:23:00:4d:
         66:eb:65:7b:5f:73:85:d6:58:87:6d:3d:f3:2e:ad:4d:11:56:
         ff:6f:98:f4:e7:95:f3:27:9b:aa:a1:f0:4e:f0:f4:c4:6b:a9:
         08:26:fb:22:1c:dc:cc:ed:60:bb:a6:dd:9c:47:1b:c3:ad:6e:
         de:35:39:7d:74:20:7f:4b:a3:60:eb:94:51:84:00:89:1f:77:
         f0:c2:b5:12:34:03:c9:6f:f5:d7:00:70:9f:e7:30:08:af:6c:
         5d:14:03:e1:fa:f2:59:87:ff:7b:34:55:80:96:9c:07:0f:21:
         56:72:ff:7d:c8:52:b6:1f:50:59:77:4d:ce:63:51:53:33:42:
         81:91:63:6a:1a:3c:52:bd:9e:d5:bb:b5:5f:ae:22:db:b1:95:
         b5:9c:ae:02:77:ea:1d:5e:b7:62:91:a7:08:99:a1:34:1a:56:
         2f:62:12:4f:f2:0c:0b:de:9a:91:7b:22:16:74:c4:5f:89:24:
         02:b9:d6:e8:ee:af:26:9a:6b:97:53:56:a3:f5:6c:05:83:8a:
         64:a6:55:49:ea:c6:8a:ac:94:f4:9c:18:74:ed:8d:24:0b:1e:
         d5:28:2f:bf
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUbPw8D+uI3W5UQnqNLwOqXSRPih4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVDQkYzQ0RDRTBBMzQ4NjJFQjk0RTY4QzU1OUM0MjFD
RDE2MkY2RDAeFw0yNjAyMDkxNzUzMzhaFw0yNzAyMDgxNzU4MzhaMDMxMTAvBgNV
BAMTKEREOTYzN0Q4NkI2MTM0ODVGRjZFRUU3NTAyOUNBODMxMzE3Qjk0QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUV4fCFcOcV/bnHN1og7AHA5mH
9CQwA2iN+OqiuO5yylBZAckbRT9+RHKmQFSaspIokdYpO5R3oUUiWdhhCaRUqfTe
3oIe2LsvvniVm3gyhhqvKxHSxBgADCRXYW527yf3E+vJ/r9ae6UPFJ0zVSI7v8x4
HbqEolNLbJDpmlenxaDh6r5R7UsAPjt7NaWSfcS3xef8nZylkpWGNJNTzeV2/YWj
wsvDzzARoMYGj2nNNnqdCMOZqKzl3Pj5irf1qHAMzICN7AqRt/OWaC4ekax8Qql2
EeqHlIncU+JruF7ya2fiNNox/8XQG1L+L6leJxuTLC6upU2ReTdRqLSpJO53AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU3ZY32GthNIX/bu51ApyoMTF7lMIwHwYDVR0j
BBgwFoAUrsvzzc4KNIYuuU5oxVnEIc0WL20wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmdXZThtZ2s1eDU1QVRxTHhqYVRTNnNaWmtrNHZjeFdyNFNTREdqekV4
TlUvMC9BRUNCRjNDRENFMEEzNDg2MkVCOTRFNjhDNTU5QzQyMUNEMTYyRjZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFQ0JGM0NEQ0UwQTM0ODYy
RUI5NEU2OEM1NTlDNDIxQ0QxNjJGNkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZnV2U4bWdrNXg1NUFUcUx4amFUUzZzWlprazR2Y3hXcjRTU0RHanpFeE5VLzAv
MzIzODMwMzQzYTM5Mzc2MzM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzM1
MzYzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASXxDANBgkqhkiG9w0BAQsFAAOCAQEAe3zIDmTJ
iH3cckHjKEgudICv+4jkBtZfCUPPYjL7S5jOIwBNZutle19zhdZYh2098y6tTRFW
/2+Y9OeV8yebqqHwTvD0xGupCCb7IhzczO1gu6bdnEcbw61u3jU5fXQgf0ujYOuU
UYQAiR938MK1EjQDyW/11wBwn+cwCK9sXRQD4fryWYf/ezRVgJacBw8hVnL/fchS
th9QWXdNzmNRUzNCgZFjaho8Ur2e1bu1X64i27GVtZyuAnfqHV63YpGnCJmhNBpW
L2IST/IMC96akXsiFnTEX4kkArnW6O6vJpprl1NWo/VsBYOKZKZVSerGiqyU9JwY
dO2NJAse1Sgvvw==
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:11:59 2026 by rpki-client