Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6pZLitfNN4JYcawpV3etEDeg7WeNVvNt4T5iWeb7oQW/0/323830343a386361303a3a2f33322d3438203d3e20323733333132.roa
File:                     323830343a386361303a3a2f33322d3438203d3e20323733333132.roa (raw, json)
Hash identifier:          Cf3ItrJSfW2lc0zj7o56cVYHWl8O7fEsKETOdS100pQ=
Subject key identifier:   FF:C3:97:93:87:CD:BD:80:2D:77:92:03:03:20:46:F1:8C:9B:55:49
Certificate issuer:       /CN=19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF
Certificate serial:       443E8F1EB40F49F4AC5E080BC9F2C9CE17685B8C
Authority key identifier: 19:B3:6D:8A:4C:D1:CC:FD:D6:E2:CC:4D:FC:B2:5E:56:07:6E:11:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6pZLitfNN4JYcawpV3etEDeg7WeNVvNt4T5iWeb7oQW/0/323830343a386361303a3a2f33322d3438203d3e20323733333132.roa
Signing time:             Wed 11 Feb 2026 13:26:46 +0000
ROA not before:           Wed 11 Feb 2026 13:21:46 +0000
ROA not after:            Wed 10 Feb 2027 13:26:46 +0000
asID:                     273312
IP address blocks:        2804:8ca0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6pZLitfNN4JYcawpV3etEDeg7WeNVvNt4T5iWeb7oQW/0/19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF.crl
                          rsync://rpki-repo.registro.br/repo/6pZLitfNN4JYcawpV3etEDeg7WeNVvNt4T5iWeb7oQW/0/19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 15:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3e:8f:1e:b4:0f:49:f4:ac:5e:08:0b:c9:f2:c9:ce:17:68:5b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF
        Validity
            Not Before: Feb 11 13:21:46 2026 GMT
            Not After : Feb 10 13:26:46 2027 GMT
        Subject: CN=FFC3979387CDBD802D779203032046F18C9B5549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0f:e9:b9:c3:46:3a:98:82:c5:7a:3b:50:9c:
                    ec:45:f4:30:46:39:a9:0e:5b:9b:80:d9:18:64:54:
                    40:5f:41:67:5c:da:14:4e:5c:10:a0:ad:e1:e6:9b:
                    3e:df:d6:80:d6:7e:1a:4c:a7:7e:97:ea:25:12:34:
                    e7:93:a1:e6:9b:e7:c5:df:41:c0:5f:0d:fb:74:8a:
                    0a:b5:dd:9e:99:6d:23:94:ad:dc:98:73:97:fe:1f:
                    6f:00:e0:0f:83:fa:d3:58:c9:d7:64:f3:3d:ec:9a:
                    77:0a:6f:b6:b9:34:0e:a7:b2:7d:07:01:e0:25:a6:
                    9f:15:df:d6:53:dc:22:93:02:ad:f2:dc:3b:e0:5d:
                    dc:c6:9d:e2:4b:2b:26:5b:35:03:69:51:f6:c4:b4:
                    82:be:71:85:52:65:9d:cd:da:b8:ad:a5:6f:94:cd:
                    fa:1b:df:63:4d:1e:89:58:66:91:4a:9e:a9:7b:70:
                    c8:0a:d3:eb:e2:76:fa:3f:b6:e7:51:96:cd:43:58:
                    99:d4:c1:b4:dd:b3:ab:8f:0d:a5:19:a4:71:74:64:
                    c7:a3:4d:cc:31:08:9e:44:ae:1b:be:2c:4f:b6:82:
                    1a:6f:c0:29:c1:d5:3b:02:14:42:9d:8c:22:75:69:
                    a3:36:6c:bb:9f:3c:ee:d7:a3:9b:b1:73:79:8d:8a:
                    4a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C3:97:93:87:CD:BD:80:2D:77:92:03:03:20:46:F1:8C:9B:55:49
            X509v3 Authority Key Identifier:
                keyid:19:B3:6D:8A:4C:D1:CC:FD:D6:E2:CC:4D:FC:B2:5E:56:07:6E:11:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6pZLitfNN4JYcawpV3etEDeg7WeNVvNt4T5iWeb7oQW/0/19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6pZLitfNN4JYcawpV3etEDeg7WeNVvNt4T5iWeb7oQW/0/323830343a386361303a3a2f33322d3438203d3e20323733333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:1a:1e:76:12:70:18:61:82:3e:90:6c:71:da:eb:5c:f4:2e:
         e6:a5:bd:cc:23:65:9d:6b:3a:2a:f1:05:d1:1e:72:33:60:42:
         3f:2c:ca:ca:9e:92:8c:1d:47:44:60:87:bd:81:5a:6e:84:69:
         96:bc:6a:66:c3:36:62:9e:6c:56:9c:5b:00:1f:61:ed:e8:60:
         80:c0:1e:c6:31:5a:3e:03:0a:4a:f3:a3:d3:04:23:c8:08:c4:
         2c:8c:5f:4b:8b:6c:37:71:57:8b:ed:26:1b:cb:06:14:7a:36:
         4d:71:2c:a6:25:e2:8a:1b:a7:bb:69:49:ec:84:96:54:46:a1:
         c6:77:ad:87:5f:45:a8:b7:36:b6:d7:a2:50:8a:54:45:a8:06:
         ee:f9:95:e8:d7:d2:a3:93:2c:e1:61:60:2a:af:96:4a:7c:3c:
         e7:25:bb:99:e7:77:00:ea:a9:7b:7d:1d:3d:18:fc:c0:a2:ed:
         0d:24:27:62:80:39:2b:95:1b:f1:fb:88:db:1d:5c:f4:e4:15:
         c2:80:7b:d6:b1:b7:f1:ea:e1:bf:b8:2a:33:ca:f4:6e:9a:da:
         70:20:8c:41:96:2f:33:bf:78:52:c0:c2:77:7d:90:07:d2:88:
         da:c2:45:b9:a5:14:d3:5c:9e:60:15:3f:b1:22:2c:ac:cf:e1:
         6a:d9:f4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 03:03:24 2026 by rpki-client