Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xDxGcUFE74FXdkwgWXYHv5EiZVhndW3rmiLX28nzBum/0/323830343a393765383a3a2f33322d313238203d3e20323735363533.roa
File:                     323830343a393765383a3a2f33322d313238203d3e20323735363533.roa (raw, json)
Hash identifier:          gf08MMvdgo7psZY2RRrNTlU5znonHYX/mjvO50vkSJ4=
Subject key identifier:   79:07:03:8F:D1:85:5F:A2:1F:CB:28:6B:7C:F4:62:FB:DE:76:0E:72
Certificate issuer:       /CN=706B8586616EBE641DA5C343AC06AAEBAEA7E2BF
Certificate serial:       24537D7799C032CE6BC6814A238D9E0FFE1E43F8
Authority key identifier: 70:6B:85:86:61:6E:BE:64:1D:A5:C3:43:AC:06:AA:EB:AE:A7:E2:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/706B8586616EBE641DA5C343AC06AAEBAEA7E2BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xDxGcUFE74FXdkwgWXYHv5EiZVhndW3rmiLX28nzBum/0/323830343a393765383a3a2f33322d313238203d3e20323735363533.roa
Signing time:             Sun 22 Feb 2026 16:19:15 +0000
ROA not before:           Sun 22 Feb 2026 16:14:15 +0000
ROA not after:            Sun 21 Feb 2027 16:19:15 +0000
asID:                     275653
IP address blocks:        2804:97e8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xDxGcUFE74FXdkwgWXYHv5EiZVhndW3rmiLX28nzBum/0/706B8586616EBE641DA5C343AC06AAEBAEA7E2BF.crl
                          rsync://rpki-repo.registro.br/repo/6xDxGcUFE74FXdkwgWXYHv5EiZVhndW3rmiLX28nzBum/0/706B8586616EBE641DA5C343AC06AAEBAEA7E2BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/706B8586616EBE641DA5C343AC06AAEBAEA7E2BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 17:22:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:53:7d:77:99:c0:32:ce:6b:c6:81:4a:23:8d:9e:0f:fe:1e:43:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706B8586616EBE641DA5C343AC06AAEBAEA7E2BF
        Validity
            Not Before: Feb 22 16:14:15 2026 GMT
            Not After : Feb 21 16:19:15 2027 GMT
        Subject: CN=7907038FD1855FA21FCB286B7CF462FBDE760E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6f:e2:c7:76:c4:b2:e7:ab:db:31:3a:b8:93:
                    b1:25:ba:8c:19:4b:25:93:54:6b:d7:9c:0d:a0:f2:
                    5b:4e:59:8a:9c:e8:33:99:47:33:84:9a:a5:e2:54:
                    8a:d0:03:1a:e5:36:13:4a:00:c3:f2:c4:15:0f:6c:
                    ec:87:8e:c0:1e:f8:af:71:11:d4:be:fd:05:03:42:
                    19:f5:b1:41:e1:c0:39:bd:fb:58:e4:6a:35:4f:ea:
                    c4:73:ac:d4:a5:0b:b4:7e:a8:78:05:09:89:50:03:
                    37:e6:32:3e:9c:c6:6e:c8:21:7b:3a:77:78:cf:ea:
                    c2:56:5b:ed:67:aa:2a:9d:6b:85:dd:d6:96:64:3e:
                    44:3a:32:b2:43:29:40:3c:6d:8b:14:75:15:12:24:
                    a6:8e:23:0e:f1:14:7a:d3:a2:fd:69:df:6b:b3:86:
                    1f:ee:ff:9a:c8:b0:3d:85:45:0a:a7:a6:f1:c5:84:
                    53:36:a9:f2:79:c6:b2:eb:c5:27:45:9a:67:f4:03:
                    8e:30:9f:e5:0a:f7:cb:3f:17:b9:f3:6b:d3:2b:9e:
                    26:33:9d:32:34:e3:52:3b:3a:8f:3c:94:11:40:2e:
                    53:a8:a8:e9:95:64:da:85:7c:9c:56:7c:0d:5c:f3:
                    83:be:e8:58:d9:6c:d5:1a:52:aa:30:0a:37:8d:1d:
                    1e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:07:03:8F:D1:85:5F:A2:1F:CB:28:6B:7C:F4:62:FB:DE:76:0E:72
            X509v3 Authority Key Identifier:
                keyid:70:6B:85:86:61:6E:BE:64:1D:A5:C3:43:AC:06:AA:EB:AE:A7:E2:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xDxGcUFE74FXdkwgWXYHv5EiZVhndW3rmiLX28nzBum/0/706B8586616EBE641DA5C343AC06AAEBAEA7E2BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/706B8586616EBE641DA5C343AC06AAEBAEA7E2BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xDxGcUFE74FXdkwgWXYHv5EiZVhndW3rmiLX28nzBum/0/323830343a393765383a3a2f33322d313238203d3e20323735363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:97e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:4e:35:07:85:c6:63:d3:57:11:94:ab:59:b3:be:97:33:94:
         1a:c1:91:80:05:3d:83:5f:fc:85:4d:37:68:51:44:db:13:3f:
         ef:9c:37:2c:0b:ff:0e:68:36:ed:da:77:fa:a2:c8:a1:c3:87:
         ff:4f:85:99:74:04:e1:42:d3:b5:94:1e:b4:55:38:8d:81:fd:
         ff:bd:53:49:69:5c:7e:fb:14:1c:0e:02:f1:76:35:42:b7:fa:
         93:9f:7b:2a:d5:c9:a5:6f:d9:bd:ea:dc:b4:79:d6:b8:f3:c9:
         f7:ed:db:e7:84:a5:17:d6:d1:da:ea:c1:f6:df:14:df:4c:3a:
         47:22:4a:97:03:ca:8f:ab:a7:91:40:1a:d5:e1:64:e6:dc:fd:
         94:c1:bf:34:9d:00:df:fa:5d:88:07:ca:e6:85:b0:39:fd:63:
         21:4a:ec:63:c5:20:a5:7d:f9:24:2a:2c:bb:48:a6:b8:99:5e:
         83:8b:c9:e9:eb:1b:77:69:8a:aa:c7:7b:26:5f:41:33:d7:0d:
         fb:d2:6f:d9:17:5a:58:56:bd:90:9f:a7:cb:55:b4:b8:85:e6:
         ad:a1:8a:62:35:c0:9c:55:68:be:9c:2e:17:b5:b2:67:49:36:
         fe:16:49:0d:20:24:2a:e7:a4:90:e8:90:11:0a:96:5e:dd:f4:
         14:dd:5a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:36:04 2026 by rpki-client