Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7JpkQPMXVWFE6wKj3rTx2dpgMAQ7HqgCrJMteAgYMueb/0/323830343a353738343a383030303a3a2f33332d3333203d3e20323638303639.roa
File:                     323830343a353738343a383030303a3a2f33332d3333203d3e20323638303639.roa (raw, json)
Hash identifier:          snREHHhWPfagsNWbYobIC85uQ2X5lTJ8H4OqQChxK6E=
Subject key identifier:   D2:DC:90:96:9D:6C:63:37:8B:9D:EA:53:85:A4:F7:41:41:0B:4B:AE
Certificate issuer:       /CN=07EBEAEFC40ED57B565E1491CADA5DF59FCF351B
Certificate serial:       6B2C961B612021169C80747951B13AE7D64177F7
Authority key identifier: 07:EB:EA:EF:C4:0E:D5:7B:56:5E:14:91:CA:DA:5D:F5:9F:CF:35:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07EBEAEFC40ED57B565E1491CADA5DF59FCF351B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JpkQPMXVWFE6wKj3rTx2dpgMAQ7HqgCrJMteAgYMueb/0/323830343a353738343a383030303a3a2f33332d3333203d3e20323638303639.roa
Signing time:             Wed 18 Feb 2026 13:50:35 +0000
ROA not before:           Wed 18 Feb 2026 13:45:35 +0000
ROA not after:            Wed 17 Feb 2027 13:50:35 +0000
asID:                     268069
IP address blocks:        2804:5784:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7JpkQPMXVWFE6wKj3rTx2dpgMAQ7HqgCrJMteAgYMueb/0/07EBEAEFC40ED57B565E1491CADA5DF59FCF351B.crl
                          rsync://rpki-repo.registro.br/repo/7JpkQPMXVWFE6wKj3rTx2dpgMAQ7HqgCrJMteAgYMueb/0/07EBEAEFC40ED57B565E1491CADA5DF59FCF351B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07EBEAEFC40ED57B565E1491CADA5DF59FCF351B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 10:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:2c:96:1b:61:20:21:16:9c:80:74:79:51:b1:3a:e7:d6:41:77:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07EBEAEFC40ED57B565E1491CADA5DF59FCF351B
        Validity
            Not Before: Feb 18 13:45:35 2026 GMT
            Not After : Feb 17 13:50:35 2027 GMT
        Subject: CN=D2DC90969D6C63378B9DEA5385A4F741410B4BAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:96:d3:4d:80:fe:73:bc:61:84:13:a1:c7:4a:
                    4f:96:63:65:72:02:ac:3a:d1:c8:41:55:51:a9:29:
                    72:87:08:9b:49:bc:90:8c:c7:4c:a4:67:c6:64:a6:
                    e9:ec:14:0f:b5:e8:59:cf:a3:b6:c4:40:c2:fd:5b:
                    60:7b:04:0c:78:f0:1c:d2:93:00:86:c0:a7:ce:4c:
                    1b:43:23:ad:fe:15:65:6f:43:44:e9:20:0f:1c:c5:
                    26:d3:bb:a2:94:41:a9:51:62:43:35:b6:32:84:ec:
                    45:3b:a1:25:25:39:49:12:13:0a:5e:03:2a:20:05:
                    00:c3:16:bf:62:79:7b:ef:b0:21:c5:56:0b:12:4c:
                    46:68:8d:ad:32:a2:90:6d:87:39:7a:bf:38:da:8a:
                    f8:f2:4c:06:b6:19:4d:b1:06:c3:e1:f6:44:32:42:
                    9c:69:4a:20:f4:ee:a9:e7:d0:81:a0:60:14:71:25:
                    a9:fd:8b:39:05:a0:5a:26:43:37:7c:79:2f:13:3f:
                    04:82:01:a3:b7:3f:38:9d:2f:8e:38:93:1f:9f:24:
                    9a:43:94:75:8f:3f:74:6b:a5:17:82:9c:d7:93:be:
                    0a:be:5b:98:31:fa:f0:f4:00:bd:4a:8b:8f:20:44:
                    8b:2a:46:0b:ff:9c:77:a7:04:0d:bd:ab:2e:a9:d8:
                    00:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DC:90:96:9D:6C:63:37:8B:9D:EA:53:85:A4:F7:41:41:0B:4B:AE
            X509v3 Authority Key Identifier:
                keyid:07:EB:EA:EF:C4:0E:D5:7B:56:5E:14:91:CA:DA:5D:F5:9F:CF:35:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JpkQPMXVWFE6wKj3rTx2dpgMAQ7HqgCrJMteAgYMueb/0/07EBEAEFC40ED57B565E1491CADA5DF59FCF351B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07EBEAEFC40ED57B565E1491CADA5DF59FCF351B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JpkQPMXVWFE6wKj3rTx2dpgMAQ7HqgCrJMteAgYMueb/0/323830343a353738343a383030303a3a2f33332d3333203d3e20323638303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5784:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         ae:64:72:eb:2e:c9:6c:fe:59:4d:c2:9c:fb:5e:15:91:73:dd:
         98:a1:cd:28:9a:41:0e:d8:b0:b9:cc:87:cc:08:06:ed:3a:0f:
         e5:33:5c:2b:78:47:c9:6b:c4:09:0e:dd:42:3a:c5:cd:f7:34:
         ba:2b:81:02:18:98:97:a0:4a:a2:76:a8:5b:1e:a7:ae:a1:56:
         9a:b0:ba:98:e1:4d:3b:ba:7d:c1:bd:8b:54:5a:23:25:20:d1:
         ee:de:4b:ed:30:51:25:da:29:4b:02:c6:a2:be:6e:02:60:73:
         d4:9b:73:ea:1c:60:f7:21:2a:c6:59:44:aa:be:b1:d0:c3:4c:
         79:a8:99:88:89:f1:40:3f:3e:96:18:5d:fb:4d:0e:d5:9c:4e:
         d4:65:d0:33:0d:75:e6:ce:f3:8d:88:70:1a:be:12:68:0d:e1:
         5f:4e:f0:8d:37:cb:78:47:f1:d5:f6:24:9d:34:06:c3:f9:35:
         bf:ae:d9:fe:8e:ce:4a:77:9a:f1:8e:c6:82:5a:67:42:b1:b3:
         27:a3:d7:8d:40:ef:2c:4d:75:01:1e:a7:cb:d8:da:3c:54:83:
         35:80:e2:8c:78:86:77:c2:70:9e:ee:52:e1:2b:8b:a8:d6:a9:
         9b:85:4d:97:00:ab:49:01:0b:6e:32:65:d1:47:97:f0:cc:4d:
         55:41:1e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:02:40 2026 by rpki-client