Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/323830343a366566303a3a2f33322d3438203d3e20323730363238.roa
File:                     323830343a366566303a3a2f33322d3438203d3e20323730363238.roa (raw, json)
Hash identifier:          gWTeR3CtnQV1m2oXUmWaSApl+1GMfhDKeV862UZmVZ0=
Subject key identifier:   EE:75:29:E8:55:DD:6F:5A:DA:D3:3A:73:30:EB:0E:E0:B3:F2:9F:AC
Certificate issuer:       /CN=FFBC11B5DDB084014A261301018F4DAFBE36BCBB
Certificate serial:       0AAD37DFC6B90F42720A34EDF7738F3407E4C462
Authority key identifier: FF:BC:11:B5:DD:B0:84:01:4A:26:13:01:01:8F:4D:AF:BE:36:BC:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/323830343a366566303a3a2f33322d3438203d3e20323730363238.roa
Signing time:             Fri 06 Feb 2026 20:00:00 +0000
ROA not before:           Fri 06 Feb 2026 19:55:00 +0000
ROA not after:            Sat 06 Feb 2027 20:00:00 +0000
asID:                     270628
IP address blocks:        2804:6ef0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.crl
                          rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ad:37:df:c6:b9:0f:42:72:0a:34:ed:f7:73:8f:34:07:e4:c4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFBC11B5DDB084014A261301018F4DAFBE36BCBB
        Validity
            Not Before: Feb  6 19:55:00 2026 GMT
            Not After : Feb  6 20:00:00 2027 GMT
        Subject: CN=3082010A0282010100C0B20F31B445634EB0E868EEC0B31B1C372EABB687A2325BA68CFCF65BF223B4D8C1F961EFC91937ED33D0171ACE5D77950511619164DFB5CCABEB446C4498B6BB292C561B85CA6FF8F6711DA357D7C00469711F1710E47F9D82BB586BA2708AC3A013F1CB9771D003460A61D4292FA5E2C94A325F26EFCE159477A30A1257E49DE13E6FFF68DACF374E347D4EFD0541450C9661E2251B70E13731E20283C63D3181EF93F47954EF90B7B089801080E67A8E213538257A7AA36DAC38BE67B7CE1950FDD5A2D66C5CFC4E2F2053CF30827502279624134E40F1EAE3B2E261E0447804E55720433E590469256B18D015B0FA9EFCD3CCDE5BFAC6DD5CA6831D40DD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b2:0f:31:b4:45:63:4e:b0:e8:68:ee:c0:b3:
                    1b:1c:37:2e:ab:b6:87:a2:32:5b:a6:8c:fc:f6:5b:
                    f2:23:b4:d8:c1:f9:61:ef:c9:19:37:ed:33:d0:17:
                    1a:ce:5d:77:95:05:11:61:91:64:df:b5:cc:ab:eb:
                    44:6c:44:98:b6:bb:29:2c:56:1b:85:ca:6f:f8:f6:
                    71:1d:a3:57:d7:c0:04:69:71:1f:17:10:e4:7f:9d:
                    82:bb:58:6b:a2:70:8a:c3:a0:13:f1:cb:97:71:d0:
                    03:46:0a:61:d4:29:2f:a5:e2:c9:4a:32:5f:26:ef:
                    ce:15:94:77:a3:0a:12:57:e4:9d:e1:3e:6f:ff:68:
                    da:cf:37:4e:34:7d:4e:fd:05:41:45:0c:96:61:e2:
                    25:1b:70:e1:37:31:e2:02:83:c6:3d:31:81:ef:93:
                    f4:79:54:ef:90:b7:b0:89:80:10:80:e6:7a:8e:21:
                    35:38:25:7a:7a:a3:6d:ac:38:be:67:b7:ce:19:50:
                    fd:d5:a2:d6:6c:5c:fc:4e:2f:20:53:cf:30:82:75:
                    02:27:96:24:13:4e:40:f1:ea:e3:b2:e2:61:e0:44:
                    78:04:e5:57:20:43:3e:59:04:69:25:6b:18:d0:15:
                    b0:fa:9e:fc:d3:cc:de:5b:fa:c6:dd:5c:a6:83:1d:
                    40:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:75:29:E8:55:DD:6F:5A:DA:D3:3A:73:30:EB:0E:E0:B3:F2:9F:AC
            X509v3 Authority Key Identifier:
                keyid:FF:BC:11:B5:DD:B0:84:01:4A:26:13:01:01:8F:4D:AF:BE:36:BC:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/323830343a366566303a3a2f33322d3438203d3e20323730363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ef0::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:ab:4f:bb:f6:46:84:bd:17:88:0e:25:04:d2:5d:cf:bf:87:
         55:f5:db:73:92:22:16:7e:fd:c8:43:0b:5f:28:31:40:ca:c6:
         21:9c:73:05:f8:cd:a6:18:e3:b5:a7:0c:70:17:b9:0b:81:1f:
         9b:7c:cb:9f:23:af:1f:99:39:34:53:d5:a4:d9:ff:4d:e5:b1:
         ce:f5:2d:3b:c4:ab:83:e1:97:8b:39:6a:99:84:0f:6d:11:6b:
         5a:40:c1:12:51:fb:f1:d3:8a:a8:b1:af:da:32:f0:84:e2:11:
         5a:87:41:b3:e1:b8:1c:90:30:bc:d6:ea:1c:24:54:1a:0a:a8:
         6b:e3:79:7d:18:02:8f:9d:a9:87:90:fd:aa:bf:1f:2d:22:59:
         8a:3e:14:a4:f0:6b:fa:d3:02:5f:b8:b7:62:26:d5:7e:67:98:
         52:57:45:7b:6a:9e:b2:71:c0:6c:40:4e:37:34:9d:c8:fb:26:
         28:7e:c5:bb:7b:fc:bd:0a:62:95:44:81:6b:ad:2c:7e:b2:61:
         85:57:1c:c2:94:d5:b2:ab:81:5a:93:1b:07:55:ce:cb:48:8b:
         c9:93:c5:29:8b:b9:3b:ef:3c:b9:71:a3:cc:b0:89:0f:a7:16:
         f6:a8:48:db:06:3e:2e:e9:48:da:64:7d:12:d2:f2:3f:ac:d2:
         7b:fe:00:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:42:33 2026 by rpki-client