Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a383030303a3a2f33332d3333203d3e20323635343931.roa
File:                     323830343a333466343a383030303a3a2f33332d3333203d3e20323635343931.roa (raw, json)
Hash identifier:          Fj1/5mTMeNzRCsSbddBULYIMjLAjak1ylqX2bHI5XBs=
Subject key identifier:   7E:58:CB:51:79:0F:DF:B4:78:89:F2:C9:50:45:51:F4:03:EE:C6:CA
Certificate issuer:       /CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46
Certificate serial:       0D6A323D12263EF6BDC98CFA34CE4F55BCA29BE7
Authority key identifier: 96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a383030303a3a2f33332d3333203d3e20323635343931.roa
Signing time:             Tue 27 Jan 2026 19:23:09 +0000
ROA not before:           Tue 27 Jan 2026 19:18:09 +0000
ROA not after:            Tue 26 Jan 2027 19:23:09 +0000
asID:                     265491
IP address blocks:        2804:34f4:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.crl
                          rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 02:37:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:6a:32:3d:12:26:3e:f6:bd:c9:8c:fa:34:ce:4f:55:bc:a2:9b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46
        Validity
            Not Before: Jan 27 19:18:09 2026 GMT
            Not After : Jan 26 19:23:09 2027 GMT
        Subject: CN=7E58CB51790FDFB47889F2C9504551F403EEC6CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7d:2c:db:4e:98:c3:3a:12:64:1d:97:0c:50:
                    b1:18:84:36:74:03:24:9b:56:78:6e:59:74:3a:92:
                    52:cd:a1:02:e9:49:c3:4a:51:1f:69:6c:8c:77:7f:
                    0e:9f:d7:87:58:13:2f:a9:30:2b:68:21:d0:51:90:
                    18:10:e2:19:e2:82:62:71:85:cf:e9:b6:d5:d8:63:
                    c7:ae:28:b6:6f:8a:11:72:1a:fa:95:45:30:55:1c:
                    50:d3:2b:77:25:5a:bc:38:b4:df:a9:f5:39:fa:14:
                    20:e3:43:37:94:6e:0f:19:1d:1e:7c:97:aa:02:2f:
                    50:fc:02:54:d4:ee:dd:3f:b2:14:19:d5:d7:c2:09:
                    10:92:ff:ac:3b:a6:af:89:10:27:f2:47:eb:5d:00:
                    b5:57:bd:ce:30:b8:8d:11:58:f7:8b:30:cd:1b:55:
                    f3:3f:b1:e2:65:95:7c:89:96:99:f4:1e:ea:74:f0:
                    48:b5:a7:c8:ef:f0:d1:7e:b6:41:4b:01:16:39:31:
                    17:29:c9:30:2a:b8:c1:a4:3e:9e:46:29:65:bc:f1:
                    66:16:7b:82:7a:95:00:a6:41:e1:d9:97:16:0e:f6:
                    c0:08:70:97:52:ef:84:00:40:bb:ff:48:92:b7:1c:
                    bc:43:36:4d:02:ea:90:cf:d1:2c:7e:33:bb:d4:cc:
                    31:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:58:CB:51:79:0F:DF:B4:78:89:F2:C9:50:45:51:F4:03:EE:C6:CA
            X509v3 Authority Key Identifier:
                keyid:96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a383030303a3a2f33332d3333203d3e20323635343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34f4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0f:7b:bc:36:80:a1:20:fd:28:18:37:51:fa:d1:6d:cf:26:20:
         42:11:e7:0f:0c:1b:36:be:76:14:af:ea:19:47:ba:cf:c4:cb:
         e0:75:11:b6:bf:81:63:53:77:87:03:5b:3a:27:af:fd:c0:8b:
         8c:02:7f:de:16:51:14:da:f9:6b:ef:6f:75:72:a9:df:ca:da:
         43:d2:ec:f9:1d:3f:85:e5:0a:86:99:9f:53:4f:18:7a:7a:0c:
         a1:c8:96:aa:2b:dc:d4:8b:f9:c2:1d:21:4b:bd:d7:21:53:87:
         cf:c5:b0:51:72:ad:35:ee:4e:a6:72:fd:0a:e3:17:e7:4a:9f:
         0b:47:3d:a5:d4:6d:dc:5c:0a:43:d9:a6:49:8e:7f:46:56:e0:
         45:6f:5b:13:83:05:bc:e9:d8:81:c6:68:8f:50:28:9c:59:59:
         36:08:8e:28:68:62:45:13:99:33:54:3f:29:84:5e:fe:49:2a:
         d8:6b:ce:e5:84:f1:6c:f0:2b:71:96:44:07:0c:de:9b:70:aa:
         89:8b:c6:95:57:51:dd:da:29:2d:e5:29:82:69:95:24:16:dd:
         af:ef:01:ef:76:e4:48:a8:a7:4d:70:f7:a1:36:f3:c4:c2:e1:
         17:75:cd:85:96:63:c1:be:05:c3:c3:1a:d7:ff:fb:dc:8a:02:
         c2:64:2a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 07:04:31 2026 by rpki-client