Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a633030303a3a2f33342d3334203d3e20323635343931.roa
File:                     323830343a333466343a633030303a3a2f33342d3334203d3e20323635343931.roa (raw, json)
Hash identifier:          itw27+EeZ4tTbkfDNB6uYDwAjK5PSP28egO3BIS5Csg=
Subject key identifier:   16:DA:4A:9F:00:0A:31:89:AD:54:BA:BC:51:11:46:21:E8:D7:64:23
Certificate issuer:       /CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46
Certificate serial:       148A5CA10F79DEB74107C7EFF70D4B0A163CB250
Authority key identifier: 96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a633030303a3a2f33342d3334203d3e20323635343931.roa
Signing time:             Tue 27 Jan 2026 19:23:08 +0000
ROA not before:           Tue 27 Jan 2026 19:18:08 +0000
ROA not after:            Tue 26 Jan 2027 19:23:08 +0000
asID:                     265491
IP address blocks:        2804:34f4:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.crl
                          rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 02:37:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:8a:5c:a1:0f:79:de:b7:41:07:c7:ef:f7:0d:4b:0a:16:3c:b2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46
        Validity
            Not Before: Jan 27 19:18:08 2026 GMT
            Not After : Jan 26 19:23:08 2027 GMT
        Subject: CN=16DA4A9F000A3189AD54BABC51114621E8D76423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:57:ad:61:59:d9:e7:89:c5:8f:60:fc:1c:37:
                    06:4b:2d:2a:8d:66:c2:33:a4:b2:e5:19:eb:e2:dd:
                    0b:70:ca:55:80:bd:91:b1:b3:9b:ab:38:42:d8:b5:
                    b3:fc:93:79:f9:be:23:1d:8c:11:64:87:35:c1:10:
                    d5:d3:65:ee:f0:6f:1a:17:78:da:74:2e:a2:81:2a:
                    f8:a1:c7:21:d6:03:d1:bd:39:49:2b:99:63:4f:64:
                    4b:a0:e3:3c:55:a5:78:d6:19:8c:b7:a7:01:b5:a8:
                    68:3c:f1:7b:fa:5e:82:ca:f3:db:77:e3:12:a1:77:
                    f8:fd:f7:dd:08:da:61:a0:21:b9:ba:59:8b:29:1d:
                    92:f9:53:b7:53:6b:c2:31:12:f8:16:6e:e1:8a:c9:
                    3b:3d:8f:b9:79:c6:d2:f6:75:4e:2a:ed:ca:bf:b6:
                    d6:56:b1:98:41:19:97:9a:7d:3d:8b:f3:3f:0a:95:
                    8e:59:c4:94:8b:67:d8:c5:1a:62:b6:c4:12:52:9f:
                    4e:4f:0f:67:56:15:de:c1:a1:65:99:fa:9e:1f:99:
                    03:95:7f:48:85:1c:d7:3a:00:1f:79:86:a1:97:4a:
                    ba:9e:85:7f:d3:7e:71:cb:f6:55:c5:55:b7:57:42:
                    b9:6d:27:5b:ac:f7:7d:16:16:eb:e1:b1:6b:45:db:
                    e5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DA:4A:9F:00:0A:31:89:AD:54:BA:BC:51:11:46:21:E8:D7:64:23
            X509v3 Authority Key Identifier:
                keyid:96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a633030303a3a2f33342d3334203d3e20323635343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34f4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1d:f1:53:a7:87:f1:e5:de:9a:96:ac:6f:34:11:d4:54:41:55:
         9b:9a:70:2b:ce:0b:86:f0:18:ba:80:a6:bc:8e:32:8d:58:51:
         d1:7d:2e:53:d0:7d:4a:6e:87:2f:08:50:ee:a1:8a:ff:49:4b:
         71:b8:40:d8:cc:71:bc:5c:ef:8f:b6:c8:ae:2b:29:a7:29:75:
         1f:ce:0b:02:ec:94:60:44:a3:e4:77:9e:af:dc:63:b9:80:61:
         47:a2:7e:47:c6:6a:ad:3d:1c:fb:04:19:61:7a:81:52:03:cf:
         08:86:9b:0a:31:5e:be:14:20:7c:69:9b:f3:d0:0f:00:21:4c:
         c9:3e:7c:60:50:ab:bd:94:8d:66:a3:77:28:cd:b5:6c:a9:39:
         5d:3a:0e:cc:38:78:bd:e5:f8:4b:a2:c1:71:5b:19:42:0e:d9:
         67:1c:e8:b8:12:73:cb:43:33:98:4c:8c:79:20:06:d1:ef:e1:
         4d:43:ac:ba:62:cf:00:1d:db:9c:f3:bb:88:36:e5:c6:f8:ae:
         41:14:5e:04:5a:7f:d4:2e:3f:31:bb:c5:9a:79:3e:77:36:9d:
         2f:93:bc:d9:ec:66:66:d7:44:e7:a0:3d:37:e4:4c:5e:68:df:
         cb:dc:92:4e:55:45:87:e7:45:dd:23:df:7e:80:1a:c2:88:53:
         f6:ac:88:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:44:57 2026 by rpki-client