Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/323830343a316162343a383030303a3a2f33332d3333203d3e203631383737.roa
File:                     323830343a316162343a383030303a3a2f33332d3333203d3e203631383737.roa (raw, json)
Hash identifier:          6RMt2W7pjCyWmtmkui70R9oIp+0xWOmLh/xNzYaRC+I=
Subject key identifier:   A2:88:77:F9:26:9E:FC:21:71:73:E7:F7:98:C8:23:2A:08:41:30:1D
Certificate issuer:       /CN=2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586
Certificate serial:       6489EDCDC3485056A67EEFBB6AD0199BB97DFA44
Authority key identifier: 2C:B0:A4:F9:7E:58:54:FF:26:43:BF:14:74:C7:0D:B5:C3:FB:B5:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/323830343a316162343a383030303a3a2f33332d3333203d3e203631383737.roa
Signing time:             Fri 06 Feb 2026 15:46:43 +0000
ROA not before:           Fri 06 Feb 2026 15:41:43 +0000
ROA not after:            Fri 05 Feb 2027 15:46:43 +0000
asID:                     61877
IP address blocks:        2804:1ab4:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.crl
                          rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:89:ed:cd:c3:48:50:56:a6:7e:ef:bb:6a:d0:19:9b:b9:7d:fa:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586
        Validity
            Not Before: Feb  6 15:41:43 2026 GMT
            Not After : Feb  5 15:46:43 2027 GMT
        Subject: CN=A28877F9269EFC217173E7F798C8232A0841301D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:70:e0:a0:cc:d9:8a:11:00:b9:81:d5:05:2c:
                    08:b1:81:4d:ac:bc:f4:b4:16:80:ee:e7:a4:dc:73:
                    f3:3f:d8:82:52:97:12:90:29:13:a4:83:50:f5:63:
                    1a:77:9b:74:0d:56:27:25:ea:fb:54:77:f3:95:6e:
                    b7:95:3f:f4:83:bb:64:ff:b6:4c:84:12:b3:83:7f:
                    9a:e2:fb:59:59:a3:4b:80:1e:2b:f6:7d:2f:fc:3a:
                    1f:b5:36:d6:c5:8b:ec:bf:a4:53:46:0e:a6:de:13:
                    a8:19:69:28:12:d8:6a:d3:6f:25:e6:01:e7:04:a3:
                    9e:bb:af:2b:aa:bb:a9:13:30:2f:aa:b0:fb:8d:49:
                    57:62:68:4b:a7:a1:a5:85:f5:96:bb:cd:7a:1d:c2:
                    04:42:dc:ad:8d:35:78:85:75:48:c4:e0:32:1e:db:
                    21:91:59:b7:7c:48:91:ab:c8:44:3b:d5:b0:27:ac:
                    10:25:b7:d9:8a:03:83:48:2d:42:26:ae:94:7f:65:
                    61:b3:f6:5c:e0:70:56:c5:e5:00:de:7c:90:fc:ff:
                    2a:46:ee:50:10:5e:61:ca:e3:7e:11:65:01:9c:b4:
                    d9:94:c4:8b:0e:34:61:00:a4:41:72:62:8f:00:24:
                    8f:f6:6b:69:c0:61:7e:e6:82:5c:40:27:3d:cc:00:
                    9a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:88:77:F9:26:9E:FC:21:71:73:E7:F7:98:C8:23:2A:08:41:30:1D
            X509v3 Authority Key Identifier:
                keyid:2C:B0:A4:F9:7E:58:54:FF:26:43:BF:14:74:C7:0D:B5:C3:FB:B5:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/323830343a316162343a383030303a3a2f33332d3333203d3e203631383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ab4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         5c:55:81:93:f3:16:4b:c4:7e:a0:4d:b0:08:02:f4:cb:23:4b:
         15:70:9e:41:51:b5:43:a4:d5:1c:59:5e:62:58:9d:b3:68:8b:
         08:4f:95:52:ea:c7:b4:3d:8b:f4:2c:c4:25:d6:95:54:f3:4e:
         22:08:69:3e:36:f8:61:bb:fa:4c:05:70:dc:a1:1c:ea:b0:2f:
         8e:6b:23:cd:ba:95:a2:c5:cd:a9:00:12:15:ce:d5:a9:a3:bf:
         7d:c8:ca:a7:71:af:82:09:21:da:4b:0f:76:06:51:b5:fc:f6:
         66:63:9d:86:78:8b:8a:ba:1d:2b:ab:aa:47:98:bd:ed:18:f6:
         bc:b8:40:97:80:d0:a3:61:c4:a1:01:34:0a:f5:43:24:c4:34:
         16:33:84:c5:0e:52:b7:12:d8:2e:bf:2c:0b:eb:b5:b8:e6:b1:
         32:41:1a:8c:13:c6:81:eb:97:38:1f:dd:81:5b:11:65:44:ea:
         f5:82:fb:b1:ae:6c:c7:75:95:bf:e8:af:c7:cf:48:66:13:62:
         cb:fc:23:f5:98:bb:03:3e:38:35:a2:6e:57:aa:c4:0f:82:c1:
         ad:d1:be:0f:fb:ac:b4:0f:5e:8f:25:48:e9:a6:bb:88:3f:88:
         bf:56:9a:4c:f6:57:38:64:4b:8f:17:52:f7:9f:58:c9:0d:ae:
         9d:74:44:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:19:15 2026 by rpki-client