Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/323830343a63383a3a2f33322d3438203d3e203238333636.roa
File:                     323830343a63383a3a2f33322d3438203d3e203238333636.roa (raw, json)
Hash identifier:          eBBjqeg+znQ8N0DNoIHoBOEt6XtOxN0jUPTPaOjZzv4=
Subject key identifier:   F2:D6:F3:7B:C8:D1:E6:31:F9:5C:88:DD:B2:FD:3C:79:B5:C7:EE:22
Certificate issuer:       /CN=E608E42463C3A9603E3AD30D10A74366181F80B1
Certificate serial:       38C5E9A5CF8D015D5BE697570DC786FD163DC57E
Authority key identifier: E6:08:E4:24:63:C3:A9:60:3E:3A:D3:0D:10:A7:43:66:18:1F:80:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E608E42463C3A9603E3AD30D10A74366181F80B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/323830343a63383a3a2f33322d3438203d3e203238333636.roa
Signing time:             Wed 04 Feb 2026 20:57:37 +0000
ROA not before:           Wed 04 Feb 2026 20:52:37 +0000
ROA not after:            Wed 03 Feb 2027 20:57:37 +0000
asID:                     28366
IP address blocks:        2804:c8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/E608E42463C3A9603E3AD30D10A74366181F80B1.crl
                          rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/E608E42463C3A9603E3AD30D10A74366181F80B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E608E42463C3A9603E3AD30D10A74366181F80B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 21:42:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c5:e9:a5:cf:8d:01:5d:5b:e6:97:57:0d:c7:86:fd:16:3d:c5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E608E42463C3A9603E3AD30D10A74366181F80B1
        Validity
            Not Before: Feb  4 20:52:37 2026 GMT
            Not After : Feb  3 20:57:37 2027 GMT
        Subject: CN=F2D6F37BC8D1E631F95C88DDB2FD3C79B5C7EE22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:43:7b:00:a7:fd:7c:25:fe:38:18:3f:5a:8a:
                    c6:2b:58:ec:5d:6f:db:de:ea:f0:ba:39:90:07:0b:
                    b7:f1:5e:c6:4a:87:3b:bf:3b:cf:a6:8f:3d:0d:3d:
                    bf:ee:c5:65:85:81:fd:f4:b4:0d:94:d4:a0:cf:29:
                    11:9c:84:01:01:8f:42:ad:44:22:60:3c:09:31:0e:
                    32:ad:a2:21:e3:09:dd:ab:05:87:0f:24:12:bc:22:
                    99:11:28:95:f2:22:a8:95:ee:56:ab:ea:42:5f:45:
                    ce:47:e8:28:ca:b8:d9:cf:56:5a:fc:a6:c8:38:eb:
                    1f:3a:87:80:74:db:cd:41:40:78:6c:b9:32:04:36:
                    27:71:b9:03:e8:42:e3:9f:77:f0:88:52:c6:9a:1e:
                    1a:c5:26:2e:f4:bd:1e:31:6b:ad:79:de:c1:ef:21:
                    90:15:a8:b8:97:32:ff:93:ce:8a:43:85:e1:cb:1c:
                    fe:2d:a8:ed:99:3c:8b:bc:1a:52:d8:a4:56:4a:e4:
                    4f:45:22:7d:ff:dc:69:e5:22:6d:d4:45:ef:fa:f5:
                    ec:05:15:fd:cc:8a:ec:1b:a0:86:c3:9d:9d:33:97:
                    bb:b2:6a:c9:2f:58:52:77:c3:2e:50:2a:36:4b:be:
                    7e:ec:dc:c6:69:27:a3:9f:ed:38:b5:47:63:c7:df:
                    b3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D6:F3:7B:C8:D1:E6:31:F9:5C:88:DD:B2:FD:3C:79:B5:C7:EE:22
            X509v3 Authority Key Identifier:
                keyid:E6:08:E4:24:63:C3:A9:60:3E:3A:D3:0D:10:A7:43:66:18:1F:80:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/E608E42463C3A9603E3AD30D10A74366181F80B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E608E42463C3A9603E3AD30D10A74366181F80B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/323830343a63383a3a2f33322d3438203d3e203238333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:1a:65:97:86:f0:ea:dc:d2:d0:7c:45:ff:b4:6f:2d:0e:fe:
         b7:87:ae:d6:71:1e:5c:19:d1:3b:60:0e:29:c4:5c:b3:aa:bb:
         64:30:64:22:bf:4f:cd:77:af:0c:51:76:81:c8:b6:d9:b5:94:
         11:9c:8f:45:22:ad:5b:87:39:45:02:99:c7:f9:bd:af:31:ff:
         c9:a1:5a:34:d6:2d:e9:9d:89:b8:1f:2a:af:bc:28:18:d0:38:
         10:17:98:7e:61:cd:a8:73:54:a5:5c:a6:8a:c9:56:da:9a:76:
         44:1e:47:d0:fb:5a:7d:4c:a1:0d:89:c2:22:45:e5:d4:0b:8f:
         b8:71:f7:71:18:f4:ea:7c:0f:b1:24:f1:eb:24:f2:ea:a4:d5:
         99:2a:d0:13:b2:1c:35:84:f3:4c:28:bc:d5:40:c5:08:b2:4f:
         41:6b:25:74:9e:56:25:0a:32:15:2f:28:79:a6:7e:45:59:d7:
         d2:5c:69:a8:b5:94:18:67:15:ee:a2:42:84:1a:70:0c:c8:38:
         49:f3:18:12:b8:93:0c:20:eb:a5:7b:48:0d:32:12:e5:98:e6:
         ee:8e:93:fe:6f:4f:90:a9:ad:bd:9b:6e:3c:17:21:93:89:b3:
         99:6a:ba:de:4a:ed:28:af:e7:14:8d:69:37:51:a5:a1:b5:50:
         2d:a8:13:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:21:05 2026 by rpki-client