Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/323830343a373830383a3a2f33322d3332203d3e20323731323136.roa
File:                     323830343a373830383a3a2f33322d3332203d3e20323731323136.roa (raw, json)
Hash identifier:          oCPIOmoYwqZXDm5OOelB6GxaBTbNHz/pae+0Bvycpx0=
Subject key identifier:   6D:8C:7F:4B:46:2D:7E:03:DE:9C:9D:8C:A1:9F:6B:D6:8A:08:43:77
Certificate issuer:       /CN=3668F23708FFBF0EE157A9A924E8295BA896F33D
Certificate serial:       75C68D5E850D6AA9745653FE456C9626A736A0E5
Authority key identifier: 36:68:F2:37:08:FF:BF:0E:E1:57:A9:A9:24:E8:29:5B:A8:96:F3:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3668F23708FFBF0EE157A9A924E8295BA896F33D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/323830343a373830383a3a2f33322d3332203d3e20323731323136.roa
Signing time:             Mon 26 Jan 2026 19:09:27 +0000
ROA not before:           Mon 26 Jan 2026 19:04:27 +0000
ROA not after:            Mon 25 Jan 2027 19:09:27 +0000
asID:                     271216
IP address blocks:        2804:7808::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.crl
                          rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3668F23708FFBF0EE157A9A924E8295BA896F33D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c6:8d:5e:85:0d:6a:a9:74:56:53:fe:45:6c:96:26:a7:36:a0:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3668F23708FFBF0EE157A9A924E8295BA896F33D
        Validity
            Not Before: Jan 26 19:04:27 2026 GMT
            Not After : Jan 25 19:09:27 2027 GMT
        Subject: CN=6D8C7F4B462D7E03DE9C9D8CA19F6BD68A084377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7c:96:7f:06:97:3b:76:cd:88:40:9e:06:72:
                    14:c8:97:e7:7d:76:78:33:66:d3:47:d1:74:ae:84:
                    58:39:9a:33:6a:84:cb:d6:7e:75:8d:9e:ad:70:51:
                    8c:f5:d6:2c:b9:6a:59:f7:53:f0:e0:00:c3:9e:ac:
                    14:99:76:2e:41:c9:fe:07:7b:6f:78:e7:07:c5:18:
                    cd:dd:eb:9d:b1:8a:32:ab:35:f1:58:03:51:f8:96:
                    a1:66:cd:3e:d8:6f:ac:2c:f3:ea:57:a2:54:6f:9f:
                    4a:df:94:cc:c2:1a:95:20:a6:4b:aa:b6:17:2b:73:
                    8f:c5:5b:b5:84:11:33:9d:53:e0:05:e9:b9:2f:d7:
                    b4:33:ea:26:1d:15:86:d6:7f:d0:97:23:06:31:41:
                    8e:94:ff:f9:20:ec:cc:e5:ae:5f:15:3c:50:ea:bc:
                    49:39:24:e0:2a:7e:18:20:53:58:b3:48:6e:42:28:
                    ef:3e:76:a9:4a:59:0f:bd:a8:d2:7d:06:96:a9:6d:
                    07:b6:4c:7a:8d:c5:27:59:11:d2:f0:df:a1:6c:48:
                    ed:d1:b2:b2:1b:c4:bc:67:f2:a7:dd:30:75:e5:94:
                    85:f0:a6:37:02:17:00:9e:ce:b0:90:56:83:2a:f1:
                    7f:a9:8a:d2:25:e5:ad:4e:4d:db:8b:57:a3:a5:13:
                    07:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8C:7F:4B:46:2D:7E:03:DE:9C:9D:8C:A1:9F:6B:D6:8A:08:43:77
            X509v3 Authority Key Identifier:
                keyid:36:68:F2:37:08:FF:BF:0E:E1:57:A9:A9:24:E8:29:5B:A8:96:F3:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3668F23708FFBF0EE157A9A924E8295BA896F33D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/323830343a373830383a3a2f33322d3332203d3e20323731323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7808::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:e8:a2:fa:76:30:a4:88:70:e0:46:b5:ff:d7:6a:b7:1f:1d:
         c8:14:16:19:32:d7:b7:fd:6c:b8:6d:1b:a9:07:63:60:a4:bd:
         57:8e:2a:e6:78:02:dd:0b:57:cf:23:ea:7a:49:c4:60:37:dc:
         93:6c:32:a4:18:e4:d3:ff:70:4f:94:46:39:a5:1f:76:36:4b:
         df:73:59:16:74:96:79:b4:81:e2:c6:59:0a:7d:86:c2:30:c9:
         62:86:de:9e:af:00:f2:71:90:95:92:6d:ef:c2:47:8c:78:e7:
         65:ae:90:57:f1:be:80:c9:b4:75:03:e8:e8:32:5a:f7:8a:2f:
         52:a7:c2:6a:78:de:e7:9e:72:3e:a2:da:40:ae:66:82:5f:53:
         10:55:9e:08:f0:43:f6:ae:e7:a0:3f:4f:7f:21:32:3e:44:1f:
         bf:b8:f1:27:c9:e3:bb:ef:f5:96:c6:af:a3:ee:70:2f:a8:bb:
         7d:5a:23:5a:3f:3d:e4:0f:3f:20:96:c5:84:34:cf:1b:6a:c3:
         fd:84:fb:3a:48:07:39:7e:c5:d6:70:9c:f6:7a:75:20:f9:dc:
         07:f3:7e:9f:4d:a9:b9:db:b7:88:a8:c0:7a:52:e5:f0:25:83:
         08:e1:94:5c:ee:af:5a:d0:9b:05:ba:fb:ab:9b:36:0e:01:b9:
         81:24:50:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 06:45:31 2026 by rpki-client