Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a383030303a3a2f33342d3334203d3e20323639353038.roa
File:                     323830343a363562303a383030303a3a2f33342d3334203d3e20323639353038.roa (raw, json)
Hash identifier:          TtjNtIZ4bayz+JZUWvqj5Shxs0SwuFgjrdiUBM7KGPs=
Subject key identifier:   B3:EC:3A:D7:CD:7A:56:73:96:FB:A5:98:9A:EF:09:56:87:94:7C:36
Certificate issuer:       /CN=38025C3CE376357918C078D8E62D989FFD0406EC
Certificate serial:       61E67778E88CEA5D6F73A44530ADEC97809CDF02
Authority key identifier: 38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a383030303a3a2f33342d3334203d3e20323639353038.roa
Signing time:             Fri 13 Feb 2026 22:02:26 +0000
ROA not before:           Fri 13 Feb 2026 21:57:26 +0000
ROA not after:            Fri 12 Feb 2027 22:02:26 +0000
asID:                     269508
IP address blocks:        2804:65b0:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.crl
                          rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 14:46:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e6:77:78:e8:8c:ea:5d:6f:73:a4:45:30:ad:ec:97:80:9c:df:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38025C3CE376357918C078D8E62D989FFD0406EC
        Validity
            Not Before: Feb 13 21:57:26 2026 GMT
            Not After : Feb 12 22:02:26 2027 GMT
        Subject: CN=B3EC3AD7CD7A567396FBA5989AEF095687947C36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0a:3b:b4:67:b0:12:ae:43:c9:10:6f:c1:e0:
                    bb:78:ec:38:98:c2:ba:41:18:5b:cf:de:a1:d6:67:
                    88:eb:51:47:c8:42:a2:cc:27:14:90:b1:a8:3e:01:
                    1f:eb:b8:ed:0b:fd:04:bd:0f:30:86:c4:08:8d:85:
                    1e:3a:ce:59:3a:42:78:d8:98:20:73:a4:5c:d3:00:
                    2b:ad:53:19:13:e6:d8:4a:d7:94:ed:3f:bc:cc:38:
                    b0:61:aa:c7:9c:b1:2d:c6:e0:68:c2:02:b4:09:09:
                    23:1e:14:64:f6:ba:40:b4:4b:2e:69:ad:ff:6c:43:
                    08:0f:04:31:86:91:fb:d8:83:e2:62:5e:2e:e7:7f:
                    98:b6:fc:17:7d:19:5c:62:1f:01:5d:11:00:ed:d1:
                    13:2c:ae:88:3a:29:48:32:48:d6:f0:79:1d:8b:8b:
                    1f:22:dd:04:d6:a1:98:20:a5:52:65:63:67:9b:76:
                    ba:09:94:b1:19:25:3d:3e:1e:4b:12:b4:db:c0:de:
                    a8:0a:e0:f4:0c:25:b0:76:95:b3:7f:3d:fc:a4:dc:
                    1d:6d:c8:65:81:ef:a2:ee:04:e6:3b:dc:c4:7c:59:
                    b1:25:1c:4e:3b:fe:b7:75:ae:fd:76:03:17:29:bc:
                    38:12:aa:1a:a4:0a:31:e1:25:6e:46:bb:04:88:99:
                    a9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EC:3A:D7:CD:7A:56:73:96:FB:A5:98:9A:EF:09:56:87:94:7C:36
            X509v3 Authority Key Identifier:
                keyid:38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a383030303a3a2f33342d3334203d3e20323639353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65b0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         37:dc:b3:46:4b:5b:91:ed:49:c9:6e:1a:a6:f6:ff:fe:25:a2:
         87:5c:03:cd:03:85:08:61:4a:00:e1:40:8a:f8:87:49:ba:66:
         3a:5b:f0:57:21:a3:8e:88:52:1a:95:e7:22:3b:9c:57:dd:2a:
         5d:b5:23:e0:f0:95:e3:8c:29:35:70:5d:b6:52:b3:35:44:ad:
         8f:6d:58:c7:a8:f1:15:f3:90:44:7f:b4:ad:46:2e:3a:01:ab:
         37:8a:ff:7b:0b:c1:e4:bf:61:7e:89:0b:42:af:ea:08:98:24:
         90:17:19:fc:fb:b7:dc:18:1a:7d:89:e5:b3:4e:14:d6:47:4c:
         28:f4:18:c1:b3:0a:33:a9:72:82:1f:0d:60:3a:f6:9f:a2:3f:
         a3:d9:76:39:93:f1:4d:29:a3:a0:05:02:74:4d:f6:5c:44:92:
         59:0e:d1:80:5e:36:90:7d:ac:db:14:88:0a:db:69:41:34:c2:
         13:a0:b9:7b:1c:c1:82:f1:5b:ef:80:bf:32:02:3f:7e:43:22:
         a7:a7:d9:ba:f7:21:27:58:d8:69:2f:72:14:8f:0b:3e:1b:78:
         b0:6e:d4:53:37:fe:f0:33:2c:a6:f8:1d:dc:54:65:cc:47:2a:
         c8:aa:8a:df:a9:7c:2d:84:20:7a:40:d5:a2:ba:c8:49:ef:1c:
         41:9c:64:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:55:39 2026 by rpki-client