Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a3a2f33332d3333203d3e20323639353038.roa
File:                     323830343a363562303a3a2f33332d3333203d3e20323639353038.roa (raw, json)
Hash identifier:          +A7zzU7bTLSSFQfadytsSKjUxA3nlXymDFeqIYEvMuc=
Subject key identifier:   AD:DA:6F:17:C2:6A:90:36:04:2B:19:B6:1B:44:52:6D:F6:97:49:46
Certificate issuer:       /CN=38025C3CE376357918C078D8E62D989FFD0406EC
Certificate serial:       703679F74EDC6E34AC6310492B828294A2AE7396
Authority key identifier: 38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a3a2f33332d3333203d3e20323639353038.roa
Signing time:             Fri 13 Feb 2026 22:02:31 +0000
ROA not before:           Fri 13 Feb 2026 21:57:31 +0000
ROA not after:            Fri 12 Feb 2027 22:02:31 +0000
asID:                     269508
IP address blocks:        2804:65b0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.crl
                          rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 14:46:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:36:79:f7:4e:dc:6e:34:ac:63:10:49:2b:82:82:94:a2:ae:73:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38025C3CE376357918C078D8E62D989FFD0406EC
        Validity
            Not Before: Feb 13 21:57:31 2026 GMT
            Not After : Feb 12 22:02:31 2027 GMT
        Subject: CN=ADDA6F17C26A9036042B19B61B44526DF6974946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:06:91:73:32:89:75:eb:31:1f:e8:73:c8:1f:
                    88:d0:43:ea:81:ea:8c:4f:ea:de:57:80:54:19:48:
                    65:a4:d7:01:c1:c0:57:a9:09:e3:c2:d1:a8:2d:3e:
                    99:4e:06:24:b5:19:3a:01:b3:a3:02:6a:12:a1:5c:
                    a2:a2:02:d9:c2:58:7f:06:b9:54:f4:42:44:f1:a6:
                    df:fe:bd:a6:6e:90:3d:35:16:ca:a8:72:bd:1d:59:
                    02:f8:7a:70:c1:50:7a:11:8e:82:4b:70:78:6e:d6:
                    38:ce:1a:20:f6:08:12:4a:d0:e8:10:2d:44:56:03:
                    5e:26:07:c9:d0:37:06:3b:6c:b8:69:f4:20:75:ad:
                    7b:b6:87:1c:d2:e8:ce:a5:b3:4d:51:11:c4:25:85:
                    70:11:dd:58:5d:44:ff:3b:2c:05:ff:d0:c0:91:03:
                    68:64:92:1f:ac:d9:a3:7a:8e:d5:00:19:11:5a:dc:
                    fc:95:2e:19:27:3b:4f:22:e1:76:b9:01:ad:d5:44:
                    ce:48:81:bc:a6:d4:3b:ab:88:49:f0:57:ac:96:8f:
                    bc:cb:b5:a2:8d:c1:5c:28:14:94:b8:ef:e0:d7:ac:
                    ae:8b:0f:02:00:a7:ad:90:71:26:8c:21:e5:b0:f3:
                    df:96:f8:34:ae:57:7b:ae:ac:b4:c8:40:b8:2f:00:
                    f4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DA:6F:17:C2:6A:90:36:04:2B:19:B6:1B:44:52:6D:F6:97:49:46
            X509v3 Authority Key Identifier:
                keyid:38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a3a2f33332d3333203d3e20323639353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65b0::/33

    Signature Algorithm: sha256WithRSAEncryption
         47:56:b2:26:53:54:49:77:2a:20:fe:62:15:da:78:d2:1f:5c:
         a4:59:f2:dd:95:4a:d3:74:fc:70:65:e0:3b:43:34:24:ad:05:
         05:0d:c7:a7:88:1c:11:9d:11:bd:39:ae:19:07:f1:5b:c1:43:
         27:e5:17:94:0e:67:42:e1:b0:c0:e3:3d:8c:79:0a:ca:26:33:
         33:03:1e:26:05:3f:41:95:c2:9b:4c:8c:19:c1:c6:f8:43:26:
         35:14:ba:a1:4b:25:58:77:93:6a:cf:15:f3:25:56:39:ca:01:
         4b:36:f8:f8:d5:e3:ee:b5:e5:9d:05:6d:fe:61:74:c8:95:5d:
         53:cc:a0:6e:f7:2b:f3:d5:32:6e:ec:3b:19:b7:50:f1:15:a0:
         27:dc:55:78:17:56:bc:62:6d:d8:df:a6:c4:b3:20:af:ea:8f:
         30:71:f4:34:7e:9f:3d:e7:45:1b:c7:c9:5f:1d:ff:ce:e8:ca:
         fb:a4:93:a3:22:cc:aa:56:26:fb:7b:68:81:12:5c:72:b6:ea:
         c5:dc:c5:30:77:a4:5d:ca:b7:1a:90:92:a0:c7:c7:19:a7:77:
         83:5f:3c:c0:e4:22:96:15:c5:49:fb:d1:90:23:e3:c3:bd:2d:
         ea:3f:84:17:25:f8:cf:f3:5b:f2:7a:21:85:e3:6b:42:56:4d:
         cd:39:be:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:55:11 2026 by rpki-client