Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/323830343a326136343a3a2f33322d3438203d3e20323632363434.roa
File:                     323830343a326136343a3a2f33322d3438203d3e20323632363434.roa (raw, json)
Hash identifier:          Al3vWtGKmyBqvDaGjNvGtMpeDzrlfYRlIQXsdSha8YY=
Subject key identifier:   E9:12:F1:C6:20:1B:44:F6:3E:43:6D:19:9C:76:02:71:AB:DD:B6:82
Certificate issuer:       /CN=22AD0711A25E9E0FB275ABC71A280702BD666A35
Certificate serial:       756B32FF2E77C107D98B1AA8CAC58D39C33371CB
Authority key identifier: 22:AD:07:11:A2:5E:9E:0F:B2:75:AB:C7:1A:28:07:02:BD:66:6A:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AD0711A25E9E0FB275ABC71A280702BD666A35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/323830343a326136343a3a2f33322d3438203d3e20323632363434.roa
Signing time:             Thu 05 Feb 2026 11:29:55 +0000
ROA not before:           Thu 05 Feb 2026 11:24:55 +0000
ROA not after:            Thu 04 Feb 2027 11:29:55 +0000
asID:                     262644
IP address blocks:        2804:2a64::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/22AD0711A25E9E0FB275ABC71A280702BD666A35.crl
                          rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/22AD0711A25E9E0FB275ABC71A280702BD666A35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AD0711A25E9E0FB275ABC71A280702BD666A35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 01:36:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6b:32:ff:2e:77:c1:07:d9:8b:1a:a8:ca:c5:8d:39:c3:33:71:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22AD0711A25E9E0FB275ABC71A280702BD666A35
        Validity
            Not Before: Feb  5 11:24:55 2026 GMT
            Not After : Feb  4 11:29:55 2027 GMT
        Subject: CN=E912F1C6201B44F63E436D199C760271ABDDB682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b9:11:7a:f8:a2:78:c4:c2:90:15:33:ba:c4:
                    9d:c7:b5:ee:97:e6:47:34:a8:39:b2:d8:c4:95:f2:
                    2e:18:32:27:8f:9b:a3:8b:0c:f7:44:4e:bd:09:3e:
                    ab:70:36:1e:b2:e8:ee:c6:d2:6e:35:dc:bb:8a:9f:
                    70:2d:96:92:a6:d8:e1:0e:55:bd:08:65:47:fd:90:
                    cf:ea:eb:17:b3:12:26:68:4b:c9:0b:6e:9c:9b:68:
                    7b:e7:ac:f3:1d:a3:f7:af:5f:7e:11:e9:7d:03:b9:
                    55:b8:65:ec:f1:f0:8d:f0:6b:e3:12:4f:28:ee:33:
                    d4:de:df:95:5b:ba:d9:99:52:7c:b1:e9:d4:96:c9:
                    eb:6f:a7:b5:23:c0:07:c9:61:0a:92:11:c6:44:4a:
                    05:90:18:52:e4:74:1a:74:1a:fb:f3:69:ad:38:85:
                    9c:f2:70:32:40:47:80:71:62:1e:26:39:a6:40:5e:
                    08:be:a9:54:5c:1e:ae:b6:d4:49:8f:8a:3d:64:91:
                    70:76:bf:b9:db:73:6c:4c:be:bd:de:5a:94:26:1b:
                    99:7d:66:ca:76:64:e8:b1:a8:ee:4a:dd:d8:cd:cf:
                    89:92:04:da:61:63:c9:94:6e:df:44:3f:d9:8d:52:
                    93:5a:29:76:e1:4e:79:4d:17:c7:f3:6c:a1:78:d9:
                    19:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:12:F1:C6:20:1B:44:F6:3E:43:6D:19:9C:76:02:71:AB:DD:B6:82
            X509v3 Authority Key Identifier:
                keyid:22:AD:07:11:A2:5E:9E:0F:B2:75:AB:C7:1A:28:07:02:BD:66:6A:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/22AD0711A25E9E0FB275ABC71A280702BD666A35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AD0711A25E9E0FB275ABC71A280702BD666A35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/323830343a326136343a3a2f33322d3438203d3e20323632363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a64::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:b8:4c:68:6a:88:13:c2:67:7c:c4:cb:ad:88:2c:d4:c9:b0:
         b3:42:dc:bb:5a:b8:35:9b:c8:16:bf:92:aa:bf:66:83:45:94:
         c7:4e:0f:d6:47:ec:d3:4d:ec:57:6c:ed:b0:76:a1:bd:c8:a4:
         6e:b4:2d:9d:73:51:f1:cf:dd:46:f0:39:73:c5:19:da:12:dd:
         00:52:c0:d2:c9:85:dd:60:5b:9e:fa:5b:20:15:09:95:5d:11:
         bc:9c:d1:cf:49:0b:c4:2c:39:cc:5a:d5:30:36:31:dc:26:56:
         cc:b1:77:13:0c:fc:45:6b:34:01:e1:57:5f:ba:78:ca:f1:0f:
         10:b5:0b:dc:0b:79:7e:f8:fd:49:8f:f9:8d:ef:ba:58:63:f2:
         95:49:2f:38:f5:b1:09:a9:cb:82:a8:bd:d6:c0:c7:08:aa:99:
         ee:01:a4:c1:de:4b:2d:61:c8:50:d2:f8:1b:17:67:1c:56:d1:
         a9:05:70:7f:46:93:86:3e:60:b2:16:70:10:9c:87:de:15:ac:
         d6:cf:10:90:b2:9f:4e:d9:85:0a:2f:7e:fe:1d:f3:97:9b:1e:
         dd:3a:6d:8b:e2:4f:ca:21:12:05:3e:99:ee:99:b7:45:61:59:
         6b:a0:bb:b7:47:5a:eb:a7:9f:c4:fc:43:84:e3:26:a0:ce:0e:
         b1:a8:2f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 07:04:52 2026 by rpki-client