Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GNERt4FxogGd3R4dWS2yU2uXoWoMiq98nnEoxdt3nm9w/0/323830343a323433303a3a2f33322d3438203d3e20323634323037.roa
File:                     323830343a323433303a3a2f33322d3438203d3e20323634323037.roa (raw, json)
Hash identifier:          Aet46v0ERR9aWxIuxrpm5BErAhKOJS81dWT/gtI9aSc=
Subject key identifier:   DC:06:8F:DB:F9:2F:8D:4E:A0:BE:67:BF:8E:C9:98:3F:83:CC:4A:CA
Certificate issuer:       /CN=E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91
Certificate serial:       226FCEB9F9A26E83BB3A1D37E3C50133336A1C72
Authority key identifier: E7:EA:C6:C4:C6:8B:3E:30:FD:F7:CE:7C:F1:BC:53:C1:A3:2A:0A:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GNERt4FxogGd3R4dWS2yU2uXoWoMiq98nnEoxdt3nm9w/0/323830343a323433303a3a2f33322d3438203d3e20323634323037.roa
Signing time:             Mon 09 Feb 2026 15:23:41 +0000
ROA not before:           Mon 09 Feb 2026 15:18:41 +0000
ROA not after:            Mon 08 Feb 2027 15:23:41 +0000
asID:                     264207
IP address blocks:        2804:2430::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GNERt4FxogGd3R4dWS2yU2uXoWoMiq98nnEoxdt3nm9w/0/E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91.crl
                          rsync://rpki-repo.registro.br/repo/GNERt4FxogGd3R4dWS2yU2uXoWoMiq98nnEoxdt3nm9w/0/E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 17:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6f:ce:b9:f9:a2:6e:83:bb:3a:1d:37:e3:c5:01:33:33:6a:1c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91
        Validity
            Not Before: Feb  9 15:18:41 2026 GMT
            Not After : Feb  8 15:23:41 2027 GMT
        Subject: CN=DC068FDBF92F8D4EA0BE67BF8EC9983F83CC4ACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:12:ba:91:07:eb:07:ef:8c:d8:2d:a3:39:3b:
                    b6:ba:72:bc:31:dc:39:0b:10:34:78:66:8b:3d:44:
                    67:cc:32:02:ea:7b:08:1e:3a:a4:35:60:3f:38:38:
                    5d:2b:d7:1d:99:ea:9b:d9:de:23:99:45:93:b4:6c:
                    e8:57:44:09:9d:8c:bb:33:23:df:48:d6:b6:30:e6:
                    a9:3f:50:dc:ab:55:3c:d2:89:d7:66:45:12:83:f5:
                    3a:bb:fb:f1:ea:da:c7:b8:83:54:23:13:7a:61:18:
                    cc:51:bd:6a:e8:49:a7:07:5b:22:19:68:0c:3c:77:
                    a3:67:0d:c9:c4:5a:49:cd:25:38:e4:88:a5:85:9d:
                    59:68:ef:8d:01:7f:64:54:42:58:98:ea:de:d5:95:
                    99:15:c4:b2:5c:ab:6e:d5:51:b6:7b:1c:6d:2c:0c:
                    9b:74:a9:2f:ed:0d:bc:eb:ef:d8:98:b5:fb:2b:4b:
                    82:c6:fb:d7:f6:92:32:0e:79:dc:95:47:22:f0:77:
                    03:02:78:22:78:e1:69:02:8a:21:66:1e:ef:c0:c1:
                    8f:a5:d9:17:67:8b:70:fd:c7:26:8b:02:e0:cf:80:
                    7e:03:8d:05:46:83:32:18:3f:80:ea:a6:cd:2c:ca:
                    e6:5a:e1:a8:6b:b4:e8:3d:7c:67:03:4e:d3:d3:9f:
                    4f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:06:8F:DB:F9:2F:8D:4E:A0:BE:67:BF:8E:C9:98:3F:83:CC:4A:CA
            X509v3 Authority Key Identifier:
                keyid:E7:EA:C6:C4:C6:8B:3E:30:FD:F7:CE:7C:F1:BC:53:C1:A3:2A:0A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GNERt4FxogGd3R4dWS2yU2uXoWoMiq98nnEoxdt3nm9w/0/E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GNERt4FxogGd3R4dWS2yU2uXoWoMiq98nnEoxdt3nm9w/0/323830343a323433303a3a2f33322d3438203d3e20323634323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2430::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:83:76:db:07:6a:97:4f:19:54:e3:4e:40:d5:47:b7:55:4e:
         8b:36:21:78:ea:79:47:28:9d:35:bd:df:a9:3d:43:b3:e2:6c:
         41:4b:5a:17:3e:e4:03:07:9c:0e:bb:1f:7b:ec:9a:9b:31:61:
         20:6c:cc:71:2b:78:c7:ff:fd:c9:26:b2:f8:b2:8b:b9:d8:cb:
         00:f8:15:c3:99:a2:12:be:48:fe:98:55:7f:7a:f0:54:0f:be:
         74:b3:16:c1:58:dd:a4:0a:8e:68:62:53:67:2a:5d:ff:d5:ce:
         a1:ca:96:66:a5:b4:76:5a:f0:c6:fa:df:b6:bc:42:a8:45:df:
         ea:fa:d7:83:39:e9:ce:a2:cd:a4:61:f2:0d:92:bd:a5:77:5e:
         7b:58:cc:de:7d:eb:61:a2:48:2c:3f:ab:32:de:2e:ad:cf:bb:
         e2:fe:f8:26:41:d1:7a:a5:98:02:cc:13:65:0b:e4:4b:18:f6:
         90:17:bc:4a:37:2b:18:d3:1e:a3:9e:a3:f6:10:f8:66:5a:78:
         9e:cc:4f:5a:4e:b0:69:12:b9:ed:8e:b6:fa:65:a0:38:6e:fc:
         8e:b4:6b:1d:bc:13:e6:b5:27:9a:96:c4:75:3b:9d:d9:db:b4:
         39:ce:d2:3e:ac:65:06:47:3e:08:b0:71:17:e4:d5:56:49:93:
         05:73:f1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:53:13 2026 by rpki-client