Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GW4bjzUPN9SVtEsi5BEemEhGQKy32tAimRqBrX5837aG/0/323830343a353539383a3a2f33322d3438203d3e20323637393434.roa
File:                     323830343a353539383a3a2f33322d3438203d3e20323637393434.roa (raw, json)
Hash identifier:          yO2NylwPWa3rg5QT9XtbF829vJNqEP/WOpQIw8WKuVk=
Subject key identifier:   3A:B8:49:68:C8:99:CC:38:AA:15:FA:E3:5A:69:E5:C2:BF:33:8F:5F
Certificate issuer:       /CN=6F20B5045709EC4D9A6D0846604ABEA3DECEA20C
Certificate serial:       6EC245ED50E7AAB0D29D2F00C37AA2789C7CD76D
Authority key identifier: 6F:20:B5:04:57:09:EC:4D:9A:6D:08:46:60:4A:BE:A3:DE:CE:A2:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F20B5045709EC4D9A6D0846604ABEA3DECEA20C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GW4bjzUPN9SVtEsi5BEemEhGQKy32tAimRqBrX5837aG/0/323830343a353539383a3a2f33322d3438203d3e20323637393434.roa
Signing time:             Mon 09 Feb 2026 15:26:37 +0000
ROA not before:           Mon 09 Feb 2026 15:21:37 +0000
ROA not after:            Mon 08 Feb 2027 15:26:37 +0000
asID:                     267944
IP address blocks:        2804:5598::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GW4bjzUPN9SVtEsi5BEemEhGQKy32tAimRqBrX5837aG/0/6F20B5045709EC4D9A6D0846604ABEA3DECEA20C.crl
                          rsync://rpki-repo.registro.br/repo/GW4bjzUPN9SVtEsi5BEemEhGQKy32tAimRqBrX5837aG/0/6F20B5045709EC4D9A6D0846604ABEA3DECEA20C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F20B5045709EC4D9A6D0846604ABEA3DECEA20C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 05:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c2:45:ed:50:e7:aa:b0:d2:9d:2f:00:c3:7a:a2:78:9c:7c:d7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F20B5045709EC4D9A6D0846604ABEA3DECEA20C
        Validity
            Not Before: Feb  9 15:21:37 2026 GMT
            Not After : Feb  8 15:26:37 2027 GMT
        Subject: CN=3AB84968C899CC38AA15FAE35A69E5C2BF338F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:92:da:d2:65:83:00:92:28:11:b8:58:4f:43:
                    3a:cc:5e:9a:1f:76:db:8d:5c:a5:f6:0c:0c:f4:f7:
                    06:5b:53:81:84:2a:11:6e:de:7d:2f:0b:27:e6:ef:
                    6e:1d:5d:be:1e:1b:af:5b:ca:ac:86:c6:e1:47:f0:
                    d7:ab:11:b6:30:63:56:eb:a7:7d:f3:df:90:c7:4e:
                    c9:cc:34:1e:e8:28:09:61:a4:a7:30:33:af:5f:9e:
                    90:75:93:be:97:56:11:67:70:e9:15:8a:11:ff:d8:
                    63:59:5d:6f:ae:06:8c:13:c6:46:c8:c5:9b:fe:30:
                    8c:d9:2f:47:a3:78:1b:bf:89:1b:0c:69:6b:ae:21:
                    3b:f4:db:2c:6c:20:bd:b3:40:89:b9:69:56:3e:bf:
                    cd:23:f8:ee:6d:e2:cc:38:78:ba:cf:d2:e3:16:6e:
                    7b:aa:da:96:26:2e:f3:00:de:87:dc:cb:b2:5d:b8:
                    4a:c6:de:65:c0:55:01:b4:4e:5c:19:4b:b2:cc:84:
                    d0:f7:23:4b:bd:4e:e2:14:91:36:68:49:da:ec:11:
                    c7:82:bb:d8:c6:f2:8b:ab:80:09:e8:f9:1c:e6:ff:
                    1b:6a:76:e4:46:fa:f8:c5:1a:04:73:74:48:02:52:
                    15:f1:7d:0e:ce:32:96:04:b0:4b:70:bb:1f:10:a7:
                    41:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B8:49:68:C8:99:CC:38:AA:15:FA:E3:5A:69:E5:C2:BF:33:8F:5F
            X509v3 Authority Key Identifier:
                keyid:6F:20:B5:04:57:09:EC:4D:9A:6D:08:46:60:4A:BE:A3:DE:CE:A2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GW4bjzUPN9SVtEsi5BEemEhGQKy32tAimRqBrX5837aG/0/6F20B5045709EC4D9A6D0846604ABEA3DECEA20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F20B5045709EC4D9A6D0846604ABEA3DECEA20C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GW4bjzUPN9SVtEsi5BEemEhGQKy32tAimRqBrX5837aG/0/323830343a353539383a3a2f33322d3438203d3e20323637393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5598::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:5b:d0:06:da:ec:c3:6c:ca:05:f6:a6:5c:8d:04:87:fb:77:
         68:bc:65:8b:44:0d:51:b4:e0:6e:c1:48:49:a7:df:b6:79:ec:
         69:f9:02:aa:9c:45:69:3c:19:54:da:fb:26:27:1f:18:5c:6e:
         f9:34:f7:d7:87:90:ca:58:a7:68:86:10:e2:69:ff:5b:fc:ff:
         e2:1e:81:7e:4c:cf:61:4e:82:0c:02:48:1a:1e:bc:27:5d:7d:
         ad:d2:6d:47:91:aa:38:44:d3:e3:2e:79:2c:13:7f:51:95:9f:
         3e:ec:16:94:a1:e7:92:36:5d:67:39:3d:40:cd:3c:fc:6d:56:
         4a:86:0e:88:2b:ef:75:11:44:34:72:2d:cb:e1:1c:93:4c:65:
         7a:77:97:09:a1:72:73:82:1c:49:bd:e6:68:26:9b:e5:12:29:
         83:ee:e6:a6:7d:e1:46:3c:d8:17:75:b8:29:1e:36:2b:91:9a:
         f3:2b:12:bf:c2:e7:4e:bc:b8:fd:cc:84:7b:95:a0:4b:54:ad:
         06:bf:48:f5:43:e7:b9:04:4c:6e:5f:7b:64:de:d6:90:9e:5a:
         57:c1:af:5a:5c:f2:de:5b:93:1d:8c:1b:3a:75:46:d4:46:24:
         e7:e2:88:b9:73:0b:cf:20:33:51:f4:67:b7:d7:69:54:b1:b6:
         80:89:56:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:22:32 2026 by rpki-client