Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a3a2f33352d3335203d3e20323637393631.roa
File:                     323830343a353564633a3a2f33352d3335203d3e20323637393631.roa (raw, json)
Hash identifier:          meF3vilnXF8cwPwB+1MdjnaWAyFJevMO1nVNczF8H10=
Subject key identifier:   3B:11:01:D1:4E:99:13:BE:C2:43:56:37:AF:93:4A:D6:5F:8E:54:83
Certificate issuer:       /CN=A9BA768EE0C1427847F66680F17B330C7E749C51
Certificate serial:       03716BEE412A759457C78AA26CCCB57E0BF24DAA
Authority key identifier: A9:BA:76:8E:E0:C1:42:78:47:F6:66:80:F1:7B:33:0C:7E:74:9C:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9BA768EE0C1427847F66680F17B330C7E749C51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a3a2f33352d3335203d3e20323637393631.roa
Signing time:             Wed 28 Jan 2026 04:08:41 +0000
ROA not before:           Wed 28 Jan 2026 04:03:41 +0000
ROA not after:            Wed 27 Jan 2027 04:08:41 +0000
asID:                     267961
IP address blocks:        2804:55dc::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/A9BA768EE0C1427847F66680F17B330C7E749C51.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/A9BA768EE0C1427847F66680F17B330C7E749C51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9BA768EE0C1427847F66680F17B330C7E749C51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 17:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:71:6b:ee:41:2a:75:94:57:c7:8a:a2:6c:cc:b5:7e:0b:f2:4d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9BA768EE0C1427847F66680F17B330C7E749C51
        Validity
            Not Before: Jan 28 04:03:41 2026 GMT
            Not After : Jan 27 04:08:41 2027 GMT
        Subject: CN=3B1101D14E9913BEC2435637AF934AD65F8E5483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:63:68:c8:8e:8e:90:06:92:9b:b3:86:cd:b5:
                    5c:6d:39:98:44:6c:ca:ef:f2:f2:c4:93:c7:c2:f9:
                    cc:cd:8d:b3:2a:57:62:b2:7c:72:05:cd:8f:78:02:
                    2d:69:af:9a:79:db:e9:48:82:d3:e9:77:6d:c3:06:
                    14:cf:82:23:42:0d:e2:e2:c3:cd:5b:e6:c6:98:69:
                    99:e6:49:70:65:56:0c:fd:f4:4d:7e:96:c2:18:59:
                    4c:d6:35:2d:1e:3a:4c:22:12:df:06:56:45:f1:43:
                    34:3c:2e:ec:de:58:9e:da:e7:89:4b:d4:80:6f:7b:
                    c1:96:ab:86:f3:24:9a:3e:9a:dd:85:d9:ac:f4:93:
                    8b:13:cf:54:dc:37:13:5e:d8:73:6d:d1:22:c5:6c:
                    46:54:c9:17:37:1e:c0:ac:a1:40:ae:3f:40:c9:ec:
                    2c:e5:4b:6f:7b:1c:51:73:18:df:78:62:63:49:47:
                    3a:c1:bc:e5:96:89:13:75:f1:f8:0f:65:94:0c:30:
                    bd:ce:0a:90:5e:8c:98:35:c6:31:76:47:96:7a:ad:
                    80:7d:9e:e2:73:04:10:a1:9b:a3:c3:ec:b5:92:0f:
                    99:8b:76:c2:7e:96:08:56:ca:ed:f6:de:41:c5:91:
                    65:eb:a5:f4:3a:08:6f:55:69:6d:b8:db:07:46:38:
                    52:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:11:01:D1:4E:99:13:BE:C2:43:56:37:AF:93:4A:D6:5F:8E:54:83
            X509v3 Authority Key Identifier:
                keyid:A9:BA:76:8E:E0:C1:42:78:47:F6:66:80:F1:7B:33:0C:7E:74:9C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/A9BA768EE0C1427847F66680F17B330C7E749C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9BA768EE0C1427847F66680F17B330C7E749C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a3a2f33352d3335203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55dc::/35

    Signature Algorithm: sha256WithRSAEncryption
         9d:e2:95:b0:e5:a2:c3:6a:11:67:7b:30:a1:99:69:78:12:ca:
         f2:6f:3d:2a:45:5a:9d:18:bc:f9:01:9e:2f:02:4d:19:fd:c9:
         a0:a7:8c:bc:f8:58:fd:36:30:65:1b:26:e9:e1:db:82:45:1e:
         e9:87:e4:12:b1:a1:38:4b:52:8b:e7:9d:58:75:35:2d:ef:69:
         df:4d:d2:54:83:6d:90:1c:21:6f:37:e5:3b:8a:96:8a:24:75:
         61:36:84:b5:20:c5:62:96:c4:85:98:cc:fe:fc:43:63:85:d0:
         fe:ed:43:4f:14:7b:2c:c5:5b:7e:6e:db:d6:15:2a:66:9d:84:
         e4:c7:c0:8a:ce:05:fd:f8:60:37:f6:4f:69:47:07:3e:da:dd:
         c8:32:65:c2:37:4b:f8:94:52:fb:9d:ff:dc:e5:11:60:fe:0e:
         46:34:27:18:97:ff:6c:b1:63:2a:59:85:dc:22:e8:65:56:72:
         e3:95:8a:a8:33:1a:c4:fa:53:6d:34:83:1d:f0:c6:7c:12:e8:
         d4:45:1a:f1:c8:28:85:63:8a:9b:55:15:d3:0c:f0:f1:95:e0:
         cc:e5:82:13:b8:9e:f1:6f:05:60:43:1c:c6:1d:25:5b:d5:4e:
         cb:15:61:68:73:f5:99:ce:3d:33:87:a2:76:cc:48:2c:71:22:
         6a:da:ba:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:50:12 2026 by rpki-client