Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a313030303a3a2f33362d3336203d3e20323634343936.roa
File:                     323830343a323038343a313030303a3a2f33362d3336203d3e20323634343936.roa (raw, json)
Hash identifier:          h3fkS9bICcX69dDDpgrdV0MqPbItGuiunr14p/LFNyQ=
Subject key identifier:   8A:F4:8C:4A:17:8F:C6:5D:98:35:26:67:7C:CF:71:D5:39:98:78:97
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       25340C52509D9C6403BA768C625E2E14547FE361
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a313030303a3a2f33362d3336203d3e20323634343936.roa
Signing time:             Wed 28 Jan 2026 17:12:33 +0000
ROA not before:           Wed 28 Jan 2026 17:07:33 +0000
ROA not after:            Wed 27 Jan 2027 17:12:33 +0000
asID:                     264496
IP address blocks:        2804:2084:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl
                          rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 00:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:34:0c:52:50:9d:9c:64:03:ba:76:8c:62:5e:2e:14:54:7f:e3:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: Jan 28 17:07:33 2026 GMT
            Not After : Jan 27 17:12:33 2027 GMT
        Subject: CN=8AF48C4A178FC65D983526677CCF71D539987897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bc:b9:0c:3f:2d:39:6f:57:67:40:d4:3c:97:
                    9d:cd:31:6c:46:eb:4e:3c:1e:52:30:c9:ed:75:ae:
                    4b:c8:1d:0b:b8:fe:e2:35:2d:0c:aa:26:4f:e0:a2:
                    2f:b9:e3:d6:6a:76:ca:b5:bf:f1:5c:a8:eb:f8:0d:
                    4a:ef:72:90:6d:6b:f9:5a:8f:ca:3c:ca:84:8e:3d:
                    6a:d0:f9:29:ff:5a:3a:47:cb:9b:0a:05:16:d1:2c:
                    6a:c2:05:2c:21:7e:3c:0e:31:d6:46:fc:b2:d6:6d:
                    44:f5:f3:f6:1b:db:4e:1a:7a:ea:00:4e:f3:50:80:
                    91:1e:04:c0:62:3e:53:4f:c8:a1:6b:1b:2c:07:b9:
                    eb:3b:dd:ed:4f:ac:81:32:bb:5d:45:58:02:d6:13:
                    a5:a5:c0:89:76:b9:6d:e2:98:50:da:a1:ca:11:f1:
                    27:51:9b:e7:7e:61:7d:45:b6:86:50:e3:7b:8d:04:
                    50:6e:d2:e8:a7:cb:35:eb:50:63:5a:7a:8b:05:42:
                    ea:0b:aa:ba:2c:ca:69:08:51:21:00:d1:00:ea:a0:
                    bf:82:7b:2f:b4:15:79:11:e4:ef:4d:a5:c7:4f:0a:
                    7f:c4:f5:28:b8:15:2f:7c:4e:85:b9:12:8a:d3:c1:
                    1b:82:7b:fa:28:8b:d8:76:1e:40:32:17:c4:bb:6d:
                    55:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F4:8C:4A:17:8F:C6:5D:98:35:26:67:7C:CF:71:D5:39:98:78:97
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a313030303a3a2f33362d3336203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2084:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         48:d0:cc:d7:ff:83:33:b5:8c:78:0d:fd:d0:f3:17:df:2d:87:
         d6:f1:6d:a2:7f:f4:de:08:88:93:2d:58:fe:2d:9f:1a:78:53:
         a1:20:1b:43:eb:38:1a:b8:7b:8d:54:0a:5d:23:0d:2b:84:78:
         ed:48:93:19:d9:d6:fb:65:c6:2c:85:d2:bd:ed:d6:ee:1f:c7:
         e6:b4:c0:c5:66:55:d0:81:ff:34:6a:f6:21:33:2f:24:7e:7c:
         18:7a:ec:cc:64:93:1e:3a:c5:46:5c:d1:08:80:14:3a:b0:d2:
         fe:a6:3c:4d:9f:5e:71:58:c8:4d:ce:20:e4:3d:db:55:de:b0:
         b4:64:bf:02:13:a9:ba:bf:45:d1:6f:8a:fe:83:d1:f7:6e:9c:
         e5:bd:f3:6c:0e:75:b2:ac:19:80:57:4f:17:62:b9:eb:8f:c3:
         d4:8a:77:e2:b6:7b:68:d2:7f:06:f1:13:7a:05:28:24:f7:de:
         44:b7:c5:fe:58:92:1b:3d:c8:ae:49:f0:87:7c:87:ed:ce:e6:
         40:0f:a9:c1:11:36:52:ae:70:e7:62:0d:bb:65:43:5c:86:3d:
         98:c5:63:e1:26:6e:55:f3:0a:57:da:c0:46:53:b8:a9:f8:77:
         9f:e6:b4:b2:29:85:c7:0a:80:b4:c6:d7:05:d9:bd:30:c4:c1:
         70:43:a4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:49:33 2026 by rpki-client