Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a333030303a3a2f33362d3336203d3e20323634343936.roa
File:                     323830343a323038343a333030303a3a2f33362d3336203d3e20323634343936.roa (raw, json)
Hash identifier:          A2YeF6UPQMUUaWlvSvvNONuUqVsQ9gYldDgyuYNAQws=
Subject key identifier:   10:60:28:6D:1C:D9:00:D4:B1:16:45:F6:E9:13:53:02:25:45:A7:1D
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       0586CE4DF8DA854B9917E16320A357AAFA519C41
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a333030303a3a2f33362d3336203d3e20323634343936.roa
Signing time:             Wed 28 Jan 2026 17:12:33 +0000
ROA not before:           Wed 28 Jan 2026 17:07:33 +0000
ROA not after:            Wed 27 Jan 2027 17:12:33 +0000
asID:                     264496
IP address blocks:        2804:2084:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl
                          rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 00:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:86:ce:4d:f8:da:85:4b:99:17:e1:63:20:a3:57:aa:fa:51:9c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: Jan 28 17:07:33 2026 GMT
            Not After : Jan 27 17:12:33 2027 GMT
        Subject: CN=1060286D1CD900D4B11645F6E91353022545A71D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ec:90:f7:c9:f7:a0:7d:4d:38:b0:83:81:83:
                    51:7a:10:8b:46:70:d2:d8:98:e1:23:a9:ee:6a:a2:
                    ed:bb:ef:1f:2d:b9:93:be:76:57:ad:43:59:2e:26:
                    a5:fd:ef:a9:18:e2:c2:ea:ae:73:54:ed:ce:8e:f8:
                    7e:60:34:9b:0d:e4:86:40:89:22:9a:1e:8b:40:ce:
                    62:41:96:8a:d5:6a:5d:4f:82:5f:6f:d5:ba:12:73:
                    a2:a6:ec:26:ce:e6:42:cb:33:02:eb:bf:2e:4e:df:
                    5e:d3:e1:12:e3:11:65:81:f3:25:43:5b:13:66:c2:
                    24:81:c7:f3:7d:8a:60:64:75:3e:b9:58:5f:6d:10:
                    f8:be:d1:51:90:44:43:74:0f:47:b0:ea:9e:0e:08:
                    6f:27:ab:56:fd:9a:dc:ab:bb:67:cb:a3:2a:13:36:
                    32:03:c2:9c:21:0d:bc:54:c0:07:2e:ca:db:f6:59:
                    c9:c4:28:72:02:63:e9:97:fc:43:47:e1:1b:88:7c:
                    86:9c:44:d3:57:25:d2:cb:c8:62:7c:a9:7e:25:43:
                    fa:7a:56:39:24:ef:f6:ae:fc:38:5f:fb:6a:a7:31:
                    a0:7e:3f:f4:fe:b6:97:cd:03:fc:7a:59:f4:eb:e8:
                    3f:17:20:75:77:4c:eb:e0:09:de:66:78:dc:4d:8c:
                    a4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:60:28:6D:1C:D9:00:D4:B1:16:45:F6:E9:13:53:02:25:45:A7:1D
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a333030303a3a2f33362d3336203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2084:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         00:0b:21:b5:7e:ed:3c:4b:cf:96:40:e4:6f:ba:95:c8:5e:85:
         c3:c5:37:9b:5a:cc:8f:00:f8:f3:d1:c6:70:b7:a6:38:ce:99:
         9c:ae:e4:0b:ec:46:28:54:e7:eb:5b:bd:4c:a3:98:20:8d:e1:
         81:aa:1a:ff:6e:54:53:a4:88:68:fa:35:9f:83:0d:d6:f7:d9:
         2d:a2:b2:b3:e0:ed:81:81:19:20:a5:26:03:58:88:df:f0:35:
         c2:74:3d:ec:48:c4:0f:8e:4e:9e:2f:ad:6c:9b:95:4c:10:79:
         19:f7:50:c8:8e:70:e4:f6:32:1e:cd:b7:f7:54:7e:a5:46:2b:
         85:ed:7f:31:e2:a4:50:fa:aa:f2:6f:14:6d:da:c7:c5:94:b1:
         c8:39:d0:be:c6:ad:a3:5e:6c:c8:ea:9e:83:3e:25:5b:e2:ea:
         e0:26:e8:3b:c4:0d:6b:d8:31:61:e5:ef:14:cb:8e:4a:84:64:
         c5:d3:02:29:14:93:fd:04:b4:60:2e:13:80:f5:f9:5b:fa:19:
         3d:ed:03:03:c9:60:9b:ad:31:7e:ca:9b:70:90:02:f9:4b:fb:
         2f:61:0f:7a:85:3f:b8:80:03:eb:1f:76:2a:7b:d0:e0:48:53:
         ac:80:35:22:31:e9:a3:2b:9d:a2:9f:2e:ed:4b:1a:86:6d:e7:
         f9:c4:9b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:24:12 2026 by rpki-client