Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a3a2f33362d3336203d3e20323634343936.roa
File:                     323830343a323038343a3a2f33362d3336203d3e20323634343936.roa (raw, json)
Hash identifier:          JhM5igZkZz+8clq2N8jwSaFIiqNtkGmvvu9ifsK1D84=
Subject key identifier:   6E:57:7E:63:93:E6:AD:19:35:87:16:EF:40:62:88:B2:92:41:05:08
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       28B7A21E1979078AE27346AB6F89A74A8E27E633
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a3a2f33362d3336203d3e20323634343936.roa
Signing time:             Wed 28 Jan 2026 17:12:33 +0000
ROA not before:           Wed 28 Jan 2026 17:07:33 +0000
ROA not after:            Wed 27 Jan 2027 17:12:33 +0000
asID:                     264496
IP address blocks:        2804:2084::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl
                          rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 00:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b7:a2:1e:19:79:07:8a:e2:73:46:ab:6f:89:a7:4a:8e:27:e6:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: Jan 28 17:07:33 2026 GMT
            Not After : Jan 27 17:12:33 2027 GMT
        Subject: CN=6E577E6393E6AD19358716EF406288B292410508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8f:23:22:3a:2e:33:0b:9a:f8:e0:3a:16:5c:
                    c1:20:16:3c:0c:84:b0:b9:ea:42:5a:71:7e:c3:f4:
                    f6:26:c7:66:2c:93:c5:a8:65:4c:cf:cc:a3:04:44:
                    50:69:b3:61:2e:4f:8c:db:d7:18:fa:02:60:eb:63:
                    a2:d5:a6:20:ff:e8:c6:20:ef:19:59:0a:36:2c:c6:
                    24:68:7e:61:95:7d:5b:1b:24:fc:33:a8:4e:08:6e:
                    9b:31:62:85:c8:00:9c:42:c2:3f:81:70:cc:e0:ec:
                    b0:fa:8b:54:bf:d5:3e:1f:da:a5:85:6d:1d:b9:d3:
                    f3:46:64:40:30:5e:a7:90:4b:61:42:7c:64:d9:17:
                    db:35:e1:73:db:18:a0:d3:2f:c5:d5:3a:15:72:64:
                    74:fb:09:04:87:72:54:82:fc:5d:bb:af:c3:6e:c0:
                    30:0f:b6:2f:af:ae:3b:a9:42:2f:6f:dc:14:9c:ef:
                    c7:d0:dd:6a:b8:0a:64:d0:ac:1b:46:e6:94:99:ab:
                    c8:6f:35:d8:ee:ad:a1:fe:58:6c:a1:ef:ca:a7:f3:
                    81:29:07:0e:1c:f9:cc:b4:24:49:d9:c3:33:d5:fb:
                    98:c6:3f:20:8f:3a:03:e5:1d:79:97:c4:f0:de:8d:
                    e9:7a:76:de:dc:22:9b:ae:52:b7:b0:8c:67:22:4d:
                    a0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:57:7E:63:93:E6:AD:19:35:87:16:EF:40:62:88:B2:92:41:05:08
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a3a2f33362d3336203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2084::/36

    Signature Algorithm: sha256WithRSAEncryption
         40:64:af:41:09:e0:1c:68:96:2d:b5:bf:32:0e:c9:db:3f:ef:
         53:7b:af:8a:7d:f1:2f:4c:36:d6:3d:de:be:a5:dd:48:2b:f0:
         0e:20:84:a0:84:a1:75:0a:6d:e5:ca:fa:44:21:8b:53:57:69:
         4e:fd:34:6a:ab:56:04:51:3c:e4:d1:d7:4e:ac:a6:c9:2f:b9:
         c5:a3:ae:9f:69:6d:74:7a:86:49:34:c7:69:d2:c5:69:fd:0f:
         4b:87:25:df:e6:66:f8:b5:f2:d5:78:ef:4d:3c:26:d7:09:18:
         5f:f1:82:a4:b3:c4:ab:a2:fe:dc:19:e1:6f:01:99:f5:68:7c:
         5c:c4:2a:f4:35:1b:c1:05:91:1c:33:0a:2d:06:29:9f:b0:4a:
         27:85:cc:8e:c2:19:1b:39:e6:8a:fb:57:a0:75:64:5b:31:c0:
         51:f2:95:08:5e:c7:68:62:56:99:68:e8:c4:e9:de:f1:5a:68:
         11:a4:d4:eb:4a:68:cd:f8:58:c0:65:96:c3:b8:ea:c3:fc:42:
         c5:5d:65:5d:d0:58:e2:36:20:8d:a9:96:0e:e8:c8:2d:01:70:
         27:76:67:b4:74:64:86:75:9c:10:06:ab:85:ed:cc:ae:0d:4c:
         c6:af:29:2e:9b:2e:88:ae:d8:a4:70:41:df:e7:7c:58:09:6a:
         1d:f0:1a:d5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKLeiHhl5B4ric0arb4mnSo4n5jMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcwQ0MyNkREMEMzNTNDMjQ0RjcyRjVCNjJBRTRCNUIw
RUU1QUU3QzAeFw0yNjAxMjgxNzA3MzNaFw0yNzAxMjcxNzEyMzNaMDMxMTAvBgNV
BAMTKDZFNTc3RTYzOTNFNkFEMTkzNTg3MTZFRjQwNjI4OEIyOTI0MTA1MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2jyMiOi4zC5r44DoWXMEgFjwM
hLC56kJacX7D9PYmx2Ysk8WoZUzPzKMERFBps2EuT4zb1xj6AmDrY6LVpiD/6MYg
7xlZCjYsxiRofmGVfVsbJPwzqE4IbpsxYoXIAJxCwj+BcMzg7LD6i1S/1T4f2qWF
bR250/NGZEAwXqeQS2FCfGTZF9s14XPbGKDTL8XVOhVyZHT7CQSHclSC/F27r8Nu
wDAPti+vrjupQi9v3BSc78fQ3Wq4CmTQrBtG5pSZq8hvNdjuraH+WGyh78qn84Ep
Bw4c+cy0JEnZwzPV+5jGPyCPOgPlHXmXxPDejel6dt7cIpuuUrewjGciTaCDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbld+Y5PmrRk1hxbvQGKIspJBBQgwHwYDVR0j
BBgwFoAUlwzCbdDDU8JE9y9bYq5LWw7lrnwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25SYmp4Y2h1RDZySFB1Znc1SzdicVR3MUR3ZmtTUTRLWGFOZURTSlZa
bmcvMC85NzBDQzI2REQwQzM1M0MyNDRGNzJGNUI2MkFFNEI1QjBFRTVBRTdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3MENDMjZERDBDMzUzQzI0
NEY3MkY1QjYyQUU0QjVCMEVFNUFFN0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duUmJqeGNodUQ2ckhQdWZ3NUs3YnFUdzFEd2ZrU1E0S1hhTmVEU0pWWm5nLzAv
MzIzODMwMzQzYTMyMzAzODM0M2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIwMzIzNjM0
MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYEKAQghAAwDQYJKoZIhvcNAQELBQADggEBAEBkr0EJ
4Bxoli21vzIOyds/71N7r4p98S9MNtY93r6l3Ugr8A4ghKCEoXUKbeXK+kQhi1NX
aU79NGqrVgRRPOTR106spskvucWjrp9pbXR6hkk0x2nSxWn9D0uHJd/mZvi18tV4
7008JtcJGF/xgqSzxKui/twZ4W8BmfVofFzEKvQ1G8EFkRwzCi0GKZ+wSieFzI7C
GRs55or7V6B1ZFsxwFHylQhex2hiVplo6MTp3vFaaBGk1OtKaM34WMBllsO46sP8
QsVdZV3QWOI2II2plg7oyC0BcCd2Z7R0ZIZ1nBAGq4XtzK4NTMavKS6bLoiu2KRw
Qd/nfFgJah3wGtU=
-----END CERTIFICATE-----
Generated at Mon Feb 23 07:01:28 2026 by rpki-client