Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a383030303a3a2f33332d3333203d3e20323636313635.roa
File:                     323830343a336262303a383030303a3a2f33332d3333203d3e20323636313635.roa (raw, json)
Hash identifier:          3UYK2e9ksPlflitRmhCwEKdntCkoFdFj3sH+8rFqemc=
Subject key identifier:   DC:78:0E:92:86:A3:64:E2:5B:A2:F1:F0:20:8B:78:B2:F0:7A:B2:9A
Certificate issuer:       /CN=35820974DAE7FC3F1AE8D279269AB670ABA40E8F
Certificate serial:       43ABFB7B61255734D091FDBF25C43B582591BEE5
Authority key identifier: 35:82:09:74:DA:E7:FC:3F:1A:E8:D2:79:26:9A:B6:70:AB:A4:0E:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a383030303a3a2f33332d3333203d3e20323636313635.roa
Signing time:             Fri 23 Jan 2026 19:57:13 +0000
ROA not before:           Fri 23 Jan 2026 19:52:13 +0000
ROA not after:            Fri 22 Jan 2027 19:57:13 +0000
asID:                     266165
IP address blocks:        2804:3bb0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.crl
                          rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 10:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ab:fb:7b:61:25:57:34:d0:91:fd:bf:25:c4:3b:58:25:91:be:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35820974DAE7FC3F1AE8D279269AB670ABA40E8F
        Validity
            Not Before: Jan 23 19:52:13 2026 GMT
            Not After : Jan 22 19:57:13 2027 GMT
        Subject: CN=DC780E9286A364E25BA2F1F0208B78B2F07AB29A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:65:61:65:86:64:c2:65:e3:11:1e:b5:d9:1f:
                    93:f8:32:1c:9e:80:32:e2:e7:b8:b5:6c:d7:26:8a:
                    40:13:49:02:51:1d:79:69:a3:b3:fa:59:b9:04:be:
                    f6:07:ca:b2:d6:5a:27:27:4b:14:f6:83:2b:05:f0:
                    7f:99:c6:15:a7:6f:f2:f4:e0:bc:3d:f0:cc:ec:bc:
                    f8:41:95:f1:82:1e:ec:f1:d4:08:a2:8a:18:df:89:
                    06:d8:0a:dc:bf:97:6a:9a:68:4d:f9:23:d7:7a:67:
                    82:d2:28:61:16:49:d8:cf:86:86:69:80:a1:2e:46:
                    86:c0:c4:77:49:1c:36:79:1d:08:24:26:d8:90:c4:
                    0e:fb:c4:10:6b:62:60:ac:ac:8c:47:97:fe:30:ea:
                    70:5a:e3:31:c8:e2:24:6f:22:cd:22:b7:b6:74:54:
                    6a:16:12:a5:c7:e9:84:96:11:be:45:2f:d0:23:6d:
                    66:85:d4:ea:73:f1:78:f5:7d:57:e2:c9:42:cb:58:
                    ae:57:b3:7c:cc:fb:89:44:5e:78:67:e3:e7:fc:42:
                    bd:04:66:fe:84:37:4b:85:d6:d7:61:51:2f:e1:9c:
                    01:71:8e:9f:af:08:bb:34:76:54:6e:c8:1e:b7:82:
                    cf:ea:b4:94:11:33:94:f6:f4:c2:9e:1c:95:09:91:
                    e0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:78:0E:92:86:A3:64:E2:5B:A2:F1:F0:20:8B:78:B2:F0:7A:B2:9A
            X509v3 Authority Key Identifier:
                keyid:35:82:09:74:DA:E7:FC:3F:1A:E8:D2:79:26:9A:B6:70:AB:A4:0E:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a383030303a3a2f33332d3333203d3e20323636313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bb0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         3d:68:7e:d8:e7:1f:c7:94:f2:ca:43:60:a2:b5:00:87:3d:f4:
         57:6d:6a:2f:30:e1:98:99:ec:22:dc:fa:47:e8:7d:33:58:15:
         a0:8d:e6:7f:0e:d9:3e:19:d6:19:53:32:78:9b:6e:29:1a:ba:
         1c:0d:c2:e7:d5:89:d0:ef:8b:67:6d:d2:6a:92:69:04:20:fb:
         f0:af:e8:94:4a:46:56:58:a4:a0:22:c6:01:21:c7:eb:3f:73:
         be:65:14:e0:2f:8c:36:11:ec:29:13:b8:0b:f5:7e:a1:41:63:
         75:19:2a:b5:7d:da:d7:a0:da:67:54:32:cd:7c:2a:7a:70:84:
         b8:92:47:cd:f7:99:9c:b0:9d:9a:15:00:96:59:e3:49:08:65:
         78:7f:1d:2d:26:fa:e9:f6:16:9c:88:f7:14:0d:0e:a6:10:b1:
         cd:93:a4:eb:86:14:1d:46:a9:9b:4d:93:56:8c:5a:7d:5d:93:
         f7:49:61:5a:23:b3:22:a5:76:6c:b3:ae:1e:a5:52:36:e4:2a:
         bf:22:78:b4:30:d8:15:a8:8c:cd:84:a0:cd:c7:75:79:34:40:
         39:16:1a:e1:99:f8:f1:34:86:78:c2:ab:1b:0f:f1:2f:9c:2a:
         1e:6f:0f:45:ed:12:47:e8:bb:7c:b1:aa:74:25:3a:7c:44:ba:
         6b:3d:19:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:50:17 2026 by rpki-client