Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a3a2f33332d3333203d3e20323636313635.roa
File:                     323830343a336262303a3a2f33332d3333203d3e20323636313635.roa (raw, json)
Hash identifier:          S4eu/TVGEiKQXbQB5M1J/51aD7ng9wJg70ftKUcY0no=
Subject key identifier:   C5:DD:79:3E:FB:03:BE:A7:3D:0E:24:6D:D1:0D:A2:C4:CD:87:0F:9E
Certificate issuer:       /CN=35820974DAE7FC3F1AE8D279269AB670ABA40E8F
Certificate serial:       406F61CBF0912D857387316E36FF946E70FF4D14
Authority key identifier: 35:82:09:74:DA:E7:FC:3F:1A:E8:D2:79:26:9A:B6:70:AB:A4:0E:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a3a2f33332d3333203d3e20323636313635.roa
Signing time:             Fri 23 Jan 2026 19:57:07 +0000
ROA not before:           Fri 23 Jan 2026 19:52:07 +0000
ROA not after:            Fri 22 Jan 2027 19:57:07 +0000
asID:                     266165
IP address blocks:        2804:3bb0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.crl
                          rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 10:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:6f:61:cb:f0:91:2d:85:73:87:31:6e:36:ff:94:6e:70:ff:4d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35820974DAE7FC3F1AE8D279269AB670ABA40E8F
        Validity
            Not Before: Jan 23 19:52:07 2026 GMT
            Not After : Jan 22 19:57:07 2027 GMT
        Subject: CN=C5DD793EFB03BEA73D0E246DD10DA2C4CD870F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e6:39:e5:dc:9c:3c:d5:cc:15:10:b9:a9:20:
                    cc:0b:83:99:4d:3e:b1:a9:af:74:fd:a8:72:94:b6:
                    68:2a:cf:50:ce:f3:63:45:c9:f8:d0:75:70:47:af:
                    6b:8f:97:81:b1:d6:75:4b:48:e3:3e:c8:e9:b1:ba:
                    4c:c2:5f:9e:9f:67:82:e9:49:95:1a:00:88:dd:d5:
                    db:ed:21:5c:7d:3b:df:ee:03:ad:d7:13:49:19:67:
                    23:40:80:0c:e7:20:61:08:1c:0d:88:ff:07:7a:09:
                    17:f8:eb:b5:cb:7d:5b:20:82:21:88:69:95:ae:0b:
                    8b:0d:b1:3e:a7:d8:f6:8b:72:d2:86:f8:f1:48:03:
                    91:14:90:76:ae:d9:42:ed:27:5f:c1:48:ef:c0:c6:
                    7a:87:a7:27:3c:30:4e:36:6e:ba:ac:da:9d:ca:46:
                    3d:a0:c4:f5:b6:c4:c1:22:d3:f8:41:ed:4e:51:7e:
                    60:07:35:9e:5e:c1:df:a6:f0:92:a3:9f:70:63:c8:
                    e7:cd:c7:12:26:e9:b4:dc:54:d9:5b:53:4d:45:96:
                    10:7a:7a:f2:c5:7b:75:d1:be:85:c4:6b:34:36:a2:
                    00:f5:5f:2a:6b:ec:da:70:ac:c2:1f:9e:68:4c:e1:
                    6a:e3:7c:1e:69:a8:d4:53:03:3a:e1:ff:32:38:05:
                    e5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DD:79:3E:FB:03:BE:A7:3D:0E:24:6D:D1:0D:A2:C4:CD:87:0F:9E
            X509v3 Authority Key Identifier:
                keyid:35:82:09:74:DA:E7:FC:3F:1A:E8:D2:79:26:9A:B6:70:AB:A4:0E:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35820974DAE7FC3F1AE8D279269AB670ABA40E8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a3a2f33332d3333203d3e20323636313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bb0::/33

    Signature Algorithm: sha256WithRSAEncryption
         05:82:07:3d:a2:83:ab:a6:f6:5e:b4:b1:9a:2d:b6:56:56:81:
         6c:a3:b0:e9:59:c3:e9:55:5a:74:d0:dc:be:cd:c7:11:bb:02:
         63:50:2a:90:4d:7b:d7:e3:99:bf:5f:40:61:e8:a6:2d:00:b2:
         b6:3c:cf:22:6a:be:7c:99:f3:0e:78:69:f8:4f:8b:73:f4:69:
         79:27:52:43:67:16:47:74:c9:c2:92:db:ca:68:6f:8b:d9:2f:
         e4:29:78:d5:6b:b9:3c:3a:da:3a:aa:9c:ba:d3:2f:77:68:e0:
         76:74:2b:89:ae:2f:a3:a2:c8:cf:27:7c:00:f1:99:f1:6e:79:
         3b:f3:7d:f1:21:d9:4a:cc:3c:82:3d:e3:cc:8a:a7:1a:a1:08:
         ae:b2:2b:6d:f0:c3:a1:70:c1:1b:79:8b:b2:f8:55:10:a5:34:
         10:27:35:d6:70:be:fc:3f:cd:40:e1:9f:20:6a:bf:bf:5c:5b:
         12:99:88:12:b2:0d:be:b3:1b:a1:00:3f:6f:ca:e3:20:d5:e4:
         b0:fc:01:79:85:b9:4f:3f:8a:da:b6:bd:32:a0:0f:8e:2b:c5:
         39:34:02:b2:2f:c6:74:07:31:13:c0:c6:21:ee:cf:24:cc:de:
         0f:b2:29:e5:28:bf:7c:e4:9a:6d:fc:bc:7e:0b:be:75:dd:8d:
         c0:95:f4:43
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQG9hy/CRLYVzhzFuNv+UbnD/TRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU4MjA5NzREQUU3RkMzRjFBRThEMjc5MjY5QUI2NzBB
QkE0MEU4RjAeFw0yNjAxMjMxOTUyMDdaFw0yNzAxMjIxOTU3MDdaMDMxMTAvBgNV
BAMTKEM1REQ3OTNFRkIwM0JFQTczRDBFMjQ2REQxMERBMkM0Q0Q4NzBGOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf5jnl3Jw81cwVELmpIMwLg5lN
PrGpr3T9qHKUtmgqz1DO82NFyfjQdXBHr2uPl4Gx1nVLSOM+yOmxukzCX56fZ4Lp
SZUaAIjd1dvtIVx9O9/uA63XE0kZZyNAgAznIGEIHA2I/wd6CRf467XLfVsggiGI
aZWuC4sNsT6n2PaLctKG+PFIA5EUkHau2ULtJ1/BSO/AxnqHpyc8ME42brqs2p3K
Rj2gxPW2xMEi0/hB7U5RfmAHNZ5ewd+m8JKjn3BjyOfNxxIm6bTcVNlbU01FlhB6
evLFe3XRvoXEazQ2ogD1Xypr7NpwrMIfnmhM4WrjfB5pqNRTAzrh/zI4BeUTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxd15PvsDvqc9DiRt0Q2ixM2HD54wHwYDVR0j
BBgwFoAUNYIJdNrn/D8a6NJ5Jpq2cKukDo8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjRoc1VnUkg4bW9jWERBNUJ3U0gyVFRwRHZzQmR3cVNUNDNCRUJKZ0Vx
ajIvMC8zNTgyMDk3NERBRTdGQzNGMUFFOEQyNzkyNjlBQjY3MEFCQTQwRThGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1ODIwOTc0REFFN0ZDM0Yx
QUU4RDI3OTI2OUFCNjcwQUJBNDBFOEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o0aHNVZ1JIOG1vY1hEQTVCd1NIMlRUcER2c0Jkd3FTVDQzQkVCSmdFcWoyLzAv
MzIzODMwMzQzYTMzNjI2MjMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM2
MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQ7sAAwDQYJKoZIhvcNAQELBQADggEBAAWCBz2i
g6um9l60sZottlZWgWyjsOlZw+lVWnTQ3L7NxxG7AmNQKpBNe9fjmb9fQGHopi0A
srY8zyJqvnyZ8w54afhPi3P0aXknUkNnFkd0ycKS28pob4vZL+QpeNVruTw62jqq
nLrTL3do4HZ0K4muL6OiyM8nfADxmfFueTvzffEh2UrMPII948yKpxqhCK6yK23w
w6FwwRt5i7L4VRClNBAnNdZwvvw/zUDhnyBqv79cWxKZiBKyDb6zG6EAP2/K4yDV
5LD8AXmFuU8/itq2vTKgD44rxTk0ArIvxnQHMRPAxiHuzyTM3g+yKeUov3zkmm38
vH4LvnXdjcCV9EM=
-----END CERTIFICATE-----
Generated at Mon Feb 23 02:50:17 2026 by rpki-client