Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/323830343a333334343a3a2f33322d313238203d3e20323635333835.roa
File:                     323830343a333334343a3a2f33322d313238203d3e20323635333835.roa (raw, json)
Hash identifier:          s8ppWvYKy8Fxbmhw4x34K5ppEo7IOciEO9y/11wA0F8=
Subject key identifier:   42:C4:00:A0:8B:70:29:7E:E4:67:17:75:C0:9F:ED:4E:4C:AA:3A:DC
Certificate issuer:       /CN=6CCF865AC90751CCEF5EF29C83DA400ECDC00353
Certificate serial:       7277DA4961B6703CEF5A6A8DB8CA46CE10EF9BEB
Authority key identifier: 6C:CF:86:5A:C9:07:51:CC:EF:5E:F2:9C:83:DA:40:0E:CD:C0:03:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/323830343a333334343a3a2f33322d313238203d3e20323635333835.roa
Signing time:             Fri 20 Feb 2026 11:56:52 +0000
ROA not before:           Fri 20 Feb 2026 11:51:52 +0000
ROA not after:            Fri 19 Feb 2027 11:56:52 +0000
asID:                     265385
IP address blocks:        2804:3344::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.crl
                          rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 07:34:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:77:da:49:61:b6:70:3c:ef:5a:6a:8d:b8:ca:46:ce:10:ef:9b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CCF865AC90751CCEF5EF29C83DA400ECDC00353
        Validity
            Not Before: Feb 20 11:51:52 2026 GMT
            Not After : Feb 19 11:56:52 2027 GMT
        Subject: CN=42C400A08B70297EE4671775C09FED4E4CAA3ADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3a:5b:09:29:6a:4c:7e:ca:72:49:dd:5d:7e:
                    b4:5f:e3:f8:28:71:a8:ff:8e:60:fd:72:eb:4d:c8:
                    03:15:6f:e5:33:22:04:b2:99:04:d4:17:1f:3f:1d:
                    eb:36:66:74:cc:dd:20:45:16:26:81:d6:4f:e8:81:
                    b8:ef:93:a1:12:1e:2e:69:3e:a5:88:53:8f:4c:86:
                    5b:9f:e1:4f:33:28:64:39:e6:e6:77:e0:b7:1d:d0:
                    e9:1d:2e:12:76:70:10:15:f0:dc:a2:31:e6:b3:74:
                    23:81:f4:03:32:1e:bc:72:46:ed:3a:41:8c:14:bc:
                    70:b6:ea:d6:97:7b:4a:af:17:a7:05:c0:a3:09:7f:
                    d3:e3:ca:dc:61:43:91:19:6e:2d:f5:5e:a6:c2:dc:
                    53:f2:36:2c:23:83:07:52:dc:15:93:86:3f:de:a4:
                    66:90:e1:1b:fa:cc:3b:5f:b4:5d:ed:01:61:52:a1:
                    ef:f6:94:9f:66:76:6e:21:da:9e:e0:d5:32:3c:0a:
                    19:f1:07:f1:27:48:2c:a8:f9:f9:2a:41:09:bd:0c:
                    cf:9e:a0:a3:7b:30:4f:5d:ff:47:0c:48:04:01:57:
                    b4:23:21:67:4d:26:50:47:05:d1:8e:35:36:66:c1:
                    e2:96:67:1b:45:2f:70:20:90:0c:c8:a2:2d:f8:71:
                    0d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C4:00:A0:8B:70:29:7E:E4:67:17:75:C0:9F:ED:4E:4C:AA:3A:DC
            X509v3 Authority Key Identifier:
                keyid:6C:CF:86:5A:C9:07:51:CC:EF:5E:F2:9C:83:DA:40:0E:CD:C0:03:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/323830343a333334343a3a2f33322d313238203d3e20323635333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3344::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:66:3e:50:38:f7:87:de:ed:39:ef:42:20:1e:42:7e:a0:35:
         d0:08:f0:ed:ad:c0:50:cd:65:5d:08:35:dc:4c:02:77:b9:e0:
         76:d8:60:a2:6d:84:f6:dc:1b:89:df:90:d8:c1:a6:b6:fc:65:
         af:52:b3:24:32:2f:9d:a3:c2:c8:23:31:26:90:94:e7:ed:43:
         b6:9f:cf:4d:64:88:bf:4e:e0:0a:d6:09:0f:2b:c7:3c:d4:15:
         f7:c8:52:b2:e4:41:9f:c3:66:01:6d:91:af:40:4c:82:dc:61:
         d2:49:04:3e:b2:bc:23:1b:21:99:8d:15:30:8e:01:7a:44:40:
         1a:07:64:74:90:f5:69:d2:f3:f1:d8:95:34:d7:28:77:56:54:
         ed:1c:43:44:a3:50:b7:19:a5:47:ca:d1:74:cf:cb:3d:99:8e:
         ce:55:04:37:a6:5f:4c:88:28:50:0d:25:0e:9f:0a:eb:d3:6d:
         ed:d9:18:a6:fd:74:80:5b:27:34:e0:6b:de:5a:00:e2:e9:23:
         3e:09:5c:2c:cc:15:43:48:c6:ea:1f:e6:8e:52:23:e3:f9:8b:
         54:fa:82:90:e8:06:37:af:e9:e5:59:c0:9e:07:c8:d6:2e:8a:
         7a:6e:57:56:0a:88:16:0d:c7:56:06:79:f5:56:14:2c:e3:1b:
         4f:74:b2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:36:21 2026 by rpki-client