Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQgqpFt87PUjWCNTUaLbdPpAUZfiTRo9ApLDjMNjFHMP/0/323830343a343038633a3a2f33322d313238203d3e20323635393636.roa
File:                     323830343a343038633a3a2f33322d313238203d3e20323635393636.roa (raw, json)
Hash identifier:          Uxuj7vMcIYRMtGTp6htNIcTTx9Qi3rF8bn2G5bUTj+c=
Subject key identifier:   CD:FE:55:6C:0D:0C:2A:32:32:DA:47:4C:A7:F3:77:90:4A:04:52:D3
Certificate issuer:       /CN=C607DD8259CE1891CA110ED38D1BAF290D9FB72C
Certificate serial:       2FD730BD9A332ACF192AE0D108D76A59A048D4EC
Authority key identifier: C6:07:DD:82:59:CE:18:91:CA:11:0E:D3:8D:1B:AF:29:0D:9F:B7:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C607DD8259CE1891CA110ED38D1BAF290D9FB72C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQgqpFt87PUjWCNTUaLbdPpAUZfiTRo9ApLDjMNjFHMP/0/323830343a343038633a3a2f33322d313238203d3e20323635393636.roa
Signing time:             Mon 23 Feb 2026 12:23:12 +0000
ROA not before:           Mon 23 Feb 2026 12:18:12 +0000
ROA not after:            Mon 22 Feb 2027 12:23:12 +0000
asID:                     265966
IP address blocks:        2804:408c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQgqpFt87PUjWCNTUaLbdPpAUZfiTRo9ApLDjMNjFHMP/0/C607DD8259CE1891CA110ED38D1BAF290D9FB72C.crl
                          rsync://rpki-repo.registro.br/repo/EQgqpFt87PUjWCNTUaLbdPpAUZfiTRo9ApLDjMNjFHMP/0/C607DD8259CE1891CA110ED38D1BAF290D9FB72C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C607DD8259CE1891CA110ED38D1BAF290D9FB72C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d7:30:bd:9a:33:2a:cf:19:2a:e0:d1:08:d7:6a:59:a0:48:d4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C607DD8259CE1891CA110ED38D1BAF290D9FB72C
        Validity
            Not Before: Feb 23 12:18:12 2026 GMT
            Not After : Feb 22 12:23:12 2027 GMT
        Subject: CN=CDFE556C0D0C2A3232DA474CA7F377904A0452D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:33:d5:d8:ba:ed:3e:1b:f1:8b:f5:cb:e1:77:
                    46:10:2b:dd:15:5d:1f:1b:3e:a7:03:ff:14:9e:fb:
                    3f:38:59:06:6e:9b:20:6e:17:17:0e:f8:83:46:88:
                    53:0a:be:a9:53:fe:aa:bb:34:58:56:2a:d4:5f:d8:
                    b0:34:b5:29:b5:91:d0:6c:46:3f:b7:50:68:38:63:
                    a1:f0:c5:88:c0:ac:67:73:0f:0d:cb:b4:82:e8:2d:
                    46:5c:ec:78:2e:ca:a5:d8:1d:99:99:c7:f8:c2:b8:
                    13:4a:41:c9:cf:ed:96:9b:a0:d2:53:0e:4e:15:ed:
                    c1:3c:c6:01:4a:e2:c9:cb:09:f8:dc:35:db:d2:60:
                    24:e4:79:27:c2:14:76:9b:a2:3b:8c:51:d5:5b:fc:
                    12:fa:df:6c:ef:04:f3:d2:41:19:e7:df:0c:37:8a:
                    1d:34:33:99:c9:9f:9c:b6:bb:75:01:3c:3a:aa:bf:
                    1b:6e:73:74:b5:56:b7:a4:c8:fc:ce:03:b5:a5:58:
                    4e:41:20:8c:f5:35:2d:33:aa:a1:56:51:ba:1e:d3:
                    01:dd:eb:66:c2:14:5a:91:3a:a5:27:b7:68:4c:21:
                    77:cb:6a:61:5b:90:ba:39:56:2c:a1:21:6e:85:3f:
                    ca:e3:7e:88:69:f8:63:00:28:45:22:eb:57:24:f3:
                    ab:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:FE:55:6C:0D:0C:2A:32:32:DA:47:4C:A7:F3:77:90:4A:04:52:D3
            X509v3 Authority Key Identifier:
                keyid:C6:07:DD:82:59:CE:18:91:CA:11:0E:D3:8D:1B:AF:29:0D:9F:B7:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQgqpFt87PUjWCNTUaLbdPpAUZfiTRo9ApLDjMNjFHMP/0/C607DD8259CE1891CA110ED38D1BAF290D9FB72C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C607DD8259CE1891CA110ED38D1BAF290D9FB72C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQgqpFt87PUjWCNTUaLbdPpAUZfiTRo9ApLDjMNjFHMP/0/323830343a343038633a3a2f33322d313238203d3e20323635393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:408c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:5d:9b:0a:c4:22:68:a2:01:50:70:47:86:3e:be:3f:79:56:
         bf:49:0b:1d:e3:e6:e9:07:e8:80:14:45:32:a3:cc:c9:19:d5:
         d0:2a:e9:94:fc:d0:e8:23:ef:3a:4b:10:2e:be:ac:4e:ef:96:
         4d:a9:3d:9a:13:80:07:33:90:1f:5d:b2:14:f0:b7:25:10:2f:
         11:9a:47:f8:b8:63:e3:b6:fd:7a:c0:b7:7a:c7:dc:45:f4:b2:
         b0:0c:7f:3f:50:b3:ab:8d:99:f1:05:51:3a:c1:4e:44:8c:6e:
         22:47:51:8d:97:c0:84:cd:ad:cb:a9:86:c9:ba:9f:ae:1b:a9:
         f6:93:3d:f0:c7:45:58:c9:38:e8:49:b9:52:aa:eb:d7:f2:42:
         b5:44:63:74:9e:6b:d3:d1:bd:79:6f:e2:4c:8a:9f:f2:ed:14:
         1e:52:e1:87:5c:f0:87:85:29:87:27:b7:27:80:8b:68:ce:dd:
         c4:ad:81:10:47:6f:68:db:b5:5f:be:b5:87:96:ee:1f:03:01:
         7a:2b:18:a9:fa:07:3c:a5:6d:e7:66:fa:d4:39:78:e7:32:7b:
         9b:76:0f:4a:9c:aa:4f:75:e3:0a:f5:a2:9c:17:8b:31:7b:3e:
         cf:4a:0a:43:13:08:9c:1f:8f:52:a6:e2:3a:90:51:7c:0b:27:
         8c:95:43:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:39:40 2026 by rpki-client