Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/27xVxwVG1vgqEetHrzrLHyUMK7rfSj18MxT7vfTd1wFV/0/323830343a373430343a3a2f33322d3438203d3e20323730393533.roa
File:                     323830343a373430343a3a2f33322d3438203d3e20323730393533.roa (raw, json)
Hash identifier:          bthncC45C0yooEf2Jc9A1G/yGQJYO9VA9zAFpGQpL4k=
Subject key identifier:   F4:0D:F8:59:70:80:51:88:FC:D2:EF:62:D6:EF:13:F7:98:59:DA:AB
Certificate issuer:       /CN=3D6C6E6C4366914485C2C9AE59DF7F9D669116BC
Certificate serial:       27EF8033F069FCC342A3C06F30A9EA65EB991740
Authority key identifier: 3D:6C:6E:6C:43:66:91:44:85:C2:C9:AE:59:DF:7F:9D:66:91:16:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D6C6E6C4366914485C2C9AE59DF7F9D669116BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/27xVxwVG1vgqEetHrzrLHyUMK7rfSj18MxT7vfTd1wFV/0/323830343a373430343a3a2f33322d3438203d3e20323730393533.roa
Signing time:             Wed 18 Feb 2026 02:14:33 +0000
ROA not before:           Wed 18 Feb 2026 02:09:33 +0000
ROA not after:            Wed 17 Feb 2027 02:14:33 +0000
asID:                     270953
IP address blocks:        2804:7404::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/27xVxwVG1vgqEetHrzrLHyUMK7rfSj18MxT7vfTd1wFV/0/3D6C6E6C4366914485C2C9AE59DF7F9D669116BC.crl
                          rsync://rpki-repo.registro.br/repo/27xVxwVG1vgqEetHrzrLHyUMK7rfSj18MxT7vfTd1wFV/0/3D6C6E6C4366914485C2C9AE59DF7F9D669116BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D6C6E6C4366914485C2C9AE59DF7F9D669116BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ef:80:33:f0:69:fc:c3:42:a3:c0:6f:30:a9:ea:65:eb:99:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D6C6E6C4366914485C2C9AE59DF7F9D669116BC
        Validity
            Not Before: Feb 18 02:09:33 2026 GMT
            Not After : Feb 17 02:14:33 2027 GMT
        Subject: CN=F40DF85970805188FCD2EF62D6EF13F79859DAAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:7a:40:2b:d4:31:d9:fa:b9:cb:3c:ec:a0:
                    cb:0e:bf:84:cb:79:ad:6f:a7:21:5d:b1:7d:b7:b3:
                    6f:ba:e8:60:dc:01:ec:d3:3d:e6:be:95:d8:6c:58:
                    d7:2a:56:2e:ec:c9:ef:d4:9d:59:fb:e7:f9:b8:10:
                    01:8c:5c:28:d3:d7:b0:de:bd:0e:6d:dc:e1:c7:f7:
                    b2:ae:e7:28:01:4a:b7:fb:02:29:b3:7d:c3:d7:72:
                    30:51:47:9b:39:b2:af:d4:84:23:da:17:45:2c:6d:
                    2a:14:70:1f:9f:70:a2:a0:25:0e:3a:73:1f:6d:d7:
                    a6:12:7b:7e:40:ac:b1:5a:6d:8f:9d:1f:ab:4a:ce:
                    0d:bb:58:65:27:c6:a9:f6:d3:7f:5d:23:3a:24:5e:
                    5b:25:b1:05:d8:2e:6b:d4:da:3d:97:21:9b:c1:6a:
                    7c:84:88:82:26:bd:a1:8a:9f:5f:38:f5:0e:2b:87:
                    ba:64:03:e0:b7:f2:a1:0c:29:7a:a9:9e:91:32:f0:
                    87:3f:26:28:a8:b3:91:23:0d:46:4b:41:af:72:93:
                    8d:4a:33:3e:8b:90:34:d0:08:47:7c:6b:a1:88:5e:
                    73:55:ea:93:43:dc:0e:aa:13:0f:be:fb:a5:07:9b:
                    46:99:89:ad:67:21:aa:c2:1f:5c:05:a9:d1:0c:57:
                    1c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0D:F8:59:70:80:51:88:FC:D2:EF:62:D6:EF:13:F7:98:59:DA:AB
            X509v3 Authority Key Identifier:
                keyid:3D:6C:6E:6C:43:66:91:44:85:C2:C9:AE:59:DF:7F:9D:66:91:16:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/27xVxwVG1vgqEetHrzrLHyUMK7rfSj18MxT7vfTd1wFV/0/3D6C6E6C4366914485C2C9AE59DF7F9D669116BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D6C6E6C4366914485C2C9AE59DF7F9D669116BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/27xVxwVG1vgqEetHrzrLHyUMK7rfSj18MxT7vfTd1wFV/0/323830343a373430343a3a2f33322d3438203d3e20323730393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7404::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:83:8e:fb:26:ef:e6:e7:06:e3:04:e9:59:f9:01:cb:a1:78:
         17:a9:8a:b4:0a:58:bc:4d:36:c6:b8:14:7c:36:71:2b:fd:8b:
         6f:50:43:16:b2:61:18:f4:6f:ed:76:52:f8:03:de:64:d5:38:
         41:63:7c:60:23:16:0f:22:56:32:13:09:ba:99:d7:c0:0f:7b:
         03:35:46:7c:f9:e0:56:f2:e8:6e:64:df:7a:44:4f:55:7f:ba:
         f7:12:db:98:79:a0:3d:36:02:79:53:73:55:4f:f2:c3:2f:ed:
         e5:20:50:22:09:0d:50:69:e6:b5:9f:b9:32:26:a7:91:98:ce:
         53:ff:e6:3b:ed:56:7f:30:39:90:3c:ac:bd:c6:76:c5:77:81:
         b4:d2:df:47:76:61:0c:eb:14:cc:b3:51:30:44:ad:f5:b8:d6:
         68:ff:3e:f1:56:c0:91:2e:35:eb:df:ee:cc:19:d6:ba:e6:ed:
         ab:12:14:b0:9f:8e:0c:80:53:e8:e5:00:75:28:ea:05:1e:7c:
         04:39:bd:70:c4:f9:e2:f3:78:db:6f:cb:75:35:7d:3c:fa:5e:
         b3:85:cb:b2:16:bd:59:54:e1:96:9a:23:a1:5c:b8:90:45:2f:
         5e:49:3e:82:e3:75:56:23:81:9b:55:29:ea:06:30:7f:55:a8:
         cc:9f:84:9b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJ++AM/Bp/MNCo8BvMKnqZeuZF0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q2QzZFNkM0MzY2OTE0NDg1QzJDOUFFNTlERjdGOUQ2
NjkxMTZCQzAeFw0yNjAyMTgwMjA5MzNaFw0yNzAyMTcwMjE0MzNaMDMxMTAvBgNV
BAMTKEY0MERGODU5NzA4MDUxODhGQ0QyRUY2MkQ2RUYxM0Y3OTg1OURBQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1GXpAK9Qx2fq5yzzsoMsOv4TL
ea1vpyFdsX23s2+66GDcAezTPea+ldhsWNcqVi7sye/UnVn75/m4EAGMXCjT17De
vQ5t3OHH97Ku5ygBSrf7AimzfcPXcjBRR5s5sq/UhCPaF0UsbSoUcB+fcKKgJQ46
cx9t16YSe35ArLFabY+dH6tKzg27WGUnxqn2039dIzokXlslsQXYLmvU2j2XIZvB
anyEiIImvaGKn1849Q4rh7pkA+C38qEMKXqpnpEy8Ic/Jiios5EjDUZLQa9yk41K
Mz6LkDTQCEd8a6GIXnNV6pND3A6qEw+++6UHm0aZia1nIarCH1wFqdEMVxy9AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU9A34WXCAUYj80u9i1u8T95hZ2qswHwYDVR0j
BBgwFoAUPWxubENmkUSFwsmuWd9/nWaRFrwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjd4Vnh3VkcxdmdxRWV0SHJ6ckxIeVVNSzdyZlNqMThNeFQ3dmZUZDF3
RlYvMC8zRDZDNkU2QzQzNjY5MTQ0ODVDMkM5QUU1OURGN0Y5RDY2OTExNkJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNENkM2RTZDNDM2NjkxNDQ4
NUMyQzlBRTU5REY3RjlENjY5MTE2QkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI3eFZ4d1ZHMXZncUVldEhyenJMSHlVTUs3cmZTajE4TXhUN3ZmVGQxd0ZWLzAv
MzIzODMwMzQzYTM3MzQzMDM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzkzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR0BDANBgkqhkiG9w0BAQsFAAOCAQEAToOO+ybv
5ucG4wTpWfkBy6F4F6mKtApYvE02xrgUfDZxK/2Lb1BDFrJhGPRv7XZS+APeZNU4
QWN8YCMWDyJWMhMJupnXwA97AzVGfPngVvLobmTfekRPVX+69xLbmHmgPTYCeVNz
VU/ywy/t5SBQIgkNUGnmtZ+5MiankZjOU//mO+1WfzA5kDysvcZ2xXeBtNLfR3Zh
DOsUzLNRMESt9bjWaP8+8VbAkS4169/uzBnWuubtqxIUsJ+ODIBT6OUAdSjqBR58
BDm9cMT54vN422/LdTV9PPpes4XLsha9WVThlpojoVy4kEUvXkk+guN1ViOBm1Up
6gYwf1WozJ+Emw==
-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:02 2026 by rpki-client