Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/323830343a363031383a3a2f33322d3332203d3e20323639313435.roa
File:                     323830343a363031383a3a2f33322d3332203d3e20323639313435.roa (raw, json)
Hash identifier:          GEfn4Bl00zdhGTYrW9jbA0jPa3LwMFFlV00DI8uLXIg=
Subject key identifier:   35:04:2D:2C:B8:32:3F:E5:6D:41:DC:B8:D7:C7:3F:74:E9:CE:C7:7F
Certificate issuer:       /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
Certificate serial:       01A775FB5683891691C5798DF59FE3BE6F668D69
Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/323830343a363031383a3a2f33322d3332203d3e20323639313435.roa
Signing time:             Thu 05 Feb 2026 09:41:58 +0000
ROA not before:           Thu 05 Feb 2026 09:36:58 +0000
ROA not after:            Thu 04 Feb 2027 09:41:58 +0000
asID:                     269145
IP address blocks:        2804:6018::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl
                          rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a7:75:fb:56:83:89:16:91:c5:79:8d:f5:9f:e3:be:6f:66:8d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
        Validity
            Not Before: Feb  5 09:36:58 2026 GMT
            Not After : Feb  4 09:41:58 2027 GMT
        Subject: CN=35042D2CB8323FE56D41DCB8D7C73F74E9CEC77F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:09:68:10:45:ea:ef:be:7b:f7:e3:8a:cb:b7:
                    8b:d3:58:e3:e0:6f:b4:7b:35:13:3a:5a:cd:99:36:
                    ca:18:e4:ab:9d:3d:a4:8d:7c:60:96:e8:3b:db:77:
                    b0:84:d5:0a:1a:5b:17:f4:34:5c:54:a8:5f:4f:0c:
                    34:b2:71:1f:b3:51:3d:7d:9f:34:6b:2b:e9:2a:f3:
                    d4:03:da:33:48:86:a0:46:a7:80:84:c1:95:99:09:
                    ae:8e:f8:7b:e5:30:7e:23:ba:ac:84:44:bc:fb:a0:
                    4e:15:56:41:ec:a1:9e:bc:c6:47:b0:11:78:80:30:
                    eb:f6:51:b4:be:f3:ec:ab:74:a0:30:af:68:1e:84:
                    90:4f:17:55:1b:01:dd:0f:b6:95:e2:b7:52:04:9b:
                    b7:e0:17:90:1f:42:6d:07:64:fa:5b:1c:cb:64:27:
                    49:94:fa:96:60:dc:a4:10:b9:62:eb:10:26:61:87:
                    19:09:6f:19:f9:42:28:e8:68:2a:b5:1b:29:5c:54:
                    b8:af:d0:5c:19:42:d8:99:c7:51:0e:88:f1:f9:50:
                    85:5b:4d:89:36:60:27:46:81:fc:43:14:47:5b:6b:
                    fa:36:a8:88:06:74:25:e2:f2:a4:c0:03:4c:78:e6:
                    a2:70:b4:12:43:b5:f1:60:d5:60:26:8a:e5:30:3b:
                    67:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:04:2D:2C:B8:32:3F:E5:6D:41:DC:B8:D7:C7:3F:74:E9:CE:C7:7F
            X509v3 Authority Key Identifier:
                keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/323830343a363031383a3a2f33322d3332203d3e20323639313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6018::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:49:13:95:cc:be:b5:d1:a0:e5:7f:36:73:14:92:b7:14:06:
         51:d1:94:52:18:1f:9a:47:f8:b3:40:1a:6d:71:9f:21:31:63:
         ca:1e:9d:d0:5b:b2:5e:9d:8b:fc:47:63:c2:8e:55:92:da:1c:
         f6:b3:a8:11:84:ad:f4:e7:f6:f8:a7:6b:76:56:8a:0d:35:d1:
         06:02:0f:32:91:9a:19:f0:8e:aa:8d:c5:e7:06:6f:a8:c3:09:
         32:79:0d:bb:eb:a3:e7:db:e7:67:b7:cb:ff:81:de:ff:7c:0a:
         4f:e5:73:f6:3b:f3:93:e1:0c:60:38:0e:62:01:de:86:56:9d:
         f9:07:33:e9:91:5f:04:fe:45:75:5c:70:27:21:47:30:33:10:
         91:45:23:ff:dc:e5:53:2f:62:8a:23:47:45:aa:fb:7c:ee:9c:
         75:17:24:e9:34:01:32:74:11:94:8e:74:10:1b:a7:d7:83:d1:
         cd:2f:86:ea:18:1b:eb:72:e0:86:3a:2d:bd:c4:d3:91:03:d6:
         14:9a:f4:f9:63:ec:ca:97:70:79:61:3e:02:36:e8:af:d1:ff:
         be:53:28:46:89:14:4c:52:b3:56:69:24:d6:3e:3d:3c:bb:f4:
         ce:e8:3c:dc:e0:25:80:60:3b:12:f5:bc:28:3b:a3:60:8f:cb:
         53:6a:f7:84
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUAad1+1aDiRaRxXmN9Z/jvm9mjWkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZBNjQ1M0ZGNkVFNDhEQUQ5QzIwQzU1MkY5QTRBRkEx
M0JGNzRGMDAeFw0yNjAyMDUwOTM2NThaFw0yNzAyMDQwOTQxNThaMDMxMTAvBgNV
BAMTKDM1MDQyRDJDQjgzMjNGRTU2RDQxRENCOEQ3QzczRjc0RTlDRUM3N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFCWgQRervvnv344rLt4vTWOPg
b7R7NRM6Ws2ZNsoY5KudPaSNfGCW6Dvbd7CE1QoaWxf0NFxUqF9PDDSycR+zUT19
nzRrK+kq89QD2jNIhqBGp4CEwZWZCa6O+HvlMH4juqyERLz7oE4VVkHsoZ68xkew
EXiAMOv2UbS+8+yrdKAwr2gehJBPF1UbAd0PtpXit1IEm7fgF5AfQm0HZPpbHMtk
J0mU+pZg3KQQuWLrECZhhxkJbxn5QijoaCq1GylcVLiv0FwZQtiZx1EOiPH5UIVb
TYk2YCdGgfxDFEdba/o2qIgGdCXi8qTAA0x45qJwtBJDtfFg1WAmiuUwO2f3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUNQQtLLgyP+VtQdy418c/dOnOx38wHwYDVR0j
BBgwFoAUP6ZFP/buSNrZwgxVL5pK+hO/dPAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmU5NkFwdUN6ZldKbnRvMXlQZjVRMlhaQzhndHEzNFZpY2t6aG9VaGRt
TU4vMS8zRkE2NDUzRkY2RUU0OERBRDlDMjBDNTUyRjlBNEFGQTEzQkY3NEYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGQTY0NTNGRjZFRTQ4REFE
OUMyMEM1NTJGOUE0QUZBMTNCRjc0RjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJlOTZBcHVDemZXSm50bzF5UGY1UTJYWkM4Z3RxMzRWaWNremhvVWhkbU1OLzEv
MzIzODMwMzQzYTM2MzAzMTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzEzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARgGDANBgkqhkiG9w0BAQsFAAOCAQEAdkkTlcy+
tdGg5X82cxSStxQGUdGUUhgfmkf4s0AabXGfITFjyh6d0FuyXp2L/Edjwo5Vktoc
9rOoEYSt9Of2+KdrdlaKDTXRBgIPMpGaGfCOqo3F5wZvqMMJMnkNu+uj59vnZ7fL
/4He/3wKT+Vz9jvzk+EMYDgOYgHehlad+Qcz6ZFfBP5FdVxwJyFHMDMQkUUj/9zl
Uy9iiiNHRar7fO6cdRck6TQBMnQRlI50EBun14PRzS+G6hgb63LghjotvcTTkQPW
FJr0+WPsypdweWE+Ajbor9H/vlMoRokUTFKzVmkk1j49PLv0zug83OAlgGA7EvW8
KDujYI/LU2r3hA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 13:14:37 2026 by rpki-client