Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/323830343a363031383a3a2f33332d3333203d3e20323639313435.roa
File:                     323830343a363031383a3a2f33332d3333203d3e20323639313435.roa (raw, json)
Hash identifier:          QNu3N4Q6fO05gIGJMeAaG22Ov/LtiCeuvFBnnuXQaow=
Subject key identifier:   E3:76:D4:A4:C4:49:DE:43:2C:6E:70:E4:49:A6:A9:C4:05:E8:19:AA
Certificate issuer:       /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
Certificate serial:       044988830C1419762B6E8D0D8AA8A6915099307C
Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/323830343a363031383a3a2f33332d3333203d3e20323639313435.roa
Signing time:             Thu 05 Feb 2026 09:41:57 +0000
ROA not before:           Thu 05 Feb 2026 09:36:57 +0000
ROA not after:            Thu 04 Feb 2027 09:41:57 +0000
asID:                     269145
IP address blocks:        2804:6018::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl
                          rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:49:88:83:0c:14:19:76:2b:6e:8d:0d:8a:a8:a6:91:50:99:30:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
        Validity
            Not Before: Feb  5 09:36:57 2026 GMT
            Not After : Feb  4 09:41:57 2027 GMT
        Subject: CN=E376D4A4C449DE432C6E70E449A6A9C405E819AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:85:0b:bf:27:50:00:df:7a:b5:4f:ed:47:77:
                    91:aa:01:f7:a2:f9:14:bc:fd:8e:d6:a8:d8:b5:21:
                    e1:df:19:c5:27:fb:af:58:eb:fe:cd:53:27:af:6f:
                    f4:4a:35:09:75:0d:92:62:96:c4:68:93:a8:5d:f0:
                    85:9a:12:76:91:f7:a4:c5:ae:c5:be:c8:92:7e:5b:
                    cc:a7:f7:9d:52:68:0a:05:44:08:26:38:82:e3:07:
                    78:c7:43:ad:79:57:b2:39:ac:bb:69:d7:a8:01:7b:
                    f3:7a:7d:88:63:d7:c3:b5:33:30:5e:0a:61:33:39:
                    e6:04:8e:28:38:8b:44:e2:d6:54:4d:bd:f8:ca:42:
                    f0:a2:c9:e2:87:cd:47:4b:9f:23:cb:61:a1:5c:ba:
                    c4:f1:11:ab:67:3b:5f:de:0e:8c:94:10:e5:6a:1b:
                    a0:11:00:27:be:22:9d:6e:49:57:92:3b:16:08:01:
                    4a:67:ed:c9:23:af:66:f5:e9:df:17:f5:77:46:c6:
                    a0:55:a0:14:c4:7a:04:0a:40:97:52:ec:ff:f5:21:
                    a6:4e:97:a3:aa:f0:53:ba:e3:ae:3c:54:39:09:d3:
                    fb:ee:4e:b7:bf:83:af:35:26:6f:4e:ce:ba:4b:fc:
                    bb:2d:54:ca:4f:dd:05:46:28:92:bc:3d:9c:71:a9:
                    3a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:76:D4:A4:C4:49:DE:43:2C:6E:70:E4:49:A6:A9:C4:05:E8:19:AA
            X509v3 Authority Key Identifier:
                keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/323830343a363031383a3a2f33332d3333203d3e20323639313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6018::/33

    Signature Algorithm: sha256WithRSAEncryption
         3b:82:e8:c4:a0:c9:aa:8e:b6:1b:13:38:03:b3:72:c1:73:46:
         1c:cd:fe:32:42:cc:93:31:2d:ea:56:49:ae:5a:0c:b7:8e:9f:
         eb:be:e3:bf:5a:b5:b2:8a:46:4e:ff:6c:80:17:86:9e:72:b1:
         0e:4f:0e:9e:ed:87:7f:62:12:f7:74:fe:31:ca:ba:27:2b:fe:
         21:11:0a:47:5a:70:e7:5a:8c:70:9e:e4:e2:6d:e9:77:0d:26:
         1a:25:34:32:02:c1:64:51:66:d3:58:ee:77:e8:bb:52:11:6b:
         53:a7:e5:45:81:32:e6:7a:fa:13:59:16:d7:56:3a:98:ce:a6:
         3d:a4:a6:df:a4:44:20:34:48:c2:7e:09:0b:48:25:50:67:4c:
         85:99:fc:bc:ff:79:51:06:2a:b5:57:25:61:f3:3b:40:5f:98:
         b7:c3:8d:2c:d1:4a:2d:2a:29:b3:cf:08:b9:99:a3:3e:2d:d5:
         3d:3f:fc:32:c0:b5:3e:60:84:1f:58:ac:fb:7c:f7:b6:39:78:
         58:1d:11:32:c6:0e:58:30:18:31:de:9a:b1:74:95:28:e7:81:
         ee:ef:76:36:a0:7d:4e:9e:13:d0:3c:6a:5c:46:e0:22:86:0e:
         47:c9:a4:50:e7:0f:8a:2b:9d:18:8f:53:48:3a:ea:b4:7c:ce:
         25:5a:59:88
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBEmIgwwUGXYrbo0NiqimkVCZMHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZBNjQ1M0ZGNkVFNDhEQUQ5QzIwQzU1MkY5QTRBRkEx
M0JGNzRGMDAeFw0yNjAyMDUwOTM2NTdaFw0yNzAyMDQwOTQxNTdaMDMxMTAvBgNV
BAMTKEUzNzZENEE0QzQ0OURFNDMyQzZFNzBFNDQ5QTZBOUM0MDVFODE5QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrhQu/J1AA33q1T+1Hd5GqAfei
+RS8/Y7WqNi1IeHfGcUn+69Y6/7NUyevb/RKNQl1DZJilsRok6hd8IWaEnaR96TF
rsW+yJJ+W8yn951SaAoFRAgmOILjB3jHQ615V7I5rLtp16gBe/N6fYhj18O1MzBe
CmEzOeYEjig4i0Ti1lRNvfjKQvCiyeKHzUdLnyPLYaFcusTxEatnO1/eDoyUEOVq
G6ARACe+Ip1uSVeSOxYIAUpn7ckjr2b16d8X9XdGxqBVoBTEegQKQJdS7P/1IaZO
l6Oq8FO64648VDkJ0/vuTre/g681Jm9OzrpL/LstVMpP3QVGKJK8PZxxqTonAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU43bUpMRJ3kMsbnDkSaapxAXoGaowHwYDVR0j
BBgwFoAUP6ZFP/buSNrZwgxVL5pK+hO/dPAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmU5NkFwdUN6ZldKbnRvMXlQZjVRMlhaQzhndHEzNFZpY2t6aG9VaGRt
TU4vMS8zRkE2NDUzRkY2RUU0OERBRDlDMjBDNTUyRjlBNEFGQTEzQkY3NEYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGQTY0NTNGRjZFRTQ4REFE
OUMyMEM1NTJGOUE0QUZBMTNCRjc0RjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJlOTZBcHVDemZXSm50bzF5UGY1UTJYWkM4Z3RxMzRWaWNremhvVWhkbU1OLzEv
MzIzODMwMzQzYTM2MzAzMTM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM5
MzEzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARgGAAwDQYJKoZIhvcNAQELBQADggEBADuC6MSg
yaqOthsTOAOzcsFzRhzN/jJCzJMxLepWSa5aDLeOn+u+479atbKKRk7/bIAXhp5y
sQ5PDp7th39iEvd0/jHKuicr/iERCkdacOdajHCe5OJt6XcNJholNDICwWRRZtNY
7nfou1IRa1On5UWBMuZ6+hNZFtdWOpjOpj2kpt+kRCA0SMJ+CQtIJVBnTIWZ/Lz/
eVEGKrVXJWHzO0BfmLfDjSzRSi0qKbPPCLmZoz4t1T0//DLAtT5ghB9YrPt897Y5
eFgdETLGDlgwGDHemrF0lSjnge7vdjagfU6eE9A8alxG4CKGDkfJpFDnD4ornRiP
U0g66rR8ziVaWYg=
-----END CERTIFICATE-----
Generated at Thu Feb 19 13:13:53 2026 by rpki-client