Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/323830343a333364383a3a2f33322d3332203d3e20323635343230.roa
File:                     323830343a333364383a3a2f33322d3332203d3e20323635343230.roa (raw, json)
Hash identifier:          V1umr+zfw0aULo1EAVEtCgrG0n6QsyHKLXheMI+wKYI=
Subject key identifier:   84:01:94:EC:59:54:2B:13:F3:77:40:FE:38:8E:18:3E:B0:FE:9F:AD
Certificate issuer:       /CN=D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C
Certificate serial:       1C660015DB1F3E7B01B99D7B7DB1EB1A86FBE330
Authority key identifier: D3:58:BF:DB:4B:AD:3C:B3:8A:CD:A8:FA:C9:19:A1:A2:4D:ED:EB:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/323830343a333364383a3a2f33322d3332203d3e20323635343230.roa
Signing time:             Thu 05 Feb 2026 18:43:11 +0000
ROA not before:           Thu 05 Feb 2026 18:38:11 +0000
ROA not after:            Thu 04 Feb 2027 18:43:11 +0000
asID:                     265420
IP address blocks:        2804:33d8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.crl
                          rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:41:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:66:00:15:db:1f:3e:7b:01:b9:9d:7b:7d:b1:eb:1a:86:fb:e3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C
        Validity
            Not Before: Feb  5 18:38:11 2026 GMT
            Not After : Feb  4 18:43:11 2027 GMT
        Subject: CN=840194EC59542B13F37740FE388E183EB0FE9FAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5d:d0:9d:d5:d7:76:90:8a:a1:b5:8e:f4:38:
                    e9:5b:0e:90:14:ff:0a:6a:ce:52:55:f6:a0:b4:33:
                    eb:e4:2e:0e:fa:e4:b7:2e:26:d1:e5:71:0a:9b:b2:
                    49:c3:9f:37:22:50:e2:c8:dc:fb:c7:a4:54:ef:71:
                    84:3c:de:16:72:80:ef:87:a3:62:1e:5a:e2:31:b2:
                    77:1d:31:3d:01:fc:a2:e6:51:8a:63:a2:97:15:3c:
                    91:fb:c1:0a:b3:ff:a7:46:10:98:27:50:5b:32:6d:
                    cc:e6:a6:b7:f2:f5:f4:a1:4e:aa:9e:4e:7d:0c:b2:
                    ad:31:a5:ed:bf:10:d9:5a:42:03:7b:0d:ef:e1:a8:
                    5a:6e:e2:95:07:1c:29:a2:45:86:ad:0e:2f:96:16:
                    19:c1:ee:89:60:2e:54:e1:11:f9:96:c9:26:89:c1:
                    d8:50:6a:05:1e:11:e3:91:19:d6:01:4d:50:89:97:
                    33:c6:01:69:e8:b5:e0:c2:5b:ae:cc:82:10:9c:8b:
                    b7:18:f1:62:6a:17:ac:27:d2:cb:5c:89:9c:2c:75:
                    16:b5:35:c5:83:e9:fe:ff:79:0d:1e:b5:2d:df:66:
                    eb:dc:ea:eb:e7:62:5e:3b:cb:0b:ab:a4:8a:30:27:
                    94:20:ad:8f:6a:7e:dd:27:1c:c3:80:6a:10:84:a0:
                    49:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:01:94:EC:59:54:2B:13:F3:77:40:FE:38:8E:18:3E:B0:FE:9F:AD
            X509v3 Authority Key Identifier:
                keyid:D3:58:BF:DB:4B:AD:3C:B3:8A:CD:A8:FA:C9:19:A1:A2:4D:ED:EB:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/323830343a333364383a3a2f33322d3332203d3e20323635343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:db:2d:f0:72:8f:d0:6e:e4:f5:15:29:eb:19:90:01:de:c9:
         fa:e8:7f:b3:72:f3:10:50:af:7a:86:b3:59:da:ec:e6:9d:31:
         54:2e:82:e5:79:9b:83:8b:86:dc:eb:76:e3:7a:2f:ce:33:e0:
         89:7e:2d:be:18:d1:e6:7c:f7:55:52:43:2a:d1:ad:8f:b8:c5:
         8e:c9:f4:94:a6:6e:bb:6e:53:1f:2b:07:d7:02:aa:cd:25:f4:
         58:c8:86:d5:c2:c7:34:7c:e6:fe:5b:af:49:c1:c0:05:9e:1b:
         0c:89:f7:12:27:14:0b:43:6e:f8:48:4f:a7:0c:75:0b:e1:e7:
         61:53:1a:46:93:fb:6b:79:14:d6:b6:75:06:02:d3:0b:e0:3b:
         1e:ad:4c:15:f9:ed:3b:01:73:95:91:e2:6f:b5:e0:81:3c:4e:
         03:b6:e9:68:8f:a4:c4:fa:d6:9b:2a:bb:2a:ec:5b:bd:16:bf:
         73:03:c7:ec:d4:14:f4:48:e0:7f:ee:2d:91:51:18:54:c6:8d:
         08:8b:00:f3:04:56:8c:b9:05:07:a7:4d:c8:7f:31:74:fc:d5:
         21:bb:13:c5:5d:3c:9e:7a:3e:ba:f1:1a:77:8a:bd:0e:b8:70:
         01:00:77:0c:11:6a:b4:8b:72:8e:64:8c:0e:06:2a:f0:f3:40:
         80:d5:2a:2c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHGYAFdsfPnsBuZ17fbHrGob74zAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1OEJGREI0QkFEM0NCMzhBQ0RBOEZBQzkxOUExQTI0
REVERUI1QzAeFw0yNjAyMDUxODM4MTFaFw0yNzAyMDQxODQzMTFaMDMxMTAvBgNV
BAMTKDg0MDE5NEVDNTk1NDJCMTNGMzc3NDBGRTM4OEUxODNFQjBGRTlGQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUXdCd1dd2kIqhtY70OOlbDpAU
/wpqzlJV9qC0M+vkLg765LcuJtHlcQqbsknDnzciUOLI3PvHpFTvcYQ83hZygO+H
o2IeWuIxsncdMT0B/KLmUYpjopcVPJH7wQqz/6dGEJgnUFsybczmprfy9fShTqqe
Tn0Msq0xpe2/ENlaQgN7De/hqFpu4pUHHCmiRYatDi+WFhnB7olgLlThEfmWySaJ
wdhQagUeEeORGdYBTVCJlzPGAWnoteDCW67MghCci7cY8WJqF6wn0stciZwsdRa1
NcWD6f7/eQ0etS3fZuvc6uvnYl47ywurpIowJ5QgrY9qft0nHMOAahCEoEkPAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUhAGU7FlUKxPzd0D+OI4YPrD+n60wHwYDVR0j
BBgwFoAU01i/20utPLOKzaj6yRmhok3t61wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM05zSzNmZWJTVjR3TE1aaldOY1dTUkt5NlBWQ2U1U0FIQlhqTmpKTURo
aTIvMS9EMzU4QkZEQjRCQUQzQ0IzOEFDREE4RkFDOTE5QTFBMjRERURFQjVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNThCRkRCNEJBRDNDQjM4
QUNEQThGQUM5MTlBMUEyNERFREVCNUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNOc0szZmViU1Y0d0xNWmpXTmNXU1JLeTZQVkNlNVNBSEJYak5qSk1EaGkyLzEv
MzIzODMwMzQzYTMzMzM2NDM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzQzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQz2DANBgkqhkiG9w0BAQsFAAOCAQEAZNst8HKP
0G7k9RUp6xmQAd7J+uh/s3LzEFCveoazWdrs5p0xVC6C5Xmbg4uG3Ot243ovzjPg
iX4tvhjR5nz3VVJDKtGtj7jFjsn0lKZuu25THysH1wKqzSX0WMiG1cLHNHzm/luv
ScHABZ4bDIn3EicUC0Nu+EhPpwx1C+HnYVMaRpP7a3kU1rZ1BgLTC+A7Hq1MFfnt
OwFzlZHib7XggTxOA7bpaI+kxPrWmyq7KuxbvRa/cwPH7NQU9Ejgf+4tkVEYVMaN
CIsA8wRWjLkFB6dNyH8xdPzVIbsTxV08nno+uvEad4q9DrhwAQB3DBFqtItyjmSM
DgYq8PNAgNUqLA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 05:52:42 2026 by rpki-client