Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/1/323830343a363338383a3a2f33322d313238203d3e20323639333637.roa
File:                     323830343a363338383a3a2f33322d313238203d3e20323639333637.roa (raw, json)
Hash identifier:          Dpchsa6fMNn9ZTnM2k0wfJgEGKfQuMSAk6mcpfUCRio=
Subject key identifier:   2C:9D:98:99:B7:68:65:CB:C3:E0:F1:5D:45:46:9B:F5:E3:30:97:96
Certificate issuer:       /CN=110BEE0AC24D6678F28E9522A64E0A2D9C666A15
Certificate serial:       45530D5918D195985DAFA0572014F5D9E74D171F
Authority key identifier: 11:0B:EE:0A:C2:4D:66:78:F2:8E:95:22:A6:4E:0A:2D:9C:66:6A:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/110BEE0AC24D6678F28E9522A64E0A2D9C666A15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/1/323830343a363338383a3a2f33322d313238203d3e20323639333637.roa
Signing time:             Thu 05 Feb 2026 01:08:27 +0000
ROA not before:           Thu 05 Feb 2026 01:03:27 +0000
ROA not after:            Thu 04 Feb 2027 01:08:27 +0000
asID:                     269367
IP address blocks:        2804:6388::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/1/110BEE0AC24D6678F28E9522A64E0A2D9C666A15.crl
                          rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/1/110BEE0AC24D6678F28E9522A64E0A2D9C666A15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/110BEE0AC24D6678F28E9522A64E0A2D9C666A15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 11:56:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:53:0d:59:18:d1:95:98:5d:af:a0:57:20:14:f5:d9:e7:4d:17:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110BEE0AC24D6678F28E9522A64E0A2D9C666A15
        Validity
            Not Before: Feb  5 01:03:27 2026 GMT
            Not After : Feb  4 01:08:27 2027 GMT
        Subject: CN=2C9D9899B76865CBC3E0F15D45469BF5E3309796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:96:0c:7e:2c:1e:24:8f:c5:67:c0:c5:0d:ad:
                    ed:11:a0:20:9c:18:2a:6c:26:08:11:75:ea:ed:d5:
                    18:b2:91:06:81:a7:b4:ee:ee:8c:6c:39:53:48:1b:
                    4e:ba:f7:d1:da:67:8a:12:53:be:28:cb:da:1f:cd:
                    8b:46:4a:1e:5d:87:3e:3a:1d:5b:e0:3d:5c:8d:eb:
                    b5:b8:1a:97:52:9a:45:cb:e5:29:7d:45:96:b4:e0:
                    f9:5f:16:13:85:81:31:c2:ff:ea:af:d4:ad:d8:1d:
                    c9:71:a9:e7:81:80:6f:53:81:42:b2:52:19:d5:18:
                    7b:24:64:9e:75:7f:d8:2d:90:e5:a8:ba:ce:26:b6:
                    b3:fc:ca:78:01:0d:71:53:49:95:60:ae:b1:3c:81:
                    69:24:4a:19:68:53:4a:7c:60:6e:40:3b:f4:0d:6a:
                    9d:2f:e1:de:6f:df:ba:f7:d9:72:5e:5b:65:2e:0b:
                    5a:a1:10:56:fc:de:c8:47:a1:31:09:0c:bd:0f:1d:
                    63:84:67:6b:6f:3e:4f:39:b5:d9:8a:54:79:ab:18:
                    b7:d4:a7:69:8a:ce:96:4d:b8:26:25:63:7f:f5:1b:
                    41:88:87:d5:d2:04:39:c7:7b:2d:0f:58:56:af:c8:
                    b1:ae:2c:64:ee:3a:ce:bb:b5:ba:7d:ce:4a:c0:5e:
                    7c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9D:98:99:B7:68:65:CB:C3:E0:F1:5D:45:46:9B:F5:E3:30:97:96
            X509v3 Authority Key Identifier:
                keyid:11:0B:EE:0A:C2:4D:66:78:F2:8E:95:22:A6:4E:0A:2D:9C:66:6A:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/1/110BEE0AC24D6678F28E9522A64E0A2D9C666A15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/110BEE0AC24D6678F28E9522A64E0A2D9C666A15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/1/323830343a363338383a3a2f33322d313238203d3e20323639333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6388::/32

    Signature Algorithm: sha256WithRSAEncryption
         e6:be:29:d9:b0:5b:95:0c:51:10:12:42:c8:15:a0:c3:ee:cd:
         2a:a6:30:80:8b:17:49:b9:46:b4:81:67:5a:86:da:43:69:9e:
         7c:bd:8a:dc:0a:3e:98:b1:51:d9:bc:69:61:3f:de:16:c6:c5:
         90:b3:f9:39:93:4d:9d:93:88:4f:5b:2a:5e:80:65:d9:23:e9:
         65:bc:d8:14:2b:64:72:96:78:85:32:cb:89:40:6d:b0:b1:68:
         35:33:34:38:08:68:28:e9:95:a8:b0:6a:e1:1f:da:28:63:46:
         2f:ec:89:29:dd:1a:cc:28:77:3d:23:38:27:f1:b7:25:46:0e:
         4b:07:b3:36:76:bc:ff:f2:05:77:66:c9:10:13:a9:e2:7f:58:
         e2:fe:3f:10:b4:7b:4d:93:12:ce:9e:f3:48:1a:12:27:69:de:
         08:e2:f6:a1:68:41:cb:5b:c0:91:e8:0f:20:35:6e:fc:d3:f2:
         01:cb:22:70:b5:18:84:39:4c:5f:58:e6:2c:cd:b1:b8:ea:98:
         96:03:ef:3a:b9:54:b4:96:c6:db:8f:2c:b8:ee:ed:e9:d4:0e:
         fc:ae:e0:87:8d:9b:36:66:4e:21:77:5e:c6:bc:f0:25:a7:17:
         96:fb:5a:b3:1f:1e:48:54:93:3b:47:f4:12:d5:71:51:6f:a2:
         a0:37:ea:bd
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIURVMNWRjRlZhdr6BXIBT12edNFx8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTEwQkVFMEFDMjRENjY3OEYyOEU5NTIyQTY0RTBBMkQ5
QzY2NkExNTAeFw0yNjAyMDUwMTAzMjdaFw0yNzAyMDQwMTA4MjdaMDMxMTAvBgNV
BAMTKDJDOUQ5ODk5Qjc2ODY1Q0JDM0UwRjE1RDQ1NDY5QkY1RTMzMDk3OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXlgx+LB4kj8VnwMUNre0RoCCc
GCpsJggRdert1RiykQaBp7Tu7oxsOVNIG06699HaZ4oSU74oy9ofzYtGSh5dhz46
HVvgPVyN67W4GpdSmkXL5Sl9RZa04PlfFhOFgTHC/+qv1K3YHclxqeeBgG9TgUKy
UhnVGHskZJ51f9gtkOWous4mtrP8yngBDXFTSZVgrrE8gWkkShloU0p8YG5AO/QN
ap0v4d5v37r32XJeW2UuC1qhEFb83shHoTEJDL0PHWOEZ2tvPk85tdmKVHmrGLfU
p2mKzpZNuCYlY3/1G0GIh9XSBDnHey0PWFavyLGuLGTuOs67tbp9zkrAXnxlAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQULJ2YmbdoZcvD4PFdRUab9eMwl5YwHwYDVR0j
BBgwFoAUEQvuCsJNZnjyjpUipk4KLZxmahUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2RZNTlKanVodnE5M1N0YnZoSHk1cE1Ya2NiNmJTVjhTS3dqVGFFeGlO
cUgvMS8xMTBCRUUwQUMyNEQ2Njc4RjI4RTk1MjJBNjRFMEEyRDlDNjY2QTE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExMEJFRTBBQzI0RDY2NzhG
MjhFOTUyMkE2NEUwQTJEOUM2NjZBMTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNkWTU5Smp1aHZxOTNTdGJ2aEh5NXBNWGtjYjZiU1Y4U0t3alRhRXhpTnFILzEv
MzIzODMwMzQzYTM2MzMzODM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzkzMzM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGOIMA0GCSqGSIb3DQEBCwUAA4IBAQDmvinZ
sFuVDFEQEkLIFaDD7s0qpjCAixdJuUa0gWdahtpDaZ58vYrcCj6YsVHZvGlhP94W
xsWQs/k5k02dk4hPWypegGXZI+llvNgUK2RylniFMsuJQG2wsWg1MzQ4CGgo6ZWo
sGrhH9ooY0Yv7Ikp3RrMKHc9Izgn8bclRg5LB7M2drz/8gV3ZskQE6nif1ji/j8Q
tHtNkxLOnvNIGhInad4I4vahaEHLW8CR6A8gNW780/IByyJwtRiEOUxfWOYszbG4
6piWA+86uVS0lsbbjyy47u3p1A78ruCHjZs2Zk4hd17GvPAlpxeW+1qzHx5IVJM7
R/QS1XFRb6KgN+q9
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:36:09 2026 by rpki-client