Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/323830343a313331633a3a2f33322d3438203d3e20323633353136.roa
File:                     323830343a313331633a3a2f33322d3438203d3e20323633353136.roa (raw, json)
Hash identifier:          C5V4zGxvuCL/tqG3clxUoiDlGo969+4XRicFxMWEmg0=
Subject key identifier:   25:67:C8:15:B2:5B:52:7F:E6:E4:DB:92:0A:35:32:A8:3D:F6:9D:49
Certificate issuer:       /CN=6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1
Certificate serial:       4B5495EC22252EEF42683ABCFC91C6AD1ABDD69C
Authority key identifier: 6A:0F:81:CD:4B:DD:AA:53:C1:B0:93:1E:51:E8:B1:59:E0:2A:5C:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/323830343a313331633a3a2f33322d3438203d3e20323633353136.roa
Signing time:             Thu 05 Feb 2026 13:00:05 +0000
ROA not before:           Thu 05 Feb 2026 12:55:05 +0000
ROA not after:            Thu 04 Feb 2027 13:00:05 +0000
asID:                     263516
IP address blocks:        2804:131c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.crl
                          rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:41:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:54:95:ec:22:25:2e:ef:42:68:3a:bc:fc:91:c6:ad:1a:bd:d6:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1
        Validity
            Not Before: Feb  5 12:55:05 2026 GMT
            Not After : Feb  4 13:00:05 2027 GMT
        Subject: CN=2567C815B25B527FE6E4DB920A3532A83DF69D49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:48:b3:2c:26:4b:4d:00:74:92:5d:20:76:4c:
                    5a:97:bb:4e:c9:8b:e2:66:e0:cd:ad:d3:de:53:95:
                    09:09:7a:af:bc:67:6f:36:02:2d:3e:60:17:78:4e:
                    be:5e:06:1c:e4:ad:5e:a4:ad:f4:52:29:e9:2f:d9:
                    2f:28:16:57:49:88:73:14:7d:ec:ce:bf:27:5f:59:
                    ed:25:e6:09:93:13:f9:ef:c9:05:fc:6d:33:ea:b2:
                    c7:ac:11:9e:42:32:7a:0f:99:f1:ec:94:d6:ba:6b:
                    71:67:cc:7a:1c:76:bb:5d:c8:82:51:66:42:73:11:
                    55:21:48:2b:9e:d8:df:dd:80:d2:46:5d:a9:ee:8f:
                    bb:bf:4a:b4:3c:78:23:33:8b:58:d1:72:54:d2:87:
                    cf:bf:ca:e9:fa:30:89:9a:3a:a3:be:ef:5c:30:94:
                    91:a4:c9:74:80:d0:16:a9:b3:75:db:01:0a:36:c1:
                    f7:6e:6a:af:4c:a8:d6:77:fa:a5:0e:73:5b:5c:5a:
                    14:82:b5:e0:37:af:25:5c:8f:e7:23:bb:fe:9c:3f:
                    d7:50:39:8e:fb:e2:65:cb:f6:17:63:18:d8:1f:1c:
                    17:c3:a9:7c:08:81:97:68:57:67:73:9e:1e:7c:4e:
                    1f:03:4a:44:8b:9e:20:86:b5:fd:31:e6:53:29:d3:
                    36:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:67:C8:15:B2:5B:52:7F:E6:E4:DB:92:0A:35:32:A8:3D:F6:9D:49
            X509v3 Authority Key Identifier:
                keyid:6A:0F:81:CD:4B:DD:AA:53:C1:B0:93:1E:51:E8:B1:59:E0:2A:5C:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/323830343a313331633a3a2f33322d3438203d3e20323633353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:131c::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:26:59:4a:c2:0f:c0:06:50:eb:12:41:dd:32:bf:9b:e7:46:
         d4:79:29:83:32:d0:83:ae:d7:d2:dd:55:ce:bf:f1:50:e9:c9:
         24:41:af:68:aa:6f:cf:40:a0:a2:bc:13:c6:98:f9:c4:f1:25:
         6f:06:8d:d6:72:b0:b3:a8:43:3e:f4:d5:33:c9:2f:3a:9d:be:
         30:99:49:42:a6:07:a9:05:82:05:68:89:86:3d:c1:de:a0:60:
         0f:c5:84:ce:34:8f:5b:77:00:4d:b6:34:65:b1:e2:7b:af:cc:
         d0:21:f1:7f:b2:7d:46:76:b8:93:0b:1b:3f:7c:8d:bd:c3:0c:
         d3:d7:94:20:7b:46:7d:6b:47:c3:e6:a7:a1:80:75:b4:f3:e8:
         51:d7:7a:6e:41:a6:05:c2:31:4d:40:3a:9a:a8:e2:ee:59:89:
         ab:7c:09:9a:e9:69:bb:97:48:fe:1f:b9:49:1b:06:93:5e:2d:
         dc:3f:cd:92:47:4c:26:2c:8d:4a:87:bd:ac:a9:10:8c:d7:37:
         c9:ff:69:c9:fd:dd:04:c6:37:5e:a0:86:be:fd:dd:7e:eb:45:
         f0:88:6f:83:79:59:6f:40:ca:f1:be:78:66:27:4c:11:d3:41:
         3d:aa:66:56:fc:c6:6d:6e:23:39:b4:6f:8f:56:a3:67:30:1a:
         38:24:43:47
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUS1SV7CIlLu9CaDq8/JHGrRq91pwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkEwRjgxQ0Q0QkREQUE1M0MxQjA5MzFFNTFFOEIxNTlF
MDJBNUNEMTAeFw0yNjAyMDUxMjU1MDVaFw0yNzAyMDQxMzAwMDVaMDMxMTAvBgNV
BAMTKDI1NjdDODE1QjI1QjUyN0ZFNkU0REI5MjBBMzUzMkE4M0RGNjlENDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDESLMsJktNAHSSXSB2TFqXu07J
i+Jm4M2t095TlQkJeq+8Z282Ai0+YBd4Tr5eBhzkrV6krfRSKekv2S8oFldJiHMU
fezOvydfWe0l5gmTE/nvyQX8bTPqssesEZ5CMnoPmfHslNa6a3FnzHocdrtdyIJR
ZkJzEVUhSCue2N/dgNJGXanuj7u/SrQ8eCMzi1jRclTSh8+/yun6MImaOqO+71ww
lJGkyXSA0Baps3XbAQo2wfduaq9MqNZ3+qUOc1tcWhSCteA3ryVcj+cju/6cP9dQ
OY774mXL9hdjGNgfHBfDqXwIgZdoV2dznh58Th8DSkSLniCGtf0x5lMp0zaFAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUJWfIFbJbUn/m5NuSCjUyqD32nUkwHwYDVR0j
BBgwFoAUag+BzUvdqlPBsJMeUeixWeAqXNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM202OW5qS1BtRFZ6b3FXTkpzZTFYTW11YXFjRk04RjV4cU1HUjhCWnI0
Zm8vMS82QTBGODFDRDRCRERBQTUzQzFCMDkzMUU1MUU4QjE1OUUwMkE1Q0QxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZBMEY4MUNENEJEREFBNTND
MUIwOTMxRTUxRThCMTU5RTAyQTVDRDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNtNjluaktQbURWem9xV05Kc2UxWE1tdWFxY0ZNOEY1eHFNR1I4QlpyNGZvLzEv
MzIzODMwMzQzYTMxMzMzMTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz
MzUzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQTHDANBgkqhkiG9w0BAQsFAAOCAQEAMyZZSsIP
wAZQ6xJB3TK/m+dG1HkpgzLQg67X0t1Vzr/xUOnJJEGvaKpvz0CgorwTxpj5xPEl
bwaN1nKws6hDPvTVM8kvOp2+MJlJQqYHqQWCBWiJhj3B3qBgD8WEzjSPW3cATbY0
ZbHie6/M0CHxf7J9Rna4kwsbP3yNvcMM09eUIHtGfWtHw+anoYB1tPPoUdd6bkGm
BcIxTUA6mqji7lmJq3wJmulpu5dI/h+5SRsGk14t3D/NkkdMJiyNSoe9rKkQjNc3
yf9pyf3dBMY3XqCGvv3dfutF8Ihvg3lZb0DK8b54ZidMEdNBPapmVvzGbW4jObRv
j1ajZzAaOCRDRw==
-----END CERTIFICATE-----
Generated at Thu Feb 19 08:50:31 2026 by rpki-client