Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/323830343a363632633a3a2f33322d3438203d3e20323639353339.roa
File:                     323830343a363632633a3a2f33322d3438203d3e20323639353339.roa (raw, json)
Hash identifier:          GtKZfEjqt16A9vBmLbHBSjs6Uan+reZpkYxb9UCMEwo=
Subject key identifier:   7C:DF:F1:4F:6C:23:44:2D:3E:E8:D6:7C:E5:30:23:AE:3A:19:01:5A
Certificate issuer:       /CN=54D4593134F7F511D48D82945BAD14FF2A1EC182
Certificate serial:       78971548A875848FFA7031AC0634538C7930D35D
Authority key identifier: 54:D4:59:31:34:F7:F5:11:D4:8D:82:94:5B:AD:14:FF:2A:1E:C1:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54D4593134F7F511D48D82945BAD14FF2A1EC182.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/323830343a363632633a3a2f33322d3438203d3e20323639353339.roa
Signing time:             Mon 02 Feb 2026 22:31:47 +0000
ROA not before:           Mon 02 Feb 2026 22:26:47 +0000
ROA not after:            Mon 01 Feb 2027 22:31:47 +0000
asID:                     269539
IP address blocks:        2804:662c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/54D4593134F7F511D48D82945BAD14FF2A1EC182.crl
                          rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/54D4593134F7F511D48D82945BAD14FF2A1EC182.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54D4593134F7F511D48D82945BAD14FF2A1EC182.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:97:15:48:a8:75:84:8f:fa:70:31:ac:06:34:53:8c:79:30:d3:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54D4593134F7F511D48D82945BAD14FF2A1EC182
        Validity
            Not Before: Feb  2 22:26:47 2026 GMT
            Not After : Feb  1 22:31:47 2027 GMT
        Subject: CN=7CDFF14F6C23442D3EE8D67CE53023AE3A19015A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e3:d1:86:91:91:fd:d6:11:f6:c6:08:25:0b:
                    17:05:3c:95:06:61:eb:da:6d:48:bb:65:54:76:cf:
                    a0:9c:1d:e8:ff:a4:8a:f1:77:84:d5:cf:65:a7:37:
                    0b:40:b5:5f:48:b9:be:a7:d8:f5:3c:2a:53:1e:4b:
                    83:83:bb:bb:69:4a:3f:86:41:d0:b2:27:9a:19:f2:
                    13:15:29:19:33:9a:05:83:f0:6b:de:1a:c1:dc:08:
                    25:f7:ae:10:a8:28:27:3f:ee:f9:75:e9:46:b4:9c:
                    d2:76:82:0b:e9:e5:f3:c8:5d:f0:4e:a9:de:00:01:
                    ba:e1:7f:85:ff:c1:ce:ab:70:b8:d9:8a:08:2f:78:
                    0e:b5:8c:d1:ab:a4:8b:14:94:34:84:13:57:b5:9a:
                    8f:53:3d:bf:3e:d3:a5:08:b9:9a:6d:6f:36:7a:c5:
                    b4:6c:1a:ed:90:6f:08:52:c2:a3:3b:b5:67:48:ee:
                    02:b2:40:ad:0f:28:48:2a:4c:b7:47:fa:dc:2f:68:
                    0f:44:8b:37:29:00:1f:7f:90:73:ac:ba:31:b0:68:
                    2b:d1:fa:42:8c:de:46:16:f4:65:4e:32:2b:7d:b2:
                    a6:3a:25:24:78:52:b9:98:e6:24:82:fa:33:90:53:
                    5c:13:e5:14:57:ad:f0:4d:58:69:65:de:86:14:95:
                    24:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DF:F1:4F:6C:23:44:2D:3E:E8:D6:7C:E5:30:23:AE:3A:19:01:5A
            X509v3 Authority Key Identifier:
                keyid:54:D4:59:31:34:F7:F5:11:D4:8D:82:94:5B:AD:14:FF:2A:1E:C1:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/54D4593134F7F511D48D82945BAD14FF2A1EC182.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54D4593134F7F511D48D82945BAD14FF2A1EC182.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/323830343a363632633a3a2f33322d3438203d3e20323639353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:662c::/32

    Signature Algorithm: sha256WithRSAEncryption
         d0:89:93:dc:8c:a7:55:34:4c:b2:b3:b5:ac:78:55:13:14:08:
         0e:9e:a6:bc:f7:f5:4b:3f:8a:02:8a:7a:3d:2c:f3:5c:a9:a1:
         f8:8f:a5:2b:c0:2f:21:ba:27:96:e8:fb:c1:52:28:ff:36:7a:
         59:56:9f:9a:00:68:60:c6:67:cc:ff:c3:e6:31:0f:cf:79:19:
         61:c2:cb:e4:e4:6f:6f:a0:1a:a8:0e:d4:52:ac:ed:d3:09:dd:
         9a:08:af:b4:55:b7:07:b1:5d:0a:26:3d:78:cc:39:89:b9:1b:
         14:5c:4e:45:6f:92:fd:ea:51:8e:21:a4:07:b8:6e:28:58:5f:
         5b:f3:10:78:91:c4:ab:ab:07:17:19:6e:11:27:e8:56:80:9b:
         5c:b8:2c:85:91:0e:f7:64:f2:56:1c:c6:32:a3:ea:50:6e:ab:
         ad:a1:e3:10:de:0e:23:47:71:db:1b:d1:06:86:99:6c:bf:53:
         7c:05:72:22:49:00:01:21:de:ae:6f:8d:d1:c2:b4:1c:1c:d6:
         e4:96:5d:96:52:a8:c0:9c:ba:4f:ed:53:61:a3:d5:45:39:0c:
         c2:39:b5:c9:54:b5:b3:93:4b:c8:5f:b1:d7:5f:3b:31:18:7e:
         eb:00:5b:00:de:02:be:b1:46:e9:ec:20:9f:4d:54:9e:6a:a1:
         ae:95:0f:90
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUeJcVSKh1hI/6cDGsBjRTjHkw010wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRENDU5MzEzNEY3RjUxMUQ0OEQ4Mjk0NUJBRDE0RkYy
QTFFQzE4MjAeFw0yNjAyMDIyMjI2NDdaFw0yNzAyMDEyMjMxNDdaMDMxMTAvBgNV
BAMTKDdDREZGMTRGNkMyMzQ0MkQzRUU4RDY3Q0U1MzAyM0FFM0ExOTAxNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP49GGkZH91hH2xgglCxcFPJUG
YevabUi7ZVR2z6CcHej/pIrxd4TVz2WnNwtAtV9Iub6n2PU8KlMeS4ODu7tpSj+G
QdCyJ5oZ8hMVKRkzmgWD8GveGsHcCCX3rhCoKCc/7vl16Ua0nNJ2ggvp5fPIXfBO
qd4AAbrhf4X/wc6rcLjZiggveA61jNGrpIsUlDSEE1e1mo9TPb8+06UIuZptbzZ6
xbRsGu2QbwhSwqM7tWdI7gKyQK0PKEgqTLdH+twvaA9EizcpAB9/kHOsujGwaCvR
+kKM3kYW9GVOMit9sqY6JSR4UrmY5iSC+jOQU1wT5RRXrfBNWGll3oYUlSSbAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUfN/xT2wjRC0+6NZ85TAjrjoZAVowHwYDVR0j
BBgwFoAUVNRZMTT39RHUjYKUW60U/yoewYIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3RwUWlvN0I5N2h1OEhXSzFtcUFES05BM0toM1M1bUhudktrNjFTY1Jq
MTUvMC81NEQ0NTkzMTM0RjdGNTExRDQ4RDgyOTQ1QkFEMTRGRjJBMUVDMTgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0RDQ1OTMxMzRGN0Y1MTFE
NDhEODI5NDVCQUQxNEZGMkExRUMxODIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN0cFFpbzdCOTdodThIV0sxbXFBREtOQTNLaDNTNW1IbnZLazYxU2NSajE1LzAv
MzIzODMwMzQzYTM2MzYzMjYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM5
MzUzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARmLDANBgkqhkiG9w0BAQsFAAOCAQEA0ImT3Iyn
VTRMsrO1rHhVExQIDp6mvPf1Sz+KAop6PSzzXKmh+I+lK8AvIbonluj7wVIo/zZ6
WVafmgBoYMZnzP/D5jEPz3kZYcLL5ORvb6AaqA7UUqzt0wndmgivtFW3B7FdCiY9
eMw5ibkbFFxORW+S/epRjiGkB7huKFhfW/MQeJHEq6sHFxluESfoVoCbXLgshZEO
92TyVhzGMqPqUG6rraHjEN4OI0dx2xvRBoaZbL9TfAVyIkkAASHerm+N0cK0HBzW
5JZdllKowJy6T+1TYaPVRTkMwjm1yVS1s5NLyF+x1187MRh+6wBbAN4CvrFG6ewg
n01UnmqhrpUPkA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 01:44:27 2026 by rpki-client