Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/323830343a6266383a3a2f33342d3334203d3e203532363533.roa
File:                     323830343a6266383a3a2f33342d3334203d3e203532363533.roa (raw, json)
Hash identifier:          8cfMJJ6SXz8PIrI7+KEJWIsW8INkPCXEwDIZsH33p1c=
Subject key identifier:   E3:54:AB:44:6E:24:D5:37:6E:63:D1:BF:44:74:7F:62:2B:C4:41:EA
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       2121C882F1E6700D9AAF6B47F4343900A8B1307F
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/323830343a6266383a3a2f33342d3334203d3e203532363533.roa
Signing time:             Thu 05 Feb 2026 00:29:08 +0000
ROA not before:           Thu 05 Feb 2026 00:24:08 +0000
ROA not after:            Thu 04 Feb 2027 00:29:08 +0000
asID:                     52653
IP address blocks:        2804:bf8::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:21:c8:82:f1:e6:70:0d:9a:af:6b:47:f4:34:39:00:a8:b1:30:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Feb  5 00:24:08 2026 GMT
            Not After : Feb  4 00:29:08 2027 GMT
        Subject: CN=E354AB446E24D5376E63D1BF44747F622BC441EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:e0:85:52:6d:d3:f1:2f:9b:90:a4:fc:1e:
                    f8:78:03:22:1a:e7:6d:27:05:a6:17:41:8f:10:af:
                    12:a2:ef:e2:23:14:88:1b:75:69:7c:af:4c:71:23:
                    73:d3:df:a2:a9:2a:7a:44:d4:24:e2:cf:55:58:8f:
                    70:01:72:8f:98:37:4e:a3:c3:d9:46:fa:bc:76:2c:
                    cb:ec:13:22:95:91:a5:ff:05:48:1f:81:c1:3b:55:
                    a0:7a:70:dc:d0:65:f3:97:d0:8c:61:1e:75:e3:e3:
                    3a:73:ed:21:90:88:33:ba:24:a6:5f:4a:aa:e4:02:
                    7c:58:7a:7c:23:d0:60:04:b7:47:8f:ba:bb:ae:7c:
                    cf:75:9e:90:33:7b:dc:77:e9:62:b7:5b:8a:a7:b3:
                    96:48:97:86:3f:7c:9a:bb:19:cd:e9:2e:18:0c:01:
                    04:d9:ba:a7:7b:bf:9f:3e:c2:31:ec:66:35:ac:06:
                    f9:af:20:2a:65:bf:03:04:94:64:23:55:13:49:aa:
                    ca:8f:df:bc:19:29:f8:32:9e:1d:5b:5a:05:80:f2:
                    a1:3f:70:8d:4e:54:7b:33:6f:f9:60:d4:b4:be:19:
                    9f:e7:a1:05:45:3c:f5:ef:e4:26:4b:c3:08:0f:68:
                    78:46:93:40:84:e6:74:4c:cb:0c:94:9c:79:22:54:
                    e9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:54:AB:44:6E:24:D5:37:6E:63:D1:BF:44:74:7F:62:2B:C4:41:EA
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/323830343a6266383a3a2f33342d3334203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:bf8::/34

    Signature Algorithm: sha256WithRSAEncryption
         06:2a:df:4c:32:b4:2a:df:e4:10:78:08:f6:d0:31:90:f5:0d:
         27:d4:81:a4:00:77:1e:ec:c3:ff:d2:b4:4a:0e:b0:1a:12:e1:
         e0:f0:4b:35:d0:37:05:20:36:00:5c:a7:82:91:61:7d:e0:7c:
         1b:b4:6f:e6:41:34:f9:6d:b7:2c:39:e1:fc:d0:90:0e:e0:8b:
         1f:55:30:05:08:3d:f7:de:5b:2f:aa:4c:6b:5d:a1:05:7c:cc:
         3f:c4:83:33:a7:84:95:43:7e:e6:c5:74:fb:a1:ec:f6:c8:17:
         c6:9e:c8:53:30:28:23:8b:a4:49:9b:c9:1f:34:7d:45:69:5a:
         c0:9e:de:97:82:b7:34:52:66:1d:7e:15:86:1c:b5:78:22:41:
         4a:79:49:8c:35:53:12:fd:ba:80:70:3e:b7:c5:b9:10:d5:a1:
         ec:4c:08:2b:47:32:a3:e0:bc:17:49:de:bf:ea:a9:a1:a2:21:
         ab:a3:ed:e9:7c:78:eb:ca:3b:1a:84:30:91:73:e6:32:b3:70:
         23:c2:8a:18:9c:19:22:90:e0:a4:42:c9:19:a7:d7:d5:99:aa:
         f7:63:bd:ef:e4:e5:34:77:69:31:82:82:4a:fc:94:16:ef:60:
         70:db:6b:1f:8c:d6:c7:c8:eb:b7:9e:02:ea:db:1e:71:d9:36:
         89:0d:7c:37
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUISHIgvHmcA2ar2tH9DQ5AKixMH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM3NDg0NDFEOUNDN0VFMkE5M0UxNjBCQUIyNzI0REFF
Qjc5OUYzQjAeFw0yNjAyMDUwMDI0MDhaFw0yNzAyMDQwMDI5MDhaMDMxMTAvBgNV
BAMTKEUzNTRBQjQ0NkUyNEQ1Mzc2RTYzRDFCRjQ0NzQ3RjYyMkJDNDQxRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/4+CFUm3T8S+bkKT8Hvh4AyIa
520nBaYXQY8QrxKi7+IjFIgbdWl8r0xxI3PT36KpKnpE1CTiz1VYj3ABco+YN06j
w9lG+rx2LMvsEyKVkaX/BUgfgcE7VaB6cNzQZfOX0IxhHnXj4zpz7SGQiDO6JKZf
SqrkAnxYenwj0GAEt0ePuruufM91npAze9x36WK3W4qns5ZIl4Y/fJq7Gc3pLhgM
AQTZuqd7v58+wjHsZjWsBvmvICplvwMElGQjVRNJqsqP37wZKfgynh1bWgWA8qE/
cI1OVHszb/lg1LS+GZ/noQVFPPXv5CZLwwgPaHhGk0CE5nRMywyUnHkiVOnvAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU41SrRG4k1TduY9G/RHR/YivEQeowHwYDVR0j
BBgwFoAUA3SEQdnMfuKpPhYLqyck2ut5nzswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRUVVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6
SjYvMS8wMzc0ODQ0MUQ5Q0M3RUUyQTkzRTE2MEJBQjI3MjREQUVCNzk5RjNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzNzQ4NDQxRDlDQzdFRTJB
OTNFMTYwQkFCMjcyNERBRUI3OTlGM0IuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzEv
MzIzODMwMzQzYTYyNjYzODNhM2EyZjMzMzQyZDMzMzQyMDNkM2UyMDM1MzIzNjM1
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgYoBAv4ADANBgkqhkiG9w0BAQsFAAOCAQEABirfTDK0Kt/k
EHgI9tAxkPUNJ9SBpAB3HuzD/9K0Sg6wGhLh4PBLNdA3BSA2AFyngpFhfeB8G7Rv
5kE0+W23LDnh/NCQDuCLH1UwBQg9995bL6pMa12hBXzMP8SDM6eElUN+5sV0+6Hs
9sgXxp7IUzAoI4ukSZvJHzR9RWlawJ7el4K3NFJmHX4Vhhy1eCJBSnlJjDVTEv26
gHA+t8W5ENWh7EwIK0cyo+C8F0nev+qpoaIhq6Pt6Xx468o7GoQwkXPmMrNwI8KK
GJwZIpDgpELJGafX1Zmq92O97+TlNHdpMYKCSvyUFu9gcNtrH4zWx8jrt54C6tse
cdk2iQ18Nw==
-----END CERTIFICATE-----
Generated at Thu Feb 19 05:56:33 2026 by rpki-client