Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/323830343a336266633a3a2f33322d3438203d3e203532363037.roa
File:                     323830343a336266633a3a2f33322d3438203d3e203532363037.roa (raw, json)
Hash identifier:          mkHeLcedV23b6DlJ3M3G11+2sHQar+JTcqppNpG9Wvc=
Subject key identifier:   BA:93:26:DE:67:C1:AE:41:64:B9:82:91:A4:12:EF:A9:5F:55:BB:17
Certificate issuer:       /CN=EC37D17C061BE878628F004F6A8613266553C3FB
Certificate serial:       212AAF13E1C05DC34097C93B1DAD798F83DF3FFC
Authority key identifier: EC:37:D1:7C:06:1B:E8:78:62:8F:00:4F:6A:86:13:26:65:53:C3:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC37D17C061BE878628F004F6A8613266553C3FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/323830343a336266633a3a2f33322d3438203d3e203532363037.roa
Signing time:             Fri 06 Feb 2026 19:00:01 +0000
ROA not before:           Fri 06 Feb 2026 18:55:01 +0000
ROA not after:            Sat 06 Feb 2027 19:00:01 +0000
asID:                     52607
IP address blocks:        2804:3bfc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/EC37D17C061BE878628F004F6A8613266553C3FB.crl
                          rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/EC37D17C061BE878628F004F6A8613266553C3FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC37D17C061BE878628F004F6A8613266553C3FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2a:af:13:e1:c0:5d:c3:40:97:c9:3b:1d:ad:79:8f:83:df:3f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC37D17C061BE878628F004F6A8613266553C3FB
        Validity
            Not Before: Feb  6 18:55:01 2026 GMT
            Not After : Feb  6 19:00:01 2027 GMT
        Subject: CN=3082010A0282010100CCBB67BA9A8693BB9C874A9D06547920CCCA97B60BEBADFA5227153EF9594565452A1A9EAACE882A2A1A31B866FD35C29B75F7C887DC0B29628CE69E206AC3D59E0DB90DD47480642CA569F261F5222CF2D39C3EC97808137C35783ADA7CFFFC0D60C0722A9C70FD2040DE9A2111FE007FEA1499A56587EC5306C71DFD11BEC03A95B97D54DD524F56F9DF75A2CEF6893A7F4345014A3A02C6F20F8D02EEE7C31BE487D5DC4E8A9A083900AB9AA91BE1FC2B3351ED3A4FBAF3B44DCD2AAC72A3E068E5932771C8F81704985708C56DACB50AA5C677269C57FDA7EF393921F0D83A70A5942A83F06CE8101C8CAFBAE1975C7AD3DD121AD341B1C963713BC025C70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bb:67:ba:9a:86:93:bb:9c:87:4a:9d:06:54:
                    79:20:cc:ca:97:b6:0b:eb:ad:fa:52:27:15:3e:f9:
                    59:45:65:45:2a:1a:9e:aa:ce:88:2a:2a:1a:31:b8:
                    66:fd:35:c2:9b:75:f7:c8:87:dc:0b:29:62:8c:e6:
                    9e:20:6a:c3:d5:9e:0d:b9:0d:d4:74:80:64:2c:a5:
                    69:f2:61:f5:22:2c:f2:d3:9c:3e:c9:78:08:13:7c:
                    35:78:3a:da:7c:ff:fc:0d:60:c0:72:2a:9c:70:fd:
                    20:40:de:9a:21:11:fe:00:7f:ea:14:99:a5:65:87:
                    ec:53:06:c7:1d:fd:11:be:c0:3a:95:b9:7d:54:dd:
                    52:4f:56:f9:df:75:a2:ce:f6:89:3a:7f:43:45:01:
                    4a:3a:02:c6:f2:0f:8d:02:ee:e7:c3:1b:e4:87:d5:
                    dc:4e:8a:9a:08:39:00:ab:9a:a9:1b:e1:fc:2b:33:
                    51:ed:3a:4f:ba:f3:b4:4d:cd:2a:ac:72:a3:e0:68:
                    e5:93:27:71:c8:f8:17:04:98:57:08:c5:6d:ac:b5:
                    0a:a5:c6:77:26:9c:57:fd:a7:ef:39:39:21:f0:d8:
                    3a:70:a5:94:2a:83:f0:6c:e8:10:1c:8c:af:ba:e1:
                    97:5c:7a:d3:dd:12:1a:d3:41:b1:c9:63:71:3b:c0:
                    25:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:93:26:DE:67:C1:AE:41:64:B9:82:91:A4:12:EF:A9:5F:55:BB:17
            X509v3 Authority Key Identifier:
                keyid:EC:37:D1:7C:06:1B:E8:78:62:8F:00:4F:6A:86:13:26:65:53:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/EC37D17C061BE878628F004F6A8613266553C3FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC37D17C061BE878628F004F6A8613266553C3FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/323830343a336266633a3a2f33322d3438203d3e203532363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bfc::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:f2:ac:90:cf:fc:64:26:e5:08:31:60:8d:ee:2d:6d:3e:0b:
         4c:96:79:c8:11:a0:75:be:cf:9d:8f:fa:69:22:3e:30:51:22:
         72:87:ca:11:1b:41:41:cb:91:69:81:ce:cd:36:20:d0:cd:97:
         21:ca:13:c8:d4:e9:3f:fa:9b:0a:bd:91:b1:4a:18:0f:89:07:
         db:46:46:da:44:1a:5f:0a:ef:b5:e0:e5:de:20:4a:b9:7e:34:
         5e:9a:ef:98:b6:2b:b7:8a:0c:fe:40:43:39:75:46:cd:c3:d2:
         16:b0:bf:27:0e:7c:f2:c7:dc:1a:1b:37:be:1c:8b:bc:2c:73:
         a1:fc:7f:d0:12:72:b4:9b:25:2d:73:36:8d:12:aa:8d:b8:8f:
         6f:6e:22:22:f8:51:f7:c4:6d:dc:bd:b3:b0:5e:ab:5c:a4:e2:
         ef:e7:d4:91:42:4e:0f:1d:da:24:21:95:ad:f8:85:5d:9c:50:
         39:07:f8:4d:c3:43:2d:68:1c:9d:fc:66:ce:03:a4:d7:b2:35:
         69:df:e9:1b:5d:1c:65:5f:46:6f:49:8a:86:b9:4f:8a:4b:6e:
         71:4c:7e:45:f7:b1:97:11:b5:42:5e:90:3b:8f:b0:8c:05:3f:
         1d:6b:26:85:4b:d6:1b:bb:c4:52:af:ac:9f:e3:78:c4:01:dc:
         72:23:55:58
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIUISqvE+HAXcNAl8k7Ha15j4PfP/wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMzN0QxN0MwNjFCRTg3ODYyOEYwMDRGNkE4NjEzMjY2
NTUzQzNGQjAeFw0yNjAyMDYxODU1MDFaFw0yNzAyMDYxOTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0NCQjY3QkE5QTg2OTNCQjlD
ODc0QTlEMDY1NDc5MjBDQ0NBOTdCNjBCRUJBREZBNTIyNzE1M0VGOTU5NDU2NTQ1
MkExQTlFQUFDRTg4MkEyQTFBMzFCODY2RkQzNUMyOUI3NUY3Qzg4N0RDMEIyOTYy
OENFNjlFMjA2QUMzRDU5RTBEQjkwREQ0NzQ4MDY0MkNBNTY5RjI2MUY1MjIyQ0Yy
RDM5QzNFQzk3ODA4MTM3QzM1NzgzQURBN0NGRkZDMEQ2MEMwNzIyQTlDNzBGRDIw
NDBERTlBMjExMUZFMDA3RkVBMTQ5OUE1NjU4N0VDNTMwNkM3MURGRDExQkVDMDNB
OTVCOTdENTRERDUyNEY1NkY5REY3NUEyQ0VGNjg5M0E3RjQzNDUwMTRBM0EwMkM2
RjIwRjhEMDJFRUU3QzMxQkU0ODdENURDNEU4QTlBMDgzOTAwQUI5QUE5MUJFMUZD
MkIzMzUxRUQzQTRGQkFGM0I0NERDRDJBQUM3MkEzRTA2OEU1OTMyNzcxQzhGODE3
MDQ5ODU3MDhDNTZEQUNCNTBBQTVDNjc3MjY5QzU3RkRBN0VGMzkzOTIxRjBEODNB
NzBBNTk0MkE4M0YwNkNFODEwMUM4Q0FGQkFFMTk3NUM3QUQzREQxMjFBRDM0MUIx
Qzk2MzcxM0JDMDI1QzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzLtnupqGk7uch0qdBlR5IMzKl7YL6636UicVPvlZRWVFKhqeqs6I
KioaMbhm/TXCm3X3yIfcCylijOaeIGrD1Z4NuQ3UdIBkLKVp8mH1Iizy05w+yXgI
E3w1eDrafP/8DWDAciqccP0gQN6aIRH+AH/qFJmlZYfsUwbHHf0RvsA6lbl9VN1S
T1b533WizvaJOn9DRQFKOgLG8g+NAu7nwxvkh9XcToqaCDkAq5qpG+H8KzNR7TpP
uvO0Tc0qrHKj4GjlkydxyPgXBJhXCMVtrLUKpcZ3JpxX/afvOTkh8Ng6cKWUKoPw
bOgQHIyvuuGXXHrT3RIa00GxyWNxO8AlxwIDAQABo4ICTjCCAkowHQYDVR0OBBYE
FLqTJt5nwa5BZLmCkaQS76lfVbsXMB8GA1UdIwQYMBaAFOw30XwGG+h4Yo8AT2qG
EyZlU8P7MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRUU21adktSaDdDNWk3
UWE1Sm11Y1NvY2Q1MzNaOXVIbWNjVXBEc2JSVnc2LzEvRUMzN0QxN0MwNjFCRTg3
ODYyOEYwMDRGNkE4NjEzMjY2NTUzQzNGQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FQzM3RDE3QzA2MUJFODc4NjI4RjAwNEY2QTg2MTMyNjY1NTND
M0ZCLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80VFNtWnZLUmg3QzVpN1FhNUpt
dWNTb2NkNTMzWjl1SG1jY1VwRHNiUlZ3Ni8xLzMyMzgzMDM0M2EzMzYyNjY2MzNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNjMwMzcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBDv8
MA0GCSqGSIb3DQEBCwUAA4IBAQDG8qyQz/xkJuUIMWCN7i1tPgtMlnnIEaB1vs+d
j/ppIj4wUSJyh8oRG0FBy5Fpgc7NNiDQzZchyhPI1Ok/+psKvZGxShgPiQfbRkba
RBpfCu+14OXeIEq5fjRemu+Ytiu3igz+QEM5dUbNw9IWsL8nDnzyx9waGze+HIu8
LHOh/H/QEnK0myUtczaNEqqNuI9vbiIi+FH3xG3cvbOwXqtcpOLv59SRQk4PHdok
IZWt+IVdnFA5B/hNw0MtaByd/GbOA6TXsjVp3+kbXRxlX0ZvSYqGuU+KS25xTH5F
97GXEbVCXpA7j7CMBT8dayaFS9Ybu8RSr6yf43jEAdxyI1VY
-----END CERTIFICATE-----
Generated at Thu Feb 19 10:16:10 2026 by rpki-client