Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/323830343a373836383a3a2f33322d3332203d3e20323731323430.roa
File:                     323830343a373836383a3a2f33322d3332203d3e20323731323430.roa (raw, json)
Hash identifier:          v7G6gRpRXCLi4KpWM4wv23VOY3lmTS4XOleAUaAzUYA=
Subject key identifier:   54:89:3E:1A:45:1B:39:52:E2:5E:AF:22:7F:DA:B0:E1:29:01:BA:7F
Certificate issuer:       /CN=0E77DA9B11ABE0911B41F041D5EA3663E65F88EE
Certificate serial:       3CC139ED25AE29083715443ABE8D5D2E3F3D7A6C
Authority key identifier: 0E:77:DA:9B:11:AB:E0:91:1B:41:F0:41:D5:EA:36:63:E6:5F:88:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E77DA9B11ABE0911B41F041D5EA3663E65F88EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/323830343a373836383a3a2f33322d3332203d3e20323731323430.roa
Signing time:             Wed 04 Feb 2026 13:13:23 +0000
ROA not before:           Wed 04 Feb 2026 13:08:23 +0000
ROA not after:            Wed 03 Feb 2027 13:13:23 +0000
asID:                     271240
IP address blocks:        2804:7868::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/0E77DA9B11ABE0911B41F041D5EA3663E65F88EE.crl
                          rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/0E77DA9B11ABE0911B41F041D5EA3663E65F88EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E77DA9B11ABE0911B41F041D5EA3663E65F88EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:40:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c1:39:ed:25:ae:29:08:37:15:44:3a:be:8d:5d:2e:3f:3d:7a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E77DA9B11ABE0911B41F041D5EA3663E65F88EE
        Validity
            Not Before: Feb  4 13:08:23 2026 GMT
            Not After : Feb  3 13:13:23 2027 GMT
        Subject: CN=54893E1A451B3952E25EAF227FDAB0E12901BA7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:01:50:b1:4a:80:3f:80:c7:75:e1:eb:31:35:
                    46:b9:39:b8:1a:ea:64:8a:5e:2b:47:db:c1:52:ac:
                    63:d5:fc:69:05:fc:5a:fe:10:ce:71:84:a7:a2:af:
                    c3:27:e9:63:74:c5:6a:aa:34:17:48:96:14:5c:22:
                    e8:75:a4:ec:03:c6:5e:0f:eb:98:47:a6:d9:b7:f8:
                    fc:7a:95:db:d3:cb:b3:53:6a:ec:1f:34:f5:86:86:
                    f5:ee:b5:2a:dd:0a:d1:b2:24:4d:c0:74:0d:d1:71:
                    5c:78:91:fc:34:c4:37:b2:0d:21:a9:98:82:d0:02:
                    92:1a:48:81:8a:4a:b9:76:19:46:45:1b:9c:26:69:
                    d2:56:51:94:68:5e:f6:65:ca:15:12:ce:c0:08:22:
                    b5:0c:b5:fb:ae:c0:d6:92:b5:d3:1f:c1:6a:40:c7:
                    13:a2:6e:e7:56:22:18:eb:a1:84:16:5c:10:0f:aa:
                    c5:db:aa:b5:d8:4e:fd:50:1b:99:02:a2:b9:f9:9f:
                    ac:4a:42:fa:c4:6b:97:70:4d:06:af:e4:40:a0:81:
                    1f:60:fc:cb:dc:5b:c5:46:1f:73:f1:45:f3:45:f1:
                    c8:95:77:8e:d1:fb:90:f8:c3:9e:2a:af:7f:7e:57:
                    5f:6a:45:de:5f:9f:d5:d4:3d:2d:3d:ae:2a:b1:0c:
                    0e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:89:3E:1A:45:1B:39:52:E2:5E:AF:22:7F:DA:B0:E1:29:01:BA:7F
            X509v3 Authority Key Identifier:
                keyid:0E:77:DA:9B:11:AB:E0:91:1B:41:F0:41:D5:EA:36:63:E6:5F:88:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/0E77DA9B11ABE0911B41F041D5EA3663E65F88EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E77DA9B11ABE0911B41F041D5EA3663E65F88EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/323830343a373836383a3a2f33322d3332203d3e20323731323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7868::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:28:1c:10:9f:f8:93:a5:79:60:a7:f4:e4:6c:38:5b:cc:83:
         fd:c3:57:4b:6c:37:68:96:64:c6:4a:80:58:14:bb:36:93:dc:
         92:71:cd:1f:8c:3e:1a:84:3b:25:2b:33:ff:60:c3:26:f5:13:
         c0:c5:40:a8:6d:25:68:8d:12:4c:8f:e2:ce:3c:43:88:73:9f:
         7d:24:88:9d:95:42:69:17:ce:27:ae:dd:5c:96:0c:54:ea:74:
         5a:a6:ca:c4:3e:42:40:99:ab:16:64:83:ae:c1:f7:72:35:4b:
         89:14:27:f8:b0:43:d0:9e:5a:b9:0c:db:94:49:c0:9d:73:bd:
         bb:29:bf:bf:6d:a4:49:cb:e1:d9:59:38:e7:05:0a:d7:69:a6:
         ea:64:cc:39:e2:01:53:b7:c5:e6:59:47:fe:59:61:cb:e5:28:
         1c:ec:95:f4:65:4e:c3:98:58:19:ee:f3:cb:78:e6:5f:c4:a5:
         0a:ad:17:5d:38:00:d2:b3:4a:bd:0a:3f:fa:82:0f:da:74:78:
         da:be:76:1f:db:2d:51:79:7d:43:88:b2:94:93:b7:16:8a:f6:
         7b:5d:9a:7d:25:3c:18:ae:3f:1c:dc:e4:d3:39:bb:af:f6:b6:
         68:c0:56:35:46:6a:2b:39:28:51:e6:c7:6e:7d:f0:20:4d:0d:
         d7:09:fa:20
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPME57SWuKQg3FUQ6vo1dLj89emwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU3N0RBOUIxMUFCRTA5MTFCNDFGMDQxRDVFQTM2NjNF
NjVGODhFRTAeFw0yNjAyMDQxMzA4MjNaFw0yNzAyMDMxMzEzMjNaMDMxMTAvBgNV
BAMTKDU0ODkzRTFBNDUxQjM5NTJFMjVFQUYyMjdGREFCMEUxMjkwMUJBN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJAVCxSoA/gMd14esxNUa5Obga
6mSKXitH28FSrGPV/GkF/Fr+EM5xhKeir8Mn6WN0xWqqNBdIlhRcIuh1pOwDxl4P
65hHptm3+Px6ldvTy7NTauwfNPWGhvXutSrdCtGyJE3AdA3RcVx4kfw0xDeyDSGp
mILQApIaSIGKSrl2GUZFG5wmadJWUZRoXvZlyhUSzsAIIrUMtfuuwNaStdMfwWpA
xxOibudWIhjroYQWXBAPqsXbqrXYTv1QG5kCorn5n6xKQvrEa5dwTQav5ECggR9g
/MvcW8VGH3PxRfNF8ciVd47R+5D4w54qr39+V19qRd5fn9XUPS09riqxDA4bAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUVIk+GkUbOVLiXq8if9qw4SkBun8wHwYDVR0j
BBgwFoAUDnfamxGr4JEbQfBB1eo2Y+ZfiO4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGZMQ1hyaUdvSDUzcHZTWjQ4RkxQMmtlUnhocGdVb1k1Q3VaVjNEVTho
b1QvMC8wRTc3REE5QjExQUJFMDkxMUI0MUYwNDFENUVBMzY2M0U2NUY4OEVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFNzdEQTlCMTFBQkUwOTEx
QjQxRjA0MUQ1RUEzNjYzRTY1Rjg4RUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRmTENYcmlHb0g1M3B2U1o0OEZMUDJrZVJ4aHBnVW9ZNUN1WlYzRFU4aG9ULzAv
MzIzODMwMzQzYTM3MzgzNjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzIzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR4aDANBgkqhkiG9w0BAQsFAAOCAQEADigcEJ/4
k6V5YKf05Gw4W8yD/cNXS2w3aJZkxkqAWBS7NpPcknHNH4w+GoQ7JSsz/2DDJvUT
wMVAqG0laI0STI/izjxDiHOffSSInZVCaRfOJ67dXJYMVOp0WqbKxD5CQJmrFmSD
rsH3cjVLiRQn+LBD0J5auQzblEnAnXO9uym/v22kScvh2Vk45wUK12mm6mTMOeIB
U7fF5llH/llhy+UoHOyV9GVOw5hYGe7zy3jmX8SlCq0XXTgA0rNKvQo/+oIP2nR4
2r52H9stUXl9Q4iylJO3For2e12afSU8GK4/HNzk0zm7r/a2aMBWNUZqKzkoUebH
bn3wIE0N1wn6IA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 19:06:11 2026 by rpki-client