Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/1/323830343a343761633a3a2f33322d3438203d3e20323637303730.roa
File:                     323830343a343761633a3a2f33322d3438203d3e20323637303730.roa (raw, json)
Hash identifier:          yCAe9kuoDYuSpleFcT1LLM+eScU+jqmJRnTccTKP33A=
Subject key identifier:   34:47:A8:99:73:72:59:77:2F:E2:98:27:83:12:5A:79:6F:24:3F:3A
Certificate issuer:       /CN=C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E
Certificate serial:       1D3E5E2EF245120C4AE395097B43682CCC90E6A7
Authority key identifier: C9:DB:61:F5:2B:F7:A3:A7:8D:0E:8F:EC:C1:CC:92:2B:47:7A:F4:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/1/323830343a343761633a3a2f33322d3438203d3e20323637303730.roa
Signing time:             Wed 04 Feb 2026 21:25:34 +0000
ROA not before:           Wed 04 Feb 2026 21:20:34 +0000
ROA not after:            Wed 03 Feb 2027 21:25:34 +0000
asID:                     267070
IP address blocks:        2804:47ac::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/1/C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E.crl
                          rsync://rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/1/C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3e:5e:2e:f2:45:12:0c:4a:e3:95:09:7b:43:68:2c:cc:90:e6:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E
        Validity
            Not Before: Feb  4 21:20:34 2026 GMT
            Not After : Feb  3 21:25:34 2027 GMT
        Subject: CN=3447A899737259772FE2982783125A796F243F3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:90:3b:30:3d:7d:d4:2b:ad:d1:bd:8c:53:dc:
                    c9:9c:0c:a3:1f:2b:c8:b5:dd:62:4d:89:d0:e3:dd:
                    88:a1:dc:21:d8:58:cf:c5:b3:0f:99:f7:75:79:8f:
                    36:a7:73:3c:5d:b9:9a:ec:60:b2:66:70:cd:ea:48:
                    15:bd:86:19:d0:9e:dc:85:07:d6:d3:49:b0:4c:34:
                    00:9c:30:fa:83:3c:1c:0b:ae:32:fa:4a:2d:07:fd:
                    d7:59:35:f3:32:43:09:3b:47:7e:dc:38:df:04:cc:
                    ba:b5:20:22:e7:c9:11:e4:98:6e:33:8d:f9:a2:c5:
                    f4:d0:c8:da:a7:4f:ce:68:aa:cd:63:97:7e:1d:76:
                    f5:c5:74:c2:9b:2b:70:05:c4:17:4a:6f:b9:ab:5e:
                    9b:3b:39:0d:d2:78:25:ee:36:6e:fe:82:67:80:b1:
                    93:9e:f1:83:39:66:95:95:12:a9:06:ce:95:60:b0:
                    49:de:2f:20:b1:1f:e2:d9:44:27:fd:a3:38:d6:0e:
                    12:75:c0:cc:1d:15:2b:cf:ce:4c:35:9c:77:9e:8c:
                    8a:db:4c:5c:33:8e:e5:9a:d0:7d:b9:28:22:e6:21:
                    70:fe:6b:f4:36:fd:ca:37:ae:7e:ff:53:37:d5:5b:
                    30:69:fd:00:82:2f:47:2b:9c:4e:ed:a0:b8:d3:59:
                    98:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:47:A8:99:73:72:59:77:2F:E2:98:27:83:12:5A:79:6F:24:3F:3A
            X509v3 Authority Key Identifier:
                keyid:C9:DB:61:F5:2B:F7:A3:A7:8D:0E:8F:EC:C1:CC:92:2B:47:7A:F4:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/1/C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/1/323830343a343761633a3a2f33322d3438203d3e20323637303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:d3:a8:fd:c5:41:c8:3e:20:57:fb:c1:1e:e9:b4:7d:de:e7:
         54:3a:5e:c2:1e:1a:48:0f:40:27:fb:f6:92:38:14:01:2e:ae:
         e5:fd:02:ac:3d:59:c2:37:9a:32:f8:5e:ea:a7:21:15:62:ad:
         46:48:96:f2:9b:bc:af:57:7d:14:f1:d8:57:ee:a1:74:e0:0e:
         89:21:90:67:e9:6e:60:6f:81:6f:5b:c7:67:d2:d3:80:9f:07:
         7d:f4:32:67:0c:70:e4:5c:1a:3f:43:fe:5b:a3:1b:98:6e:55:
         f0:29:a9:ef:a3:00:f9:fe:ce:7b:fe:a0:79:9d:52:31:29:10:
         db:3c:43:04:35:93:39:ab:f1:e2:25:87:72:06:10:8c:e7:6d:
         ef:04:d7:e9:03:d2:9a:76:e7:e3:34:5c:a0:14:d2:aa:b6:b8:
         f0:95:89:c0:45:3d:ab:1d:76:a2:2e:14:f5:f2:87:a4:39:e8:
         34:97:03:18:0f:43:c6:26:3f:48:84:16:87:78:79:4b:41:72:
         a9:3f:e8:5d:86:c8:a5:a9:fb:3d:04:d3:cf:ac:10:33:59:cd:
         84:10:71:12:b3:1d:e8:54:da:c4:33:48:d3:b8:05:78:78:4e:
         03:9f:1c:33:0b:98:c9:43:14:be:e5:fe:22:63:46:af:4b:34:
         ee:11:1c:28
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHT5eLvJFEgxK45UJe0NoLMyQ5qcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlEQjYxRjUyQkY3QTNBNzhEMEU4RkVDQzFDQzkyMkI0
NzdBRjQzRTAeFw0yNjAyMDQyMTIwMzRaFw0yNzAyMDMyMTI1MzRaMDMxMTAvBgNV
BAMTKDM0NDdBODk5NzM3MjU5NzcyRkUyOTgyNzgzMTI1QTc5NkYyNDNGM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKkDswPX3UK63RvYxT3MmcDKMf
K8i13WJNidDj3Yih3CHYWM/Fsw+Z93V5jzanczxduZrsYLJmcM3qSBW9hhnQntyF
B9bTSbBMNACcMPqDPBwLrjL6Si0H/ddZNfMyQwk7R37cON8EzLq1ICLnyRHkmG4z
jfmixfTQyNqnT85oqs1jl34ddvXFdMKbK3AFxBdKb7mrXps7OQ3SeCXuNm7+gmeA
sZOe8YM5ZpWVEqkGzpVgsEneLyCxH+LZRCf9ozjWDhJ1wMwdFSvPzkw1nHeejIrb
TFwzjuWa0H25KCLmIXD+a/Q2/co3rn7/UzfVWzBp/QCCL0crnE7toLjTWZjvAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUNEeomXNyWXcv4pgngxJaeW8kPzowHwYDVR0j
BBgwFoAUydth9Sv3o6eNDo/swcySK0d69D4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTFZcFRUVFpwQ1lZQ3JDdGpMVnBLNXZzWFRBYXpERHNOeGliR1NkUnhC
Z0svMS9DOURCNjFGNTJCRjdBM0E3OEQwRThGRUNDMUNDOTIyQjQ3N0FGNDNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5REI2MUY1MkJGN0EzQTc4
RDBFOEZFQ0MxQ0M5MjJCNDc3QUY0M0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUxWXBUVFRacENZWUNyQ3RqTFZwSzV2c1hUQWF6RERzTnhpYkdTZFJ4QmdLLzEv
MzIzODMwMzQzYTM0Mzc2MTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzAzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARHrDANBgkqhkiG9w0BAQsFAAOCAQEAHdOo/cVB
yD4gV/vBHum0fd7nVDpewh4aSA9AJ/v2kjgUAS6u5f0CrD1ZwjeaMvhe6qchFWKt
RkiW8pu8r1d9FPHYV+6hdOAOiSGQZ+luYG+Bb1vHZ9LTgJ8HffQyZwxw5FwaP0P+
W6MbmG5V8Cmp76MA+f7Oe/6geZ1SMSkQ2zxDBDWTOavx4iWHcgYQjOdt7wTX6QPS
mnbn4zRcoBTSqra48JWJwEU9qx12oi4U9fKHpDnoNJcDGA9DxiY/SIQWh3h5S0Fy
qT/oXYbIpan7PQTTz6wQM1nNhBBxErMd6FTaxDNI07gFeHhOA58cMwuYyUMUvuX+
ImNGr0s07hEcKA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 06:13:42 2026 by rpki-client