Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a3a2f33322d3332203d3e20323637323138.roa
File:                     323830343a346131383a3a2f33322d3332203d3e20323637323138.roa (raw, json)
Hash identifier:          lAVpFiFLCm4LeBWpocKbJFxVhEtb6dZjJAX9Iv42pZA=
Subject key identifier:   14:CF:3F:88:36:F4:47:95:E4:F9:7A:05:F7:6D:EA:08:7D:EB:69:23
Certificate issuer:       /CN=FCE673648244EB441465D6651FC7A10BCB1109BE
Certificate serial:       7F8B0FF23A46D59E0FD99BB08B2782EC225434EF
Authority key identifier: FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a3a2f33322d3332203d3e20323637323138.roa
Signing time:             Thu 05 Feb 2026 08:48:24 +0000
ROA not before:           Thu 05 Feb 2026 08:43:24 +0000
ROA not after:            Thu 04 Feb 2027 08:48:24 +0000
asID:                     267218
IP address blocks:        2804:4a18::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.crl
                          rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 21:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:8b:0f:f2:3a:46:d5:9e:0f:d9:9b:b0:8b:27:82:ec:22:54:34:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE673648244EB441465D6651FC7A10BCB1109BE
        Validity
            Not Before: Feb  5 08:43:24 2026 GMT
            Not After : Feb  4 08:48:24 2027 GMT
        Subject: CN=14CF3F8836F44795E4F97A05F76DEA087DEB6923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0a:92:cb:d2:5e:e9:7b:d5:43:07:10:43:c2:
                    1b:98:8c:31:60:da:8a:12:89:fe:8f:68:3f:a5:b1:
                    0d:4e:50:5f:01:39:35:27:3d:95:ca:88:4f:9c:bc:
                    ca:de:86:57:e2:6b:9c:99:8d:d4:87:96:38:50:f3:
                    34:1a:b9:78:ed:3b:38:56:66:0d:35:b8:1f:39:e8:
                    8c:1d:e7:b6:a3:54:09:ff:c2:05:07:cc:e7:7e:99:
                    72:96:56:00:d9:a2:3f:ef:11:6e:25:b4:ee:45:fc:
                    33:da:51:02:06:f7:c3:fe:e9:32:74:c8:e0:e3:96:
                    75:c5:58:a1:c3:f7:9e:3d:78:f7:28:64:c7:de:75:
                    5f:f2:06:55:11:cb:2d:1d:ce:4a:ad:e9:f3:71:c6:
                    b8:0d:8e:6a:97:db:c8:48:b2:ae:59:d6:2d:28:36:
                    ec:11:a9:7e:61:15:39:1b:c9:43:66:59:4a:d2:47:
                    20:78:43:ed:93:b4:97:ae:3b:44:f5:96:20:c1:e4:
                    b0:c2:4b:6d:3f:16:16:f6:a9:54:f3:c2:9b:72:31:
                    a4:75:32:3c:5e:68:47:96:2f:2d:7a:8a:c2:5e:69:
                    bd:4a:0e:88:b0:2d:f2:4c:9f:59:67:a3:d6:0c:a2:
                    be:d2:1d:8d:da:ae:75:8a:0f:5e:15:8d:80:fd:74:
                    0e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CF:3F:88:36:F4:47:95:E4:F9:7A:05:F7:6D:EA:08:7D:EB:69:23
            X509v3 Authority Key Identifier:
                keyid:FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a3a2f33322d3332203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a18::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:17:fa:2c:b2:c7:77:81:88:53:74:f0:1f:b9:58:17:d7:6a:
         b1:47:a8:92:d0:c4:e4:3c:96:8a:af:4e:7a:a7:57:b4:7e:a5:
         3f:5f:67:7b:6b:af:e3:4b:b7:f0:f9:1a:53:20:11:74:c3:d0:
         14:b9:69:09:f3:bb:2b:47:08:1a:f6:2d:bc:64:e7:db:b6:a1:
         75:42:1c:79:d3:b8:69:43:25:1c:b5:65:0a:ec:6e:9a:76:df:
         2a:d4:9b:40:61:d2:9b:8e:be:7d:0f:81:66:96:17:34:77:cf:
         20:c2:fe:ca:1a:03:7c:95:b3:9a:96:69:bb:a3:83:a2:c3:29:
         75:58:7c:07:22:90:e7:c6:2b:be:73:e9:bd:24:69:7b:60:48:
         db:dc:df:75:37:37:69:2b:f4:9d:cc:dc:f9:9d:91:ff:bb:83:
         4b:a0:a3:de:09:5c:1a:e4:00:36:1e:81:18:0e:5f:54:d5:77:
         28:42:1c:6a:3d:a4:9d:46:f5:1d:ff:e1:ea:6f:b4:ea:e2:68:
         5e:76:cc:32:f1:c1:83:dc:43:b7:da:28:c7:38:8e:0b:e9:16:
         6c:89:8f:f6:03:16:67:bf:a0:ce:52:6d:ff:c4:ff:09:a2:7b:
         b7:ee:ca:5e:6c:4a:c9:8a:da:c6:fa:d8:d5:f2:c6:49:9f:7c:
         5a:13:99:b9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUf4sP8jpG1Z4P2ZuwiyeC7CJUNO8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNFNjczNjQ4MjQ0RUI0NDE0NjVENjY1MUZDN0ExMEJD
QjExMDlCRTAeFw0yNjAyMDUwODQzMjRaFw0yNzAyMDQwODQ4MjRaMDMxMTAvBgNV
BAMTKDE0Q0YzRjg4MzZGNDQ3OTVFNEY5N0EwNUY3NkRFQTA4N0RFQjY5MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYCpLL0l7pe9VDBxBDwhuYjDFg
2ooSif6PaD+lsQ1OUF8BOTUnPZXKiE+cvMrehlfia5yZjdSHljhQ8zQauXjtOzhW
Zg01uB856Iwd57ajVAn/wgUHzOd+mXKWVgDZoj/vEW4ltO5F/DPaUQIG98P+6TJ0
yODjlnXFWKHD9549ePcoZMfedV/yBlURyy0dzkqt6fNxxrgNjmqX28hIsq5Z1i0o
NuwRqX5hFTkbyUNmWUrSRyB4Q+2TtJeuO0T1liDB5LDCS20/Fhb2qVTzwptyMaR1
MjxeaEeWLy16isJeab1KDoiwLfJMn1lno9YMor7SHY3arnWKD14VjYD9dA4LAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUFM8/iDb0R5Xk+XoF923qCH3raSMwHwYDVR0j
BBgwFoAU/OZzZIJE60QUZdZlH8ehC8sRCb4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXk1TFIxVFFxTVBkS01GYTRncU1MdHhaelRaWTlhdlN0UURhcXpMUkxk
VjEvMS9GQ0U2NzM2NDgyNDRFQjQ0MTQ2NUQ2NjUxRkM3QTEwQkNCMTEwOUJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZDRTY3MzY0ODI0NEVCNDQx
NDY1RDY2NTFGQzdBMTBCQ0IxMTA5QkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV5NUxSMVRRcU1QZEtNRmE0Z3FNTHR4WnpUWlk5YXZTdFFEYXF6TFJMZFYxLzEv
MzIzODMwMzQzYTM0NjEzMTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzIzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARKGDANBgkqhkiG9w0BAQsFAAOCAQEAdBf6LLLH
d4GIU3TwH7lYF9dqsUeoktDE5DyWiq9OeqdXtH6lP19ne2uv40u38PkaUyARdMPQ
FLlpCfO7K0cIGvYtvGTn27ahdUIcedO4aUMlHLVlCuxumnbfKtSbQGHSm46+fQ+B
ZpYXNHfPIML+yhoDfJWzmpZpu6ODosMpdVh8ByKQ58YrvnPpvSRpe2BI29zfdTc3
aSv0nczc+Z2R/7uDS6Cj3glcGuQANh6BGA5fVNV3KEIcaj2knUb1Hf/h6m+06uJo
XnbMMvHBg9xDt9ooxziOC+kWbImP9gMWZ7+gzlJt/8T/CaJ7t+7KXmxKyYraxvrY
1fLGSZ98WhOZuQ==
-----END CERTIFICATE-----
Generated at Thu Feb 19 23:06:15 2026 by rpki-client