Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/323830343a356236633a3a2f33322d3332203d3e20323638383432.roa
File:                     323830343a356236633a3a2f33322d3332203d3e20323638383432.roa (raw, json)
Hash identifier:          qzcr37C3ciNpiDOxlxHwraAliVuGQc6LHXHW5th87nY=
Subject key identifier:   D3:22:E1:80:91:0E:FA:F2:9C:8C:ED:F6:38:39:54:EB:44:A6:99:CB
Certificate issuer:       /CN=56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D
Certificate serial:       35692E87CD411F3C8E81E5774C4EBC50A58F1B0B
Authority key identifier: 56:EC:3C:FD:56:D8:A2:A7:E9:EA:72:5F:1A:F5:D8:4C:59:CC:56:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/323830343a356236633a3a2f33322d3332203d3e20323638383432.roa
Signing time:             Thu 05 Feb 2026 01:46:12 +0000
ROA not before:           Thu 05 Feb 2026 01:41:12 +0000
ROA not after:            Thu 04 Feb 2027 01:46:12 +0000
asID:                     268842
IP address blocks:        2804:5b6c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.crl
                          rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:11:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:69:2e:87:cd:41:1f:3c:8e:81:e5:77:4c:4e:bc:50:a5:8f:1b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D
        Validity
            Not Before: Feb  5 01:41:12 2026 GMT
            Not After : Feb  4 01:46:12 2027 GMT
        Subject: CN=D322E180910EFAF29C8CEDF6383954EB44A699CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f5:97:39:50:4b:47:10:f7:62:69:48:fb:ea:
                    f3:b4:8c:4a:0f:19:60:32:f4:fa:1b:4a:86:11:78:
                    81:5f:6a:aa:5d:69:91:63:b4:cd:48:81:7b:71:75:
                    c7:bd:a9:41:d8:30:b5:cb:e2:9f:cc:66:2e:66:2d:
                    b0:bb:de:61:1a:a1:11:5b:64:bc:ab:b0:db:4d:6b:
                    8a:f3:af:e8:8b:b1:49:44:89:26:a5:43:3f:5f:c8:
                    e3:db:a8:dc:00:50:d7:87:59:0a:80:61:8d:ca:48:
                    8b:26:89:92:25:19:ed:13:1c:52:40:89:cf:9c:d1:
                    e6:df:89:da:ec:54:8e:34:05:46:17:4a:22:6c:b2:
                    8a:97:e9:5c:14:2d:3e:7c:05:53:9c:41:03:cd:12:
                    19:9e:17:33:ac:24:d2:27:0f:1c:3d:e3:37:35:ad:
                    5d:90:09:81:fe:07:82:f3:5c:b3:4f:94:3a:c7:68:
                    dd:27:39:6b:f0:9d:70:e1:ff:63:92:d2:e3:b8:62:
                    83:1a:4b:88:20:44:87:90:6e:7b:74:4c:a3:8b:63:
                    9e:b6:fe:b6:14:f0:99:ac:ea:9f:92:1d:32:f7:2c:
                    0a:41:ca:de:6b:b7:52:b3:86:cb:71:7e:23:4d:c1:
                    db:07:fd:c8:45:9b:c1:3d:11:27:72:33:23:18:82:
                    8b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:22:E1:80:91:0E:FA:F2:9C:8C:ED:F6:38:39:54:EB:44:A6:99:CB
            X509v3 Authority Key Identifier:
                keyid:56:EC:3C:FD:56:D8:A2:A7:E9:EA:72:5F:1A:F5:D8:4C:59:CC:56:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/323830343a356236633a3a2f33322d3332203d3e20323638383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:dd:53:8c:a1:30:cf:2c:0b:5d:54:30:ee:28:e3:b3:ca:d0:
         23:39:f0:8a:c0:11:a9:26:42:9b:79:d1:f4:11:30:3b:fa:79:
         b2:71:ef:1c:d1:d3:1a:d2:f4:6a:84:81:ec:d3:ae:2a:ad:52:
         e4:7a:78:b0:93:49:4a:e0:8f:5a:8d:5b:86:b0:7b:08:3e:df:
         12:b6:a7:d6:6b:f9:0e:47:52:e4:ee:3e:34:e6:36:48:91:13:
         3e:b4:fb:4c:0a:a5:d1:10:a9:de:1f:95:1e:ff:84:cb:87:db:
         37:78:8c:a7:f4:29:aa:68:4c:f3:6a:69:4e:67:ff:ba:3e:12:
         3f:fa:7c:4f:a9:57:fc:c7:c2:e9:ce:90:c6:05:ad:47:05:56:
         48:e1:53:4f:10:21:0a:23:2b:ad:84:cf:1c:14:42:97:09:9a:
         b6:b0:d4:17:bb:e7:68:2e:ee:60:11:47:03:63:a8:b1:ba:cd:
         eb:2c:c6:b3:a0:66:b8:fe:a9:60:53:ea:b3:54:44:36:09:fe:
         aa:46:a8:ec:c7:1d:8e:1f:0a:a7:fe:53:52:96:d5:a3:0a:65:
         ff:71:81:fb:15:01:ac:30:01:85:cc:4a:9f:40:9b:32:a8:d8:
         3f:15:1b:7d:26:64:c3:1c:a6:21:48:06:7d:b9:41:2f:a3:00:
         9b:1b:35:b0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUNWkuh81BHzyOgeV3TE68UKWPGwswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTZFQzNDRkQ1NkQ4QTJBN0U5RUE3MjVGMUFGNUQ4NEM1
OUNDNTYxRDAeFw0yNjAyMDUwMTQxMTJaFw0yNzAyMDQwMTQ2MTJaMDMxMTAvBgNV
BAMTKEQzMjJFMTgwOTEwRUZBRjI5QzhDRURGNjM4Mzk1NEVCNDRBNjk5Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9Zc5UEtHEPdiaUj76vO0jEoP
GWAy9PobSoYReIFfaqpdaZFjtM1IgXtxdce9qUHYMLXL4p/MZi5mLbC73mEaoRFb
ZLyrsNtNa4rzr+iLsUlEiSalQz9fyOPbqNwAUNeHWQqAYY3KSIsmiZIlGe0THFJA
ic+c0ebfidrsVI40BUYXSiJssoqX6VwULT58BVOcQQPNEhmeFzOsJNInDxw94zc1
rV2QCYH+B4LzXLNPlDrHaN0nOWvwnXDh/2OS0uO4YoMaS4ggRIeQbnt0TKOLY562
/rYU8Jms6p+SHTL3LApByt5rt1KzhstxfiNNwdsH/chFm8E9ESdyMyMYgotPAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU0yLhgJEO+vKcjO32ODlU60SmmcswHwYDVR0j
BBgwFoAUVuw8/VbYoqfp6nJfGvXYTFnMVh0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjNlVGhOTDhRS0YzU2F4cGhuUDNvalJMaERBQmZaaG9vaTJIUUgyMXg4
SHEvMS81NkVDM0NGRDU2RDhBMkE3RTlFQTcyNUYxQUY1RDg0QzU5Q0M1NjFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU2RUMzQ0ZENTZEOEEyQTdF
OUVBNzI1RjFBRjVEODRDNTlDQzU2MUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzYzZVRoTkw4UUtGM1NheHBoblAzb2pSTGhEQUJmWmhvb2kySFFIMjF4OEhxLzEv
MzIzODMwMzQzYTM1NjIzNjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzgzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARbbDANBgkqhkiG9w0BAQsFAAOCAQEApd1TjKEw
zywLXVQw7ijjs8rQIznwisARqSZCm3nR9BEwO/p5snHvHNHTGtL0aoSB7NOuKq1S
5Hp4sJNJSuCPWo1bhrB7CD7fEran1mv5DkdS5O4+NOY2SJETPrT7TAql0RCp3h+V
Hv+Ey4fbN3iMp/QpqmhM82ppTmf/uj4SP/p8T6lX/MfC6c6QxgWtRwVWSOFTTxAh
CiMrrYTPHBRClwmatrDUF7vnaC7uYBFHA2OosbrN6yzGs6BmuP6pYFPqs1RENgn+
qkao7Mcdjh8Kp/5TUpbVowpl/3GB+xUBrDABhcxKn0CbMqjYPxUbfSZkwxymIUgG
fblBL6MAmxs1sA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 10:22:33 2026 by rpki-client