Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/323830343a3332383a383030303a3a2f33332d3333203d3e20323632383638.roa
File:                     323830343a3332383a383030303a3a2f33332d3333203d3e20323632383638.roa (raw, json)
Hash identifier:          oAsZ978eEK9P8rlT9Si+lctfwlx8WurAiM/FrgG4eE4=
Subject key identifier:   3E:C9:58:98:05:EC:68:37:0E:E5:3A:70:03:CD:87:0B:C6:76:C5:52
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       395A59697AD3AEF8F238A55EF10B6EC92E25345D
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/323830343a3332383a383030303a3a2f33332d3333203d3e20323632383638.roa
Signing time:             Thu 05 Feb 2026 11:40:34 +0000
ROA not before:           Thu 05 Feb 2026 11:35:34 +0000
ROA not after:            Thu 04 Feb 2027 11:40:34 +0000
asID:                     262868
IP address blocks:        2804:328:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
                          rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:5a:59:69:7a:d3:ae:f8:f2:38:a5:5e:f1:0b:6e:c9:2e:25:34:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Feb  5 11:35:34 2026 GMT
            Not After : Feb  4 11:40:34 2027 GMT
        Subject: CN=3EC9589805EC68370EE53A7003CD870BC676C552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1b:5b:31:24:ee:37:f7:fd:85:aa:30:aa:d4:
                    9f:62:08:9c:32:46:d7:fd:c8:fa:9e:e3:68:79:04:
                    4c:a5:31:cb:7c:44:cc:9e:e0:8c:0d:db:b6:44:74:
                    01:06:cb:f6:d2:f6:75:43:01:04:7a:ef:7d:85:b0:
                    59:16:6e:5d:a0:95:63:ba:71:21:0c:c6:16:af:e4:
                    54:20:c0:9a:b6:02:de:04:90:23:2a:bb:85:b2:97:
                    a2:ac:eb:9e:20:e6:64:d0:20:f9:77:a9:85:3c:52:
                    d3:02:6c:9b:21:0c:66:6d:26:93:45:82:d2:50:4f:
                    23:98:ac:76:e8:2a:85:c1:8c:4d:11:bd:11:a2:34:
                    ac:59:4a:7c:09:f9:7b:b5:c9:60:28:ed:9d:72:9a:
                    0a:09:82:c9:30:72:f7:88:90:2e:10:a9:bc:f1:61:
                    ad:22:ae:12:53:23:b8:cd:cc:35:a4:17:59:f7:55:
                    25:ca:f0:6b:9f:5a:08:9f:6c:9f:61:29:c6:ab:19:
                    55:f2:82:cc:ad:e6:1e:3b:e9:07:24:39:8e:58:58:
                    eb:1c:36:e0:40:a6:f1:61:a1:99:fe:7c:3c:e0:c0:
                    31:0f:78:50:b7:f0:38:27:83:5b:5b:85:25:b3:73:
                    1e:e8:d4:b0:f0:44:27:5c:e8:16:c0:2d:59:85:8a:
                    62:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C9:58:98:05:EC:68:37:0E:E5:3A:70:03:CD:87:0B:C6:76:C5:52
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/323830343a3332383a383030303a3a2f33332d3333203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:328:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8b:a5:a5:13:8c:c4:33:a0:9d:1d:2a:84:fc:e7:34:7c:a4:9a:
         69:d2:90:88:84:5b:5d:57:c4:45:c0:3e:d8:e4:a9:20:30:28:
         ff:1e:1d:3f:1d:e0:f1:de:79:82:3d:27:d3:33:0a:22:47:d2:
         b2:bf:88:ef:f9:f9:66:fa:a2:05:4b:60:b8:f7:3e:55:8e:a4:
         0a:f4:d7:ec:9e:5a:ea:d3:93:4c:10:69:c9:4e:d6:5f:1d:6a:
         49:6c:86:17:5c:23:1a:ec:c3:62:42:56:9e:1c:9d:ca:3b:9e:
         39:91:91:33:fc:b5:36:07:5e:9b:08:94:e1:79:e4:bc:a4:85:
         95:68:84:52:75:bf:97:96:16:98:a0:be:50:4a:9d:c9:24:f7:
         c7:f2:58:e4:dd:ab:fc:46:5e:5f:69:05:e6:8c:7c:8d:f7:12:
         36:5d:0e:b0:d7:f7:93:14:19:8d:85:2c:c2:6f:b3:b9:48:3f:
         82:e4:8c:4f:f3:eb:c8:2e:18:62:17:32:2a:48:2d:0f:19:8b:
         3c:b1:c5:dc:9e:8d:65:d8:51:51:a6:7d:7f:bb:d5:d0:c7:ef:
         4e:d2:0e:2c:d9:55:9b:d4:8a:29:f9:9d:f6:45:a6:bf:48:75:
         95:3c:68:ce:77:cd:10:13:f0:f4:53:34:54:35:af:e7:b7:b6:
         3e:9e:80:f6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOVpZaXrTrvjyOKVe8QtuyS4lNF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFFMkQ1NEQ2QzE3OTNCN0RDRDc3NDY5OTIxNkQzMTZF
OEM3NTM1MTAeFw0yNjAyMDUxMTM1MzRaFw0yNzAyMDQxMTQwMzRaMDMxMTAvBgNV
BAMTKDNFQzk1ODk4MDVFQzY4MzcwRUU1M0E3MDAzQ0Q4NzBCQzY3NkM1NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFG1sxJO439/2FqjCq1J9iCJwy
Rtf9yPqe42h5BEylMct8RMye4IwN27ZEdAEGy/bS9nVDAQR6732FsFkWbl2glWO6
cSEMxhav5FQgwJq2At4EkCMqu4Wyl6Ks654g5mTQIPl3qYU8UtMCbJshDGZtJpNF
gtJQTyOYrHboKoXBjE0RvRGiNKxZSnwJ+Xu1yWAo7Z1ymgoJgskwcveIkC4Qqbzx
Ya0irhJTI7jNzDWkF1n3VSXK8GufWgifbJ9hKcarGVXygsyt5h476QckOY5YWOsc
NuBApvFhoZn+fDzgwDEPeFC38Dgng1tbhSWzcx7o1LDwRCdc6BbALVmFimLLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUPslYmAXsaDcO5TpwA82HC8Z2xVIwHwYDVR0j
BBgwFoAUuuLVTWwXk7fc13RpkhbTFujHU1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjRUV1E4NFN3Z2k1cTg1SnQ3WGRFU0UxNlZQenZicE50dWpIVjZ5enpL
d0EvMS9CQUUyRDU0RDZDMTc5M0I3RENENzc0Njk5MjE2RDMxNkU4Qzc1MzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRTJENTRENkMxNzkzQjdE
Q0Q3NzQ2OTkyMTZEMzE2RThDNzUzNTEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY0VFdRODRTd2dpNXE4NUp0N1hkRVNFMTZWUHp2YnBOdHVqSFY2eXp6S3dBLzEv
MzIzODMwMzQzYTMzMzIzODNhMzgzMDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNl
MjAzMjM2MzIzODM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgcoBAMogDANBgkqhkiG9w0BAQsFAAOC
AQEAi6WlE4zEM6CdHSqE/Oc0fKSaadKQiIRbXVfERcA+2OSpIDAo/x4dPx3g8d55
gj0n0zMKIkfSsr+I7/n5ZvqiBUtguPc+VY6kCvTX7J5a6tOTTBBpyU7WXx1qSWyG
F1wjGuzDYkJWnhydyjueOZGRM/y1NgdemwiU4XnkvKSFlWiEUnW/l5YWmKC+UEqd
yST3x/JY5N2r/EZeX2kF5ox8jfcSNl0OsNf3kxQZjYUswm+zuUg/guSMT/PryC4Y
YhcyKkgtDxmLPLHF3J6NZdhRUaZ9f7vV0MfvTtIOLNlVm9SKKfmd9kWmv0h1lTxo
znfNEBPw9FM0VDWv57e2Pp6A9g==
-----END CERTIFICATE-----
Generated at Thu Feb 19 23:05:59 2026 by rpki-client