Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/323830343a3332383a3a2f33322d3332203d3e20323632383638.roa
File:                     323830343a3332383a3a2f33322d3332203d3e20323632383638.roa (raw, json)
Hash identifier:          0eQQ9uhWWx3cHRYhnbbKz1rHaOx7HZSNnMwJA9EGTyQ=
Subject key identifier:   3D:65:F3:CF:46:94:72:01:35:C4:98:8D:04:0E:8B:D0:F0:B7:43:BF
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       326B49B555071B1A6768239E955AB574B9ADD337
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/323830343a3332383a3a2f33322d3332203d3e20323632383638.roa
Signing time:             Thu 05 Feb 2026 11:40:36 +0000
ROA not before:           Thu 05 Feb 2026 11:35:36 +0000
ROA not after:            Thu 04 Feb 2027 11:40:36 +0000
asID:                     262868
IP address blocks:        2804:328::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
                          rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:6b:49:b5:55:07:1b:1a:67:68:23:9e:95:5a:b5:74:b9:ad:d3:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Feb  5 11:35:36 2026 GMT
            Not After : Feb  4 11:40:36 2027 GMT
        Subject: CN=3D65F3CF4694720135C4988D040E8BD0F0B743BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ff:2c:9c:1b:a2:b2:39:04:10:a0:67:f6:28:
                    2a:11:35:bd:4e:04:cd:96:f1:89:0c:ac:40:c0:58:
                    06:3b:9a:0b:ed:c1:8e:17:d5:3b:8b:b8:57:fe:db:
                    74:17:66:2e:b0:64:4d:02:fe:af:ed:85:b8:69:52:
                    5d:ea:10:6d:1e:bd:23:71:a9:fa:31:f4:ec:ac:28:
                    62:70:0a:9a:e2:2f:12:3a:77:23:7f:11:d8:a4:83:
                    74:41:bf:6b:fa:b4:53:5f:69:44:c7:f0:a7:33:ca:
                    a6:7d:ee:b6:da:9a:38:a3:51:e5:7c:29:4b:4e:5f:
                    c7:1e:07:44:ed:65:dd:d9:83:86:2a:d8:22:61:95:
                    bb:26:e7:ff:1b:95:ac:a6:36:bb:ab:1e:62:90:33:
                    df:12:21:c0:43:55:46:76:f2:a1:6f:b3:66:6f:7c:
                    f1:cf:c0:fa:5a:11:24:f6:b3:40:71:ca:f1:85:02:
                    96:75:bf:19:a6:69:18:4e:a5:5e:22:31:54:14:0d:
                    04:cc:46:d4:53:65:e6:2d:7b:d1:3a:ac:56:12:66:
                    21:f8:c5:de:e4:86:ee:d4:7b:ad:5c:e5:1b:f9:53:
                    61:61:b7:eb:a6:9b:07:49:d8:67:30:a5:6e:6e:fe:
                    bf:06:75:7f:0a:de:ef:ce:44:4c:36:a6:3f:98:5c:
                    27:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:65:F3:CF:46:94:72:01:35:C4:98:8D:04:0E:8B:D0:F0:B7:43:BF
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/323830343a3332383a3a2f33322d3332203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:328::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:48:9f:bc:cf:ae:38:be:21:35:63:8c:1d:1a:cc:a9:5d:95:
         2c:ed:3e:f6:c9:79:82:11:73:47:41:18:4b:1b:cc:c1:2a:b4:
         09:76:b0:23:06:87:4e:aa:86:2d:d1:4d:09:af:b0:ff:a2:43:
         12:c4:74:c8:3a:dd:24:ce:5f:44:f8:7d:b0:a0:ee:de:98:b3:
         90:f6:a5:5c:a5:bf:68:c0:53:43:26:0e:a2:72:f7:86:48:4d:
         30:81:14:92:97:f5:f8:f6:5d:be:89:1c:7f:60:c1:bb:08:8a:
         31:3e:83:e3:66:91:87:67:27:e8:35:1b:6a:a3:35:66:5e:5b:
         bc:14:93:7c:f3:0a:02:f6:b1:2f:dd:57:33:c9:92:aa:aa:c4:
         25:db:bd:46:bb:a5:4e:b4:2c:df:0f:fe:21:5c:88:19:2d:f5:
         db:e5:1c:dd:2f:19:79:48:2f:2a:29:4b:c4:cf:57:8e:34:14:
         d7:fb:d2:ef:d6:13:10:2f:6b:2e:f0:96:5d:60:fc:31:a0:9a:
         1b:ac:46:72:07:c5:af:58:d3:0a:4e:bc:13:2c:3c:0c:05:4c:
         35:2f:7a:35:84:f9:90:28:df:03:93:7d:59:be:5a:81:20:d2:
         97:09:43:37:d7:ad:fb:98:54:e0:25:ce:ee:f6:2a:f0:ef:52:
         a1:d5:09:d1
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUMmtJtVUHGxpnaCOelVq1dLmt0zcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFFMkQ1NEQ2QzE3OTNCN0RDRDc3NDY5OTIxNkQzMTZF
OEM3NTM1MTAeFw0yNjAyMDUxMTM1MzZaFw0yNzAyMDQxMTQwMzZaMDMxMTAvBgNV
BAMTKDNENjVGM0NGNDY5NDcyMDEzNUM0OTg4RDA0MEU4QkQwRjBCNzQzQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp/yycG6KyOQQQoGf2KCoRNb1O
BM2W8YkMrEDAWAY7mgvtwY4X1TuLuFf+23QXZi6wZE0C/q/thbhpUl3qEG0evSNx
qfox9OysKGJwCpriLxI6dyN/Edikg3RBv2v6tFNfaUTH8KczyqZ97rbamjijUeV8
KUtOX8ceB0TtZd3Zg4Yq2CJhlbsm5/8blaymNrurHmKQM98SIcBDVUZ28qFvs2Zv
fPHPwPpaEST2s0BxyvGFApZ1vxmmaRhOpV4iMVQUDQTMRtRTZeYte9E6rFYSZiH4
xd7khu7Ue61c5Rv5U2Fht+ummwdJ2GcwpW5u/r8GdX8K3u/OREw2pj+YXCdFAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUPWXzz0aUcgE1xJiNBA6L0PC3Q78wHwYDVR0j
BBgwFoAUuuLVTWwXk7fc13RpkhbTFujHU1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjRUV1E4NFN3Z2k1cTg1SnQ3WGRFU0UxNlZQenZicE50dWpIVjZ5enpL
d0EvMS9CQUUyRDU0RDZDMTc5M0I3RENENzc0Njk5MjE2RDMxNkU4Qzc1MzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRTJENTRENkMxNzkzQjdE
Q0Q3NzQ2OTkyMTZEMzE2RThDNzUzNTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY0VFdRODRTd2dpNXE4NUp0N1hkRVNFMTZWUHp2YnBOdHVqSFY2eXp6S3dBLzEv
MzIzODMwMzQzYTMzMzIzODNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMjM4
MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEAygwDQYJKoZIhvcNAQELBQADggEBAHhIn7zPrji+
ITVjjB0azKldlSztPvbJeYIRc0dBGEsbzMEqtAl2sCMGh06qhi3RTQmvsP+iQxLE
dMg63STOX0T4fbCg7t6Ys5D2pVylv2jAU0MmDqJy94ZITTCBFJKX9fj2Xb6JHH9g
wbsIijE+g+NmkYdnJ+g1G2qjNWZeW7wUk3zzCgL2sS/dVzPJkqqqxCXbvUa7pU60
LN8P/iFciBkt9dvlHN0vGXlILyopS8TPV440FNf70u/WExAvay7wll1g/DGgmhus
RnIHxa9Y0wpOvBMsPAwFTDUvejWE+ZAo3wOTfVm+WoEg0pcJQzfXrfuYVOAlzu72
KvDvUqHVCdE=
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:51:49 2026 by rpki-client