Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/323830343a326633633a3a2f33332d3333203d3e20323634383739.roa
File:                     323830343a326633633a3a2f33332d3333203d3e20323634383739.roa (raw, json)
Hash identifier:          3KRhz9dvge6EoLoYJtiWOECaLwQoDjOSFARryRrLkpQ=
Subject key identifier:   52:8B:DE:F8:2C:36:0F:37:E0:DE:BA:CD:FA:A3:2A:41:61:AE:69:AD
Certificate issuer:       /CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
Certificate serial:       2A67E5835FD190E01EB9C151BAE80CD00ED216D7
Authority key identifier: D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/323830343a326633633a3a2f33332d3333203d3e20323634383739.roa
Signing time:             Thu 05 Feb 2026 12:47:45 +0000
ROA not before:           Thu 05 Feb 2026 12:42:45 +0000
ROA not after:            Thu 04 Feb 2027 12:47:45 +0000
asID:                     264879
IP address blocks:        2804:2f3c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl
                          rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:67:e5:83:5f:d1:90:e0:1e:b9:c1:51:ba:e8:0c:d0:0e:d2:16:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
        Validity
            Not Before: Feb  5 12:42:45 2026 GMT
            Not After : Feb  4 12:47:45 2027 GMT
        Subject: CN=528BDEF82C360F37E0DEBACDFAA32A4161AE69AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3b:c9:b3:6c:73:85:22:7e:36:4c:37:3d:dd:
                    96:fc:a3:f4:d1:13:74:17:f7:5a:7d:0c:64:c6:6e:
                    f0:bf:8f:cc:ae:58:8b:c5:2d:7a:0f:d7:52:b1:9f:
                    18:6c:bb:33:8d:09:a9:9c:34:c7:b2:c1:48:1f:de:
                    36:3e:80:af:6d:64:f4:d4:57:24:2e:de:e7:2f:83:
                    a0:1e:0c:c9:a8:91:36:3e:08:8c:ea:c3:bd:9d:b9:
                    81:ad:67:fc:b6:bf:fe:21:8f:ca:70:48:92:91:f1:
                    d6:64:9a:60:fa:91:e7:03:a2:25:ad:8c:03:6a:29:
                    0f:c8:ef:e5:28:e5:8c:e7:2a:33:64:b8:9d:4c:9f:
                    cd:92:8f:03:47:07:2d:2f:5a:3e:e0:cc:d5:34:1b:
                    68:84:5a:40:84:83:89:ba:3e:5b:c7:f2:b9:6e:a7:
                    72:28:b3:6e:54:19:d7:7b:87:15:6f:85:e5:8f:ad:
                    19:d7:cc:85:69:1e:97:d7:21:23:93:ec:3f:e5:21:
                    c5:05:6f:8a:6b:68:60:a2:2f:16:23:ea:02:8b:69:
                    10:d2:07:bb:a7:f9:bc:e0:f2:e2:ce:f7:aa:67:db:
                    aa:09:11:39:8a:7d:8e:cc:ea:9b:c6:e2:ea:4e:83:
                    65:97:4c:01:00:d9:a9:b8:b9:41:b6:9c:5f:e3:eb:
                    30:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8B:DE:F8:2C:36:0F:37:E0:DE:BA:CD:FA:A3:2A:41:61:AE:69:AD
            X509v3 Authority Key Identifier:
                keyid:D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/323830343a326633633a3a2f33332d3333203d3e20323634383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f3c::/33

    Signature Algorithm: sha256WithRSAEncryption
         b9:b7:fb:55:5f:5e:b4:48:8f:44:68:8a:1a:b4:af:32:3f:0a:
         8e:42:ee:4e:41:27:5a:9f:77:65:92:c9:93:73:00:64:99:14:
         bd:bb:3b:a1:2b:c3:e3:05:b7:d4:9f:c4:1e:ba:ba:4a:c6:3f:
         3f:cc:39:b8:7c:25:d6:86:82:0f:92:54:86:5d:05:3e:79:46:
         43:dc:33:e0:c2:82:2c:ad:64:08:86:bc:16:fa:4e:55:b2:c8:
         17:6d:1e:05:d4:41:c9:3f:46:40:02:b4:eb:ce:21:0c:2f:1b:
         b2:71:46:3d:d6:e6:6f:cf:a9:cb:03:58:41:ac:53:83:60:99:
         86:ed:32:b3:39:2f:9d:ae:67:47:ab:e8:39:df:b9:5d:81:d3:
         bf:bd:88:db:4b:c0:96:6e:48:54:4c:24:7c:ae:38:21:41:ca:
         f4:79:6e:2f:98:7d:0b:10:34:91:32:5c:9b:8c:19:b9:8a:f9:
         60:65:ee:23:ff:17:9d:00:fd:6e:ff:5f:c1:67:36:90:4f:4c:
         b5:00:d2:42:0b:10:eb:3d:bc:37:b5:40:76:c3:dc:c9:ca:86:
         5f:6e:9d:8d:41:42:a8:77:47:f2:33:18:35:e7:2a:d3:97:30:
         da:31:9f:7c:a2:f0:4f:66:eb:ba:e5:43:78:04:21:f5:23:dc:
         ac:38:70:fd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKmflg1/RkOAeucFRuugM0A7SFtcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDkzMjI4RTA4OEZDNjNFNDk5RERDRjZFMjAzNTU4QkRG
QkEzM0ZDNDAeFw0yNjAyMDUxMjQyNDVaFw0yNzAyMDQxMjQ3NDVaMDMxMTAvBgNV
BAMTKDUyOEJERUY4MkMzNjBGMzdFMERFQkFDREZBQTMyQTQxNjFBRTY5QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+O8mzbHOFIn42TDc93Zb8o/TR
E3QX91p9DGTGbvC/j8yuWIvFLXoP11KxnxhsuzONCamcNMeywUgf3jY+gK9tZPTU
VyQu3ucvg6AeDMmokTY+CIzqw72duYGtZ/y2v/4hj8pwSJKR8dZkmmD6kecDoiWt
jANqKQ/I7+Uo5YznKjNkuJ1Mn82SjwNHBy0vWj7gzNU0G2iEWkCEg4m6PlvH8rlu
p3Ios25UGdd7hxVvheWPrRnXzIVpHpfXISOT7D/lIcUFb4praGCiLxYj6gKLaRDS
B7un+bzg8uLO96pn26oJETmKfY7M6pvG4upOg2WXTAEA2am4uUG2nF/j6zDdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUove+Cw2Dzfg3rrN+qMqQWGuaa0wHwYDVR0j
BBgwFoAU2TIo4Ij8Y+SZ3c9uIDVYvfujP8QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRrd0VYbUtQamhzM2UzWjk3WHMyOTRudXk2QzRkUGViNjRRdWlIVllE
MTkvMS9EOTMyMjhFMDg4RkM2M0U0OTlERENGNkUyMDM1NThCREZCQTMzRkM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5MzIyOEUwODhGQzYzRTQ5
OUREQ0Y2RTIwMzU1OEJERkJBMzNGQzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0a3dFWG1LUGpoczNlM1o5N1hzMjk0bnV5NkM0ZFBlYjY0UXVpSFZZRDE5LzEv
MzIzODMwMzQzYTMyNjYzMzYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM0
MzgzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQvPAAwDQYJKoZIhvcNAQELBQADggEBALm3+1Vf
XrRIj0Roihq0rzI/Co5C7k5BJ1qfd2WSyZNzAGSZFL27O6Erw+MFt9SfxB66ukrG
Pz/MObh8JdaGgg+SVIZdBT55RkPcM+DCgiytZAiGvBb6TlWyyBdtHgXUQck/RkAC
tOvOIQwvG7JxRj3W5m/PqcsDWEGsU4NgmYbtMrM5L52uZ0er6DnfuV2B07+9iNtL
wJZuSFRMJHyuOCFByvR5bi+YfQsQNJEyXJuMGbmK+WBl7iP/F50A/W7/X8FnNpBP
TLUA0kILEOs9vDe1QHbD3MnKhl9unY1BQqh3R/IzGDXnKtOXMNoxn3yi8E9m67rl
Q3gEIfUj3Kw4cP0=
-----END CERTIFICATE-----
Generated at Thu Feb 19 11:38:03 2026 by rpki-client