Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a613534343a3a2f34382d3438203d3e20323636363233.roa
File:                     323830343a336564343a613534343a3a2f34382d3438203d3e20323636363233.roa (raw, json)
Hash identifier:          8E4FIEwwGFb1tYSL1cUmoIMj5CgRC6BOojv+8qnxggQ=
Subject key identifier:   3B:A2:68:D8:BA:08:98:D8:55:F1:6C:B2:52:3D:3C:01:C2:39:D0:91
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       7648E306D11ACB94D15180A79761B31453D48A87
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a613534343a3a2f34382d3438203d3e20323636363233.roa
Signing time:             Wed 04 Feb 2026 20:00:16 +0000
ROA not before:           Wed 04 Feb 2026 19:55:16 +0000
ROA not after:            Wed 03 Feb 2027 20:00:16 +0000
asID:                     266623
IP address blocks:        2804:3ed4:a544::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:48:e3:06:d1:1a:cb:94:d1:51:80:a7:97:61:b3:14:53:d4:8a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Feb  4 19:55:16 2026 GMT
            Not After : Feb  3 20:00:16 2027 GMT
        Subject: CN=3BA268D8BA0898D855F16CB2523D3C01C239D091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ce:9d:12:70:10:3b:eb:0b:ff:49:99:b7:3b:
                    42:df:83:cc:4f:31:94:bd:4a:f5:b0:2c:82:f7:69:
                    97:18:9d:c6:86:8d:91:fa:71:6f:25:b1:44:4d:73:
                    10:28:fa:38:1c:0f:c5:0e:d1:15:a0:eb:5b:35:b0:
                    45:97:83:39:5a:70:0f:eb:ff:9c:69:c0:b5:f2:ef:
                    d2:93:9d:a2:4b:84:09:7e:13:28:54:f3:e6:b2:c8:
                    f1:5a:59:e8:fb:94:54:c8:e6:52:f4:30:a7:5c:d9:
                    7c:d0:cd:a0:6e:bb:29:a4:18:70:c4:be:e3:59:f8:
                    ce:87:a0:4f:49:34:1d:d7:49:c0:20:c9:f2:8a:c4:
                    3d:8e:41:e3:d2:d3:70:9a:80:ae:07:38:ea:84:86:
                    8c:31:56:a5:cb:3f:d1:2f:fb:b3:46:56:dd:c5:cc:
                    29:c8:45:82:45:92:9f:35:3c:ba:af:af:f1:e3:c2:
                    82:95:ad:27:1d:58:a9:a8:3e:5e:ab:8e:e1:4c:a1:
                    5c:9b:46:12:09:a8:03:a6:45:61:4b:9d:45:2a:0e:
                    1a:7c:2f:d1:92:4b:d9:1a:71:35:2c:96:6d:14:bf:
                    35:f8:3a:d1:5a:54:a2:46:99:20:1f:b3:47:d8:53:
                    9e:ff:fc:99:f2:0f:44:49:ea:5d:eb:4a:68:4a:2a:
                    ef:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A2:68:D8:BA:08:98:D8:55:F1:6C:B2:52:3D:3C:01:C2:39:D0:91
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a613534343a3a2f34382d3438203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:a544::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:35:48:fa:85:1f:8d:22:c2:bd:ae:f5:fd:ff:34:48:c1:a6:
         12:13:2d:06:d3:85:72:3d:e3:4a:de:07:dc:1d:5c:e4:22:c5:
         92:05:ab:a8:75:0b:56:96:87:01:1b:c3:b8:2f:d6:a3:9a:6c:
         b1:10:e4:67:82:ea:1f:8a:c1:7f:15:c7:cf:8a:19:2b:15:ee:
         94:13:fa:c5:fa:0f:e1:71:b0:f2:e9:69:6f:b2:26:71:94:72:
         a2:ec:3b:66:f2:3e:17:e4:73:b4:18:3a:8b:e1:72:17:31:8d:
         54:13:5c:e3:5f:0a:41:62:f7:6c:a8:a4:7b:29:99:d0:8f:6f:
         57:6d:23:92:a4:1f:4d:2e:ba:42:c8:89:e8:d0:87:6a:76:4f:
         29:df:03:c1:73:48:b4:f5:e0:9e:cd:d5:25:c2:92:64:6a:cc:
         3d:c6:b3:cb:f8:a3:67:af:9e:0f:de:eb:e6:56:e9:dd:65:3f:
         84:f6:b0:65:8e:6b:97:35:76:0a:e5:e9:c3:92:12:ca:d8:1a:
         f1:04:13:d7:a3:9c:12:47:63:5f:f6:de:c1:ee:c4:c6:bf:15:
         e3:9e:d2:f4:cc:e2:01:3d:20:d6:f5:51:a8:be:7e:7a:fc:9d:
         cf:7e:ef:5a:af:60:67:6f:69:17:03:60:df:24:44:92:b4:05:
         61:c5:81:e1
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUdkjjBtEay5TRUYCnl2GzFFPUiocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEzNzY2RUQ3MDNBNEE5RTlDQTQzN0YzRTdGREIyREI1
RThDOEE3ODAeFw0yNjAyMDQxOTU1MTZaFw0yNzAyMDMyMDAwMTZaMDMxMTAvBgNV
BAMTKDNCQTI2OEQ4QkEwODk4RDg1NUYxNkNCMjUyM0QzQzAxQzIzOUQwOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyzp0ScBA76wv/SZm3O0Lfg8xP
MZS9SvWwLIL3aZcYncaGjZH6cW8lsURNcxAo+jgcD8UO0RWg61s1sEWXgzlacA/r
/5xpwLXy79KTnaJLhAl+EyhU8+ayyPFaWej7lFTI5lL0MKdc2XzQzaBuuymkGHDE
vuNZ+M6HoE9JNB3XScAgyfKKxD2OQePS03CagK4HOOqEhowxVqXLP9Ev+7NGVt3F
zCnIRYJFkp81PLqvr/HjwoKVrScdWKmoPl6rjuFMoVybRhIJqAOmRWFLnUUqDhp8
L9GSS9kacTUslm0UvzX4OtFaVKJGmSAfs0fYU57//JnyD0RJ6l3rSmhKKu+dAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUO6Jo2LoImNhV8WyyUj08AcI50JEwHwYDVR0j
BBgwFoAUQTdm7XA6Sp6cpDfz5/2y216MingwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnk3OWlvcm5VWE1yTUw3VG1EcDJGdnJ6a0VuVlBDUkRmaHN2OUY1ZzN3
bUcvMS80MTM3NjZFRDcwM0E0QTlFOUNBNDM3RjNFN0ZEQjJEQjVFOEM4QTc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxMzc2NkVENzAzQTRBOUU5
Q0E0MzdGM0U3RkRCMkRCNUU4QzhBNzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ5Nzlpb3JuVVhNck1MN1RtRHAyRnZyemtFblZQQ1JEZmhzdjlGNWczd21HLzEv
MzIzODMwMzQzYTMzNjU2NDM0M2E2MTM1MzQzNDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNjM2MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEPtSlRDANBgkqhkiG9w0BAQsF
AAOCAQEAbTVI+oUfjSLCva71/f80SMGmEhMtBtOFcj3jSt4H3B1c5CLFkgWrqHUL
VpaHARvDuC/Wo5pssRDkZ4LqH4rBfxXHz4oZKxXulBP6xfoP4XGw8ulpb7ImcZRy
ouw7ZvI+F+RztBg6i+FyFzGNVBNc418KQWL3bKikeymZ0I9vV20jkqQfTS66QsiJ
6NCHanZPKd8DwXNItPXgns3VJcKSZGrMPcazy/ijZ6+eD97r5lbp3WU/hPawZY5r
lzV2CuXpw5ISytga8QQT16OcEkdjX/bewe7Exr8V457S9MziAT0g1vVRqL5+evyd
z37vWq9gZ29pFwNg3yREkrQFYcWB4Q==
-----END CERTIFICATE-----
Generated at Thu Feb 19 17:27:27 2026 by rpki-client