Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/323830343a316333303a3a2f33322d3438203d3e203238323835.roa
File:                     323830343a316333303a3a2f33322d3438203d3e203238323835.roa (raw, json)
Hash identifier:          pHvNu7ZNXFg4hB6LeTXEhzQ/OWSY0GhGYAikc4dlNBY=
Subject key identifier:   77:C1:41:14:9D:1A:7D:6D:B5:4F:E8:EF:39:92:15:61:9E:08:65:55
Certificate issuer:       /CN=18304E37E7B30DCE85765ECFC90E798EBF358498
Certificate serial:       43BDAF259CCEBE109CBF74B5B2992D9230E1093E
Authority key identifier: 18:30:4E:37:E7:B3:0D:CE:85:76:5E:CF:C9:0E:79:8E:BF:35:84:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18304E37E7B30DCE85765ECFC90E798EBF358498.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/323830343a316333303a3a2f33322d3438203d3e203238323835.roa
Signing time:             Thu 05 Feb 2026 18:16:50 +0000
ROA not before:           Thu 05 Feb 2026 18:11:50 +0000
ROA not after:            Thu 04 Feb 2027 18:16:50 +0000
asID:                     28285
IP address blocks:        2804:1c30::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/18304E37E7B30DCE85765ECFC90E798EBF358498.crl
                          rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/18304E37E7B30DCE85765ECFC90E798EBF358498.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18304E37E7B30DCE85765ECFC90E798EBF358498.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:bd:af:25:9c:ce:be:10:9c:bf:74:b5:b2:99:2d:92:30:e1:09:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18304E37E7B30DCE85765ECFC90E798EBF358498
        Validity
            Not Before: Feb  5 18:11:50 2026 GMT
            Not After : Feb  4 18:16:50 2027 GMT
        Subject: CN=77C141149D1A7D6DB54FE8EF399215619E086555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:af:0e:28:dc:a2:9f:26:70:69:1e:53:d1:6b:
                    34:e6:1f:cc:b5:d6:d5:57:36:29:7a:03:76:e9:20:
                    ea:30:81:5d:7b:1c:dd:5d:75:e4:b7:4c:8d:eb:54:
                    e6:83:38:ba:1f:4c:86:9c:2b:c3:8c:af:18:6e:b1:
                    fe:19:00:75:f9:e3:81:2a:a6:2a:de:49:b9:ff:59:
                    ba:c5:f2:3b:9d:83:66:ea:8d:7b:00:de:b0:b8:41:
                    e3:26:1a:6c:8a:3d:49:9b:1f:1a:02:33:82:55:ac:
                    76:fa:41:ad:4a:c8:44:f5:1c:1a:77:b3:6b:f3:ed:
                    4b:3a:be:2b:38:29:dc:66:d1:3e:32:9f:ef:22:c1:
                    2d:51:a1:7f:0a:d1:32:b3:4b:0b:4e:d7:8b:d0:21:
                    6e:c5:4b:62:3e:14:86:ed:71:a4:b5:2b:82:12:44:
                    cb:68:1e:66:db:de:8b:06:6c:55:2b:29:25:27:62:
                    f4:06:47:c3:f4:a7:1c:19:7d:e5:43:6d:48:b9:4b:
                    bc:5f:7b:25:28:29:54:de:84:c5:d0:bf:89:dd:53:
                    c3:2c:5f:0c:14:51:11:dd:d5:04:89:00:57:3e:b9:
                    b9:99:49:e4:fa:fc:5b:b1:25:91:3a:14:a2:77:4f:
                    b3:c1:5a:20:28:d3:4e:a3:bd:7e:f1:0c:d4:ff:40:
                    be:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C1:41:14:9D:1A:7D:6D:B5:4F:E8:EF:39:92:15:61:9E:08:65:55
            X509v3 Authority Key Identifier:
                keyid:18:30:4E:37:E7:B3:0D:CE:85:76:5E:CF:C9:0E:79:8E:BF:35:84:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/18304E37E7B30DCE85765ECFC90E798EBF358498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18304E37E7B30DCE85765ECFC90E798EBF358498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/323830343a316333303a3a2f33322d3438203d3e203238323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c30::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:0c:70:0e:79:8b:79:0c:06:9e:6d:be:61:b3:d0:60:07:bf:
         a4:e7:52:08:6a:3a:69:a8:85:ba:c3:19:5b:a6:dc:b0:29:b5:
         a0:ee:ae:05:cc:e7:7b:ee:a3:89:68:78:6a:d7:1c:19:7c:96:
         fd:e6:8d:06:0f:94:ca:94:9d:b9:ec:a2:f6:08:0e:45:ff:91:
         34:72:92:e3:9d:ac:71:51:3b:17:24:1b:ef:73:fd:21:8c:f7:
         c5:1c:c0:80:2f:56:72:6a:ca:b9:44:bd:5d:bd:8e:93:74:53:
         69:8d:9a:7f:b0:8f:fa:1b:7a:e5:9e:be:0a:eb:3d:71:01:ef:
         95:ea:fa:a9:69:55:19:29:7f:38:f3:10:4b:ee:d8:d0:5e:cb:
         e9:5e:9d:ad:6d:b2:29:69:a2:01:7d:ab:51:3b:f3:ce:6c:55:
         64:dc:c0:f8:cc:7d:a3:b8:0b:ab:50:4d:9b:5c:d2:c1:fd:dd:
         77:71:d6:36:fd:ff:a7:f1:03:ea:e0:a1:ac:02:06:42:82:93:
         16:9f:69:7d:b2:52:56:94:1b:14:a1:4d:88:07:eb:e7:c6:53:
         c9:33:00:86:ae:0f:38:76:5b:04:a5:b7:63:8d:ec:b0:b5:4d:
         ee:fc:08:cc:ec:93:a0:aa:03:15:e4:dd:ed:65:16:2e:6f:03:
         86:00:8e:2d
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUQ72vJZzOvhCcv3S1spktkjDhCT4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTgzMDRFMzdFN0IzMERDRTg1NzY1RUNGQzkwRTc5OEVC
RjM1ODQ5ODAeFw0yNjAyMDUxODExNTBaFw0yNzAyMDQxODE2NTBaMDMxMTAvBgNV
BAMTKDc3QzE0MTE0OUQxQTdENkRCNTRGRThFRjM5OTIxNTYxOUUwODY1NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBrw4o3KKfJnBpHlPRazTmH8y1
1tVXNil6A3bpIOowgV17HN1ddeS3TI3rVOaDOLofTIacK8OMrxhusf4ZAHX544Eq
pireSbn/WbrF8judg2bqjXsA3rC4QeMmGmyKPUmbHxoCM4JVrHb6Qa1KyET1HBp3
s2vz7Us6vis4Kdxm0T4yn+8iwS1RoX8K0TKzSwtO14vQIW7FS2I+FIbtcaS1K4IS
RMtoHmbb3osGbFUrKSUnYvQGR8P0pxwZfeVDbUi5S7xfeyUoKVTehMXQv4ndU8Ms
XwwUURHd1QSJAFc+ubmZSeT6/FuxJZE6FKJ3T7PBWiAo006jvX7xDNT/QL4TAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUd8FBFJ0afW21T+jvOZIVYZ4IZVUwHwYDVR0j
BBgwFoAUGDBON+ezDc6Fdl7PyQ55jr81hJgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN050c2J1TlZMQzM0VnNKaWhTbXZaNlFTcFlKMnhGMVJpQ3pBZHpXUXR2
cjYvMC8xODMwNEUzN0U3QjMwRENFODU3NjVFQ0ZDOTBFNzk4RUJGMzU4NDk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE4MzA0RTM3RTdCMzBEQ0U4
NTc2NUVDRkM5MEU3OThFQkYzNTg0OTguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdOdHNidU5WTEMzNFZzSmloU212WjZRU3BZSjJ4RjFSaUN6QWR6V1F0dnI2LzAv
MzIzODMwMzQzYTMxNjMzMzMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzODMy
MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEHDAwDQYJKoZIhvcNAQELBQADggEBAE8McA55i3kM
Bp5tvmGz0GAHv6TnUghqOmmohbrDGVum3LAptaDurgXM53vuo4loeGrXHBl8lv3m
jQYPlMqUnbnsovYIDkX/kTRykuOdrHFROxckG+9z/SGM98UcwIAvVnJqyrlEvV29
jpN0U2mNmn+wj/obeuWevgrrPXEB75Xq+qlpVRkpfzjzEEvu2NBey+lena1tsilp
ogF9q1E7885sVWTcwPjMfaO4C6tQTZtc0sH93Xdx1jb9/6fxA+rgoawCBkKCkxaf
aX2yUlaUGxShTYgH6+fGU8kzAIauDzh2WwSlt2ON7LC1Te78CMzsk6CqAxXk3e1l
Fi5vA4YAji0=
-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:20 2026 by rpki-client