Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/1/323830343a383564343a3a2f33322d3334203d3e20323732363033.roa
File:                     323830343a383564343a3a2f33322d3334203d3e20323732363033.roa (raw, json)
Hash identifier:          MBDCt87err5A/n7TZ65Mk3UzinozG2L7HaxD50CotnQ=
Subject key identifier:   F9:14:00:9E:E5:8A:87:03:A7:C7:47:CA:6D:7A:9F:AC:59:B6:8F:40
Certificate issuer:       /CN=8CF184085C59663815BE0942AC2DFBBCDC0A86AE
Certificate serial:       1675FA98883A5F3D0F1EE6BDDB0424D11B0B0961
Authority key identifier: 8C:F1:84:08:5C:59:66:38:15:BE:09:42:AC:2D:FB:BC:DC:0A:86:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/1/323830343a383564343a3a2f33322d3334203d3e20323732363033.roa
Signing time:             Wed 04 Feb 2026 20:00:11 +0000
ROA not before:           Wed 04 Feb 2026 19:55:11 +0000
ROA not after:            Wed 03 Feb 2027 20:00:11 +0000
asID:                     272603
IP address blocks:        2804:85d4::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.crl
                          rsync://rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:75:fa:98:88:3a:5f:3d:0f:1e:e6:bd:db:04:24:d1:1b:0b:09:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CF184085C59663815BE0942AC2DFBBCDC0A86AE
        Validity
            Not Before: Feb  4 19:55:11 2026 GMT
            Not After : Feb  3 20:00:11 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:86:46:36:c2:30:60:cb:c8:38:12:f6:ef:70:
                    85:ab:ec:6f:6b:f5:d9:11:63:e0:4d:61:a5:ef:3f:
                    18:d4:cc:53:45:6d:75:e8:ab:f0:d4:6c:4c:c3:ba:
                    ac:2f:ac:94:86:87:01:02:20:fe:0a:95:e5:1c:3b:
                    6b:2b:b6:c2:db:76:d1:d1:64:90:d0:67:ea:e7:dd:
                    26:67:5b:a9:00:08:75:96:15:1b:77:3b:93:63:28:
                    14:b9:dd:82:88:55:a7:4e:56:35:70:1c:3e:da:03:
                    ba:bd:a7:3f:ad:f8:bf:08:4a:1d:7d:59:32:e3:fc:
                    b5:7a:12:ba:1d:e2:e9:9b:5c:9f:b2:20:eb:70:71:
                    f0:47:83:45:23:91:4b:cc:15:59:5a:51:68:6c:ac:
                    1e:e1:3e:ad:3d:8b:69:74:b3:da:96:a8:17:8b:cf:
                    e1:33:6a:37:4e:2c:4b:1a:29:8a:d2:2d:6d:21:54:
                    c4:30:73:5e:32:31:62:04:10:26:fb:95:74:cf:92:
                    d0:14:a5:0a:96:cb:4f:9b:eb:2f:05:7f:26:ce:58:
                    c8:83:c4:ba:28:9e:04:20:1a:06:b3:de:bc:99:78:
                    9e:25:16:07:3d:c4:55:44:44:03:c6:d6:e4:45:3c:
                    0b:ea:56:da:ef:ce:01:24:b8:d5:19:19:be:f4:fb:
                    42:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:14:00:9E:E5:8A:87:03:A7:C7:47:CA:6D:7A:9F:AC:59:B6:8F:40
            X509v3 Authority Key Identifier:
                keyid:8C:F1:84:08:5C:59:66:38:15:BE:09:42:AC:2D:FB:BC:DC:0A:86:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/1/323830343a383564343a3a2f33322d3334203d3e20323732363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:85d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:94:4a:b3:4c:a5:98:cf:e3:0a:b5:a4:56:04:07:c3:ed:73:
         3e:f2:ba:7c:31:36:d7:43:5f:76:f3:a1:98:80:6f:02:18:42:
         e1:d0:c5:0d:67:bc:ad:01:50:ac:00:b3:ea:aa:82:af:a8:30:
         4b:29:03:52:c0:5b:c3:bc:d6:9d:73:d7:07:0f:97:11:eb:6f:
         f2:85:fa:c1:a2:66:0d:4b:9c:c8:19:fa:a8:50:bc:d6:e8:e4:
         99:55:83:97:9a:10:8b:0f:39:d4:92:d7:0c:fc:cf:dc:1c:58:
         15:c8:41:67:66:f2:c2:8c:4d:ef:3a:58:a4:73:e2:5d:2f:05:
         bf:3f:54:ce:50:8d:b1:a6:28:07:82:bc:f1:8a:b8:9a:bd:eb:
         b4:8d:e8:d4:a0:1c:68:81:6d:b1:d2:6f:96:3d:2b:a2:91:8f:
         2a:ae:07:30:1d:e4:33:f8:5c:b3:88:fb:f3:56:71:ad:3e:c7:
         82:f6:1e:f2:61:b7:03:0c:e0:3b:0c:11:c2:9c:57:d7:4e:5c:
         f0:f6:17:4e:d9:8e:c6:35:5a:1c:f3:8b:22:d7:c5:98:6a:78:
         19:a6:dd:42:39:f8:6b:3a:9b:93:c9:64:4f:cd:85:3c:9f:12:
         f0:a7:af:e6:6a:c6:6a:42:60:94:cc:cf:40:90:b7:89:dd:b5:
         03:8a:2a:6a
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUFnX6mIg6Xz0PHua92wQk0RsLCWEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENGMTg0MDg1QzU5NjYzODE1QkUwOTQyQUMyREZCQkNE
QzBBODZBRTAeFw0yNjAyMDQxOTU1MTFaFw0yNzAyMDMyMDAwMTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkI4NjQ2MzZDMjMwNjBDQkM4
MzgxMkY2RUY3MDg1QUJFQzZGNkJGNUQ5MTE2M0UwNEQ2MUE1RUYzRjE4RDRDQzUz
NDU2RDc1RThBQkYwRDQ2QzRDQzNCQUFDMkZBQzk0ODY4NzAxMDIyMEZFMEE5NUU1
MUMzQjZCMkJCNkMyREI3NkQxRDE2NDkwRDA2N0VBRTdERDI2Njc1QkE5MDAwODc1
OTYxNTFCNzczQjkzNjMyODE0QjlERDgyODg1NUE3NEU1NjM1NzAxQzNFREEwM0JB
QkRBNzNGQURGOEJGMDg0QTFEN0Q1OTMyRTNGQ0I1N0ExMkJBMURFMkU5OUI1QzlG
QjIyMEVCNzA3MUYwNDc4MzQ1MjM5MTRCQ0MxNTU5NUE1MTY4NkNBQzFFRTEzRUFE
M0Q4QjY5NzRCM0RBOTZBODE3OEJDRkUxMzM2QTM3NEUyQzRCMUEyOThBRDIyRDZE
MjE1NEM0MzA3MzVFMzIzMTYyMDQxMDI2RkI5NTc0Q0Y5MkQwMTRBNTBBOTZDQjRG
OUJFQjJGMDU3RjI2Q0U1OEM4ODNDNEJBMjg5RTA0MjAxQTA2QjNERUJDOTk3ODlF
MjUxNjA3M0RDNDU1NDQ0NDAzQzZENkU0NDUzQzBCRUE1NkRBRUZDRTAxMjRCOEQ1
MTkxOUJFRjRGQjQyOTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAu4ZGNsIwYMvIOBL273CFq+xva/XZEWPgTWGl7z8Y1MxTRW116Kvw
1GxMw7qsL6yUhocBAiD+CpXlHDtrK7bC23bR0WSQ0Gfq590mZ1upAAh1lhUbdzuT
YygUud2CiFWnTlY1cBw+2gO6vac/rfi/CEodfVky4/y1ehK6HeLpm1yfsiDrcHHw
R4NFI5FLzBVZWlFobKwe4T6tPYtpdLPalqgXi8/hM2o3TixLGimK0i1tIVTEMHNe
MjFiBBAm+5V0z5LQFKUKlstPm+svBX8mzljIg8S6KJ4EIBoGs968mXieJRYHPcRV
REQDxtbkRTwL6lba784BJLjVGRm+9PtCmQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FPkUAJ7liocDp8dHym16n6xZto9AMB8GA1UdIwQYMBaAFIzxhAhcWWY4Fb4JQqwt
+7zcCoauMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdlNTRoQnY4Sng5WHFR
d1V4YnNNRHNmRkMxbWQxV0dYV2NCY1M4TVFqVHo5LzEvOENGMTg0MDg1QzU5NjYz
ODE1QkUwOTQyQUMyREZCQkNEQzBBODZBRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS84Q0YxODQwODVDNTk2NjM4MTVCRTA5NDJBQzJERkJCQ0RDMEE4
NkFFLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83ZTU0aEJ2OEp4OVhxUXdVeGJz
TURzZkZDMW1kMVdHWFdjQmNTOE1RalR6OS8xLzMyMzgzMDM0M2EzODM1NjQzNDNh
M2EyZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzczMjM2MzAzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
hdQwDQYJKoZIhvcNAQELBQADggEBACmUSrNMpZjP4wq1pFYEB8Ptcz7yunwxNtdD
X3bzoZiAbwIYQuHQxQ1nvK0BUKwAs+qqgq+oMEspA1LAW8O81p1z1wcPlxHrb/KF
+sGiZg1LnMgZ+qhQvNbo5JlVg5eaEIsPOdSS1wz8z9wcWBXIQWdm8sKMTe86WKRz
4l0vBb8/VM5QjbGmKAeCvPGKuJq967SN6NSgHGiBbbHSb5Y9K6KRjyquBzAd5DP4
XLOI+/NWca0+x4L2HvJhtwMM4DsMEcKcV9dOXPD2F07ZjsY1WhzziyLXxZhqeBmm
3UI5+Gs6m5PJZE/NhTyfEvCnr+ZqxmpCYJTMz0CQt4ndtQOKKmo=
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:53:48 2026 by rpki-client