Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/323830343a323737343a3a2f33322d3438203d3e20323633393032.roa
File:                     323830343a323737343a3a2f33322d3438203d3e20323633393032.roa (raw, json)
Hash identifier:          jFXA7iScfMJUnPmTXJXzjdagDpYCX7ivG31QkbiGD/o=
Subject key identifier:   20:24:61:AA:CB:E4:86:0C:F6:30:22:AB:02:1A:A2:35:EF:DD:8C:66
Certificate issuer:       /CN=6213D05627DB2B5D535E655FE93A5D75AF6BAE21
Certificate serial:       5873DC8506F570D0F1F1C16134CA83115BCE83E1
Authority key identifier: 62:13:D0:56:27:DB:2B:5D:53:5E:65:5F:E9:3A:5D:75:AF:6B:AE:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6213D05627DB2B5D535E655FE93A5D75AF6BAE21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/323830343a323737343a3a2f33322d3438203d3e20323633393032.roa
Signing time:             Thu 29 Jan 2026 16:05:05 +0000
ROA not before:           Thu 29 Jan 2026 16:00:05 +0000
ROA not after:            Thu 28 Jan 2027 16:05:05 +0000
asID:                     263902
IP address blocks:        2804:2774::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/6213D05627DB2B5D535E655FE93A5D75AF6BAE21.crl
                          rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/6213D05627DB2B5D535E655FE93A5D75AF6BAE21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6213D05627DB2B5D535E655FE93A5D75AF6BAE21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:73:dc:85:06:f5:70:d0:f1:f1:c1:61:34:ca:83:11:5b:ce:83:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6213D05627DB2B5D535E655FE93A5D75AF6BAE21
        Validity
            Not Before: Jan 29 16:00:05 2026 GMT
            Not After : Jan 28 16:05:05 2027 GMT
        Subject: CN=202461AACBE4860CF63022AB021AA235EFDD8C66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bf:ec:d9:29:71:6c:e7:e0:8d:80:2a:51:94:
                    35:64:c1:0d:da:05:7e:f5:fe:d8:f2:4f:1f:ff:8f:
                    f6:94:4d:87:b5:7f:c2:1a:34:00:a6:ed:69:88:90:
                    88:da:b8:41:d0:f1:71:bc:51:94:b6:a3:75:a8:df:
                    90:04:83:79:38:ca:36:5d:03:cb:64:e1:21:e3:f7:
                    c0:7e:7d:8d:10:00:4d:c1:94:b6:a6:cb:06:e5:ef:
                    5c:69:64:54:a7:a7:fd:c3:75:60:85:2c:42:88:a1:
                    9b:5d:a5:c9:c1:ae:0c:b1:85:93:bd:cc:c0:fa:7e:
                    14:06:79:50:42:f9:11:e4:c3:1b:c5:f3:d5:cf:ee:
                    53:0f:1d:39:3c:82:81:5d:3f:b1:e5:8a:b8:2b:52:
                    06:e7:7c:58:58:34:c6:ae:6d:3f:59:61:78:2b:fb:
                    38:03:56:91:0a:8a:3c:1f:08:3f:ec:12:58:fd:32:
                    8f:f6:13:3a:75:99:cd:07:30:73:11:64:81:9f:e6:
                    01:84:26:c4:9d:39:61:21:5f:24:16:b5:ac:71:2d:
                    9b:01:90:4b:ff:67:fc:b8:5d:c8:da:4d:88:a9:9f:
                    bd:24:18:4d:e3:b6:9d:b2:fe:7c:d5:32:10:34:80:
                    7a:db:d7:a2:29:7f:30:fe:ba:20:ee:37:58:ab:fa:
                    df:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:24:61:AA:CB:E4:86:0C:F6:30:22:AB:02:1A:A2:35:EF:DD:8C:66
            X509v3 Authority Key Identifier:
                keyid:62:13:D0:56:27:DB:2B:5D:53:5E:65:5F:E9:3A:5D:75:AF:6B:AE:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/6213D05627DB2B5D535E655FE93A5D75AF6BAE21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6213D05627DB2B5D535E655FE93A5D75AF6BAE21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/323830343a323737343a3a2f33322d3438203d3e20323633393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2774::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:ae:12:39:80:ca:13:d1:66:8a:27:63:f0:61:4c:7c:fe:a7:
         9a:da:7d:8c:15:81:a4:17:1e:3e:02:fa:7c:6c:81:91:06:fe:
         68:85:19:89:5d:ad:aa:47:02:b6:3c:cf:b7:32:d6:e7:bd:cd:
         5b:b5:2d:81:a9:ae:5b:83:e8:be:72:10:05:15:41:ca:cf:0f:
         8f:e0:31:23:4f:81:52:d0:4d:d0:d8:4f:cf:91:76:e3:0a:dc:
         c9:23:e7:4e:ea:c7:5c:d5:ff:cb:2e:a5:37:51:85:1d:a7:ed:
         ea:21:38:75:27:5b:21:9c:61:b5:36:d2:e5:93:26:2b:cb:d9:
         9f:d9:e4:bb:c4:b6:29:11:1a:e4:9e:1c:41:a6:9b:79:cb:e2:
         2a:91:71:90:45:b7:7d:c6:3b:31:eb:2f:62:2d:e0:05:2e:7d:
         31:b2:79:b6:4f:0f:7c:4a:c8:d7:a5:25:e9:d2:67:df:64:97:
         ab:b4:ea:21:9d:4b:6f:a4:b8:c1:bd:24:81:14:89:76:61:32:
         32:fb:71:7e:32:d7:07:c0:10:fe:ad:b9:a7:77:6b:02:36:8b:
         73:0c:9f:3b:2e:96:5c:aa:ac:8d:71:f5:46:1c:4d:ae:73:9b:
         eb:28:1b:56:ad:20:16:2b:22:3b:80:f3:34:3d:7e:fd:19:d1:
         26:ff:83:c1
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUWHPchQb1cNDx8cFhNMqDEVvOg+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjIxM0QwNTYyN0RCMkI1RDUzNUU2NTVGRTkzQTVENzVB
RjZCQUUyMTAeFw0yNjAxMjkxNjAwMDVaFw0yNzAxMjgxNjA1MDVaMDMxMTAvBgNV
BAMTKDIwMjQ2MUFBQ0JFNDg2MENGNjMwMjJBQjAyMUFBMjM1RUZERDhDNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGv+zZKXFs5+CNgCpRlDVkwQ3a
BX71/tjyTx//j/aUTYe1f8IaNACm7WmIkIjauEHQ8XG8UZS2o3Wo35AEg3k4yjZd
A8tk4SHj98B+fY0QAE3BlLamywbl71xpZFSnp/3DdWCFLEKIoZtdpcnBrgyxhZO9
zMD6fhQGeVBC+RHkwxvF89XP7lMPHTk8goFdP7HlirgrUgbnfFhYNMaubT9ZYXgr
+zgDVpEKijwfCD/sElj9Mo/2Ezp1mc0HMHMRZIGf5gGEJsSdOWEhXyQWtaxxLZsB
kEv/Z/y4XcjaTYipn70kGE3jtp2y/nzVMhA0gHrb16IpfzD+uiDuN1ir+t9BAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUICRhqsvkhgz2MCKrAhqiNe/djGYwHwYDVR0j
BBgwFoAUYhPQVifbK11TXmVf6Tpdda9rriEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3dnVjV1c3N5QUNUbXJORVp0YXQyV1llWUNGOXBwc2hiRk1mMXF4SmRo
ZXEvMC82MjEzRDA1NjI3REIyQjVENTM1RTY1NUZFOTNBNUQ3NUFGNkJBRTIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyMTNEMDU2MjdEQjJCNUQ1
MzVFNjU1RkU5M0E1RDc1QUY2QkFFMjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd3Z1Y1dXNzeUFDVG1yTkVadGF0MldZZVlDRjlwcHNoYkZNZjFxeEpkaGVxLzAv
MzIzODMwMzQzYTMyMzczNzM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz
MzkzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQndDANBgkqhkiG9w0BAQsFAAOCAQEAYq4SOYDK
E9Fmiidj8GFMfP6nmtp9jBWBpBcePgL6fGyBkQb+aIUZiV2tqkcCtjzPtzLW573N
W7UtgamuW4PovnIQBRVBys8Pj+AxI0+BUtBN0NhPz5F24wrcySPnTurHXNX/yy6l
N1GFHaft6iE4dSdbIZxhtTbS5ZMmK8vZn9nku8S2KREa5J4cQaabecviKpFxkEW3
fcY7MesvYi3gBS59MbJ5tk8PfErI16Ul6dJn32SXq7TqIZ1Lb6S4wb0kgRSJdmEy
MvtxfjLXB8AQ/q25p3drAjaLcwyfOy6WXKqsjXH1RhxNrnOb6ygbVq0gFisiO4Dz
ND1+/RnRJv+DwQ==
-----END CERTIFICATE-----
Generated at Thu Feb 19 11:40:41 2026 by rpki-client