Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/323830343a333164633a3a2f33322d3332203d3e20323635303431.roa
File:                     323830343a333164633a3a2f33322d3332203d3e20323635303431.roa (raw, json)
Hash identifier:          NIUAw9HYu7HpaSuecXXqo0xo804wU9Xee6YRdO/VGXw=
Subject key identifier:   BA:A7:1C:1F:01:A4:2E:0F:DB:86:14:24:85:38:42:E2:AE:C8:4C:F2
Certificate issuer:       /CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
Certificate serial:       1EC85E89106BD6BA4BF7DAEAB6C2851E235B8C3A
Authority key identifier: A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/323830343a333164633a3a2f33322d3332203d3e20323635303431.roa
Signing time:             Thu 05 Feb 2026 17:00:12 +0000
ROA not before:           Thu 05 Feb 2026 16:55:12 +0000
ROA not after:            Thu 04 Feb 2027 17:00:12 +0000
asID:                     265041
IP address blocks:        2804:31dc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl
                          rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c8:5e:89:10:6b:d6:ba:4b:f7:da:ea:b6:c2:85:1e:23:5b:8c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
        Validity
            Not Before: Feb  5 16:55:12 2026 GMT
            Not After : Feb  4 17:00:12 2027 GMT
        Subject: CN=BAA71C1F01A42E0FDB861424853842E2AEC84CF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1a:c4:c0:05:b4:e6:d8:90:c3:32:0c:1c:fe:
                    4d:3b:92:d0:ac:b0:7c:43:29:f4:6a:d6:b2:19:10:
                    d8:be:2a:98:14:0a:39:61:15:f5:fd:86:08:ab:e5:
                    c9:5d:50:a8:e0:82:3e:7b:c3:65:bf:97:d0:a6:34:
                    28:66:cf:98:a1:53:8e:d9:34:4c:70:80:5f:3a:68:
                    43:7a:d2:47:02:a2:75:37:bc:f0:1c:87:57:82:77:
                    24:26:d3:65:ff:16:27:17:20:ce:4d:8c:5a:18:89:
                    ca:68:1e:87:7f:d3:21:56:56:af:16:30:a2:47:84:
                    cf:73:1c:99:64:aa:60:6e:06:5b:65:c2:76:6c:62:
                    90:2b:51:93:56:c4:7f:e1:c9:b5:b6:66:d4:17:71:
                    d5:41:87:73:57:d4:d6:cf:df:7c:d5:89:3e:b3:a8:
                    2d:ad:2e:f8:69:55:e3:01:32:c9:6f:f1:36:66:c5:
                    72:71:d3:0a:c6:93:c4:a4:bc:09:3f:ef:59:bc:2c:
                    3d:a8:f4:e3:52:65:fc:bd:fd:12:fd:e3:8a:8f:60:
                    89:1b:d4:fa:30:f4:a8:45:ef:62:52:cf:7d:ab:84:
                    33:4e:bb:db:cf:bc:b4:a1:7f:d7:f4:3e:37:81:c5:
                    ec:74:71:bc:ad:73:b2:72:3f:bb:4b:0e:04:f1:48:
                    9e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A7:1C:1F:01:A4:2E:0F:DB:86:14:24:85:38:42:E2:AE:C8:4C:F2
            X509v3 Authority Key Identifier:
                keyid:A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/323830343a333164633a3a2f33322d3332203d3e20323635303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         db:4b:de:d4:e9:40:77:27:85:a8:f6:81:c4:79:ec:d0:53:82:
         f6:dc:d1:fa:cb:d8:b3:6a:59:64:76:da:27:12:0b:4b:88:6b:
         7a:3c:bf:46:fc:d2:32:8d:bb:d3:e4:b1:81:d8:bd:6f:ea:05:
         91:df:77:c2:40:d1:fe:f6:1f:94:d9:a8:57:3a:f1:bb:13:d7:
         85:ca:ed:f4:75:d2:cc:ab:fc:f2:01:66:12:48:b8:a8:ae:e4:
         78:a8:2e:35:6a:be:cb:d1:76:5c:63:94:b6:6c:85:cd:3f:df:
         d3:f0:23:ce:01:5a:4c:63:9c:51:20:7b:c3:11:7a:27:3b:e3:
         e5:d7:00:09:7d:53:4b:f4:c9:b5:f8:87:16:e3:ce:c1:01:9b:
         c4:9d:9d:5d:36:ee:1c:57:ee:2b:ce:9e:77:22:0c:58:40:4a:
         b0:f4:f4:e7:6d:e9:6d:d9:c3:25:a6:84:16:5a:de:2f:37:b4:
         1c:0c:04:e0:0b:73:5c:26:81:0a:0b:63:ae:f4:c2:13:fe:a9:
         77:84:c0:3f:0a:95:d6:53:07:2b:50:de:e9:38:fa:4d:8e:14:
         83:28:5d:aa:f6:f7:c2:2d:42:c0:d1:3f:f6:84:f0:f8:16:60:
         66:89:0b:0d:1f:ff:7a:1c:d4:54:c1:5c:7d:b2:2d:91:1a:86:
         8a:f0:86:5f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHsheiRBr1rpL99rqtsKFHiNbjDowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdCQzNCREJDMjg3NzFFMjNCNkEzQUY4RkJEMzY2NEFD
NEMwRUNCRjAeFw0yNjAyMDUxNjU1MTJaFw0yNzAyMDQxNzAwMTJaMDMxMTAvBgNV
BAMTKEJBQTcxQzFGMDFBNDJFMEZEQjg2MTQyNDg1Mzg0MkUyQUVDODRDRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrGsTABbTm2JDDMgwc/k07ktCs
sHxDKfRq1rIZENi+KpgUCjlhFfX9hgir5cldUKjggj57w2W/l9CmNChmz5ihU47Z
NExwgF86aEN60kcConU3vPAch1eCdyQm02X/FicXIM5NjFoYicpoHod/0yFWVq8W
MKJHhM9zHJlkqmBuBltlwnZsYpArUZNWxH/hybW2ZtQXcdVBh3NX1NbP33zViT6z
qC2tLvhpVeMBMslv8TZmxXJx0wrGk8SkvAk/71m8LD2o9ONSZfy9/RL944qPYIkb
1Pow9KhF72JSz32rhDNOu9vPvLShf9f0PjeBxex0cbytc7JyP7tLDgTxSJ6hAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUuqccHwGkLg/bhhQkhThC4q7ITPIwHwYDVR0j
BBgwFoAUp7w728KHceI7ajr4+9NmSsTA7L8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEJTcEtGZERzNTlyUkJYZGVKeGFXRHNDNzN5WnBQZmNzZWN6WlNlaVJB
Yk4vMS9BN0JDM0JEQkMyODc3MUUyM0I2QTNBRjhGQkQzNjY0QUM0QzBFQ0JGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3QkMzQkRCQzI4NzcxRTIz
QjZBM0FGOEZCRDM2NjRBQzRDMEVDQkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhCU3BLRmREczU5clJCWGRlSnhhV0RzQzczeVpwUGZjc2VjelpTZWlSQWJOLzEv
MzIzODMwMzQzYTMzMzE2NDYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzAzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQx3DANBgkqhkiG9w0BAQsFAAOCAQEA20ve1OlA
dyeFqPaBxHns0FOC9tzR+svYs2pZZHbaJxILS4hrejy/RvzSMo270+Sxgdi9b+oF
kd93wkDR/vYflNmoVzrxuxPXhcrt9HXSzKv88gFmEki4qK7keKguNWq+y9F2XGOU
tmyFzT/f0/AjzgFaTGOcUSB7wxF6Jzvj5dcACX1TS/TJtfiHFuPOwQGbxJ2dXTbu
HFfuK86edyIMWEBKsPT0523pbdnDJaaEFlreLze0HAwE4AtzXCaBCgtjrvTCE/6p
d4TAPwqV1lMHK1De6Tj6TY4Ugyhdqvb3wi1CwNE/9oTw+BZgZokLDR//ehzUVMFc
fbItkRqGivCGXw==
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:23:15 2026 by rpki-client