Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/323830343a346162303a3a2f33322d3438203d3e20323637323537.roa
File:                     323830343a346162303a3a2f33322d3438203d3e20323637323537.roa (raw, json)
Hash identifier:          0M2Qmku/P4ch3SVgyF0g/In25swbwLnR2bejNIuxIqM=
Subject key identifier:   03:48:4A:B5:F5:11:8F:99:95:90:06:1A:0B:47:C0:17:59:F1:08:1C
Certificate issuer:       /CN=A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01
Certificate serial:       58C651A4639C9FF80B039870E25C7380728014B6
Authority key identifier: A4:7E:65:FD:C3:D0:52:38:EF:E2:B4:D8:DC:22:C5:B7:DE:FE:7D:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/323830343a346162303a3a2f33322d3438203d3e20323637323537.roa
Signing time:             Wed 04 Feb 2026 19:00:01 +0000
ROA not before:           Wed 04 Feb 2026 18:55:01 +0000
ROA not after:            Wed 03 Feb 2027 19:00:01 +0000
asID:                     267257
IP address blocks:        2804:4ab0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.crl
                          rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c6:51:a4:63:9c:9f:f8:0b:03:98:70:e2:5c:73:80:72:80:14:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01
        Validity
            Not Before: Feb  4 18:55:01 2026 GMT
            Not After : Feb  3 19:00:01 2027 GMT
        Subject: CN=03484AB5F5118F999590061A0B47C01759F1081C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:41:19:cf:ed:f1:d9:24:25:9c:aa:2f:58:
                    08:36:b1:1b:8f:fb:45:d6:29:df:33:fc:90:7d:d6:
                    be:3e:30:6b:e1:46:fd:24:10:10:2d:40:90:7a:56:
                    86:55:13:49:9f:62:b8:88:f3:64:ce:26:34:a5:08:
                    00:37:9c:15:39:8b:6e:ee:2c:76:20:03:d4:e8:de:
                    8a:34:4b:ee:9f:d6:8d:8a:a9:47:ab:d1:23:f9:1d:
                    88:9f:12:11:a5:f8:97:87:56:65:5c:3d:51:71:35:
                    0f:91:29:6f:ee:e7:59:6b:f3:db:fa:2f:26:9a:82:
                    74:7d:14:d8:40:9d:5d:4b:3d:52:df:d7:50:1f:ed:
                    f4:bd:d1:26:81:29:69:6f:0d:1d:7c:ec:32:c8:d1:
                    3c:f5:3e:7c:59:24:c4:4c:0b:20:ce:3d:51:97:dc:
                    01:77:17:a3:fb:c3:33:40:f2:da:fd:ce:52:ac:b3:
                    89:2c:39:1e:2f:a9:8d:b1:d0:cb:90:b6:50:92:bb:
                    48:f2:94:9e:05:7c:91:fb:ce:85:92:b5:6b:4e:9f:
                    4c:17:39:11:0d:23:c1:be:72:f1:9e:0e:b8:45:1d:
                    06:26:2e:56:dd:66:18:ec:46:63:f3:5e:7f:6e:48:
                    42:52:fd:1a:91:1e:25:b0:ca:d4:a4:1d:14:c1:d9:
                    3d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:48:4A:B5:F5:11:8F:99:95:90:06:1A:0B:47:C0:17:59:F1:08:1C
            X509v3 Authority Key Identifier:
                keyid:A4:7E:65:FD:C3:D0:52:38:EF:E2:B4:D8:DC:22:C5:B7:DE:FE:7D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/323830343a346162303a3a2f33322d3438203d3e20323637323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ab0::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:34:f0:b5:7b:a0:fd:1b:29:c9:17:e2:9d:6a:f9:09:b6:87:
         05:a4:0a:07:9d:27:3e:c0:cd:54:a6:39:3b:a8:0a:4f:fd:21:
         bd:ef:b2:ef:14:79:b5:0d:cb:f9:e7:11:37:fd:06:7f:49:5a:
         21:16:09:f8:0e:0c:5e:aa:eb:bb:38:81:0a:33:89:d5:d4:1d:
         75:e0:bd:92:3b:de:18:d7:39:17:54:8a:1b:ee:c9:c4:b4:7a:
         5c:bf:69:fe:68:e4:d2:5e:40:13:1b:29:e8:a9:00:29:08:8d:
         0d:30:84:8a:ba:d9:c9:79:95:f9:0e:b5:d8:9f:3c:65:3b:7d:
         d9:e6:45:fd:db:ae:0a:ef:3c:fc:fb:55:c2:68:96:14:f2:e4:
         f2:ee:15:f7:8a:eb:c8:fb:04:8d:86:eb:c2:32:a2:22:5e:f4:
         8c:b2:36:a9:3c:c6:c1:25:17:29:50:c1:86:1a:1d:e7:07:1e:
         5f:4a:64:84:1e:c5:bd:a6:66:a6:cf:ae:a1:9e:15:e6:b2:eb:
         8d:64:21:80:0d:5c:07:fd:4f:ac:98:5c:27:05:97:b1:19:46:
         11:73:3d:52:15:12:0e:2c:44:be:79:9a:91:60:60:78:73:d2:
         df:9a:79:18:10:18:30:32:14:2c:f8:10:45:78:b4:3e:6c:65:
         6d:ec:24:b9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUWMZRpGOcn/gLA5hw4lxzgHKAFLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ3RTY1RkRDM0QwNTIzOEVGRTJCNEQ4REMyMkM1QjdE
RUZFN0QwMTAeFw0yNjAyMDQxODU1MDFaFw0yNzAyMDMxOTAwMDFaMDMxMTAvBgNV
BAMTKDAzNDg0QUI1RjUxMThGOTk5NTkwMDYxQTBCNDdDMDE3NTlGMTA4MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnJ0EZz+3x2SQlnKovWAg2sRuP
+0XWKd8z/JB91r4+MGvhRv0kEBAtQJB6VoZVE0mfYriI82TOJjSlCAA3nBU5i27u
LHYgA9To3oo0S+6f1o2KqUer0SP5HYifEhGl+JeHVmVcPVFxNQ+RKW/u51lr89v6
LyaagnR9FNhAnV1LPVLf11Af7fS90SaBKWlvDR187DLI0Tz1PnxZJMRMCyDOPVGX
3AF3F6P7wzNA8tr9zlKss4ksOR4vqY2x0MuQtlCSu0jylJ4FfJH7zoWStWtOn0wX
ORENI8G+cvGeDrhFHQYmLlbdZhjsRmPzXn9uSEJS/RqRHiWwytSkHRTB2T0LAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUA0hKtfURj5mVkAYaC0fAF1nxCBwwHwYDVR0j
BBgwFoAUpH5l/cPQUjjv4rTY3CLFt97+fQEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFhpc3Y0MXpUV1hmYlNpZkJFdkVVUVIxRzJkNGRZNlRzTFlRcXp1UUp2
RXMvMi9BNDdFNjVGREMzRDA1MjM4RUZFMkI0RDhEQzIyQzVCN0RFRkU3RDAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0N0U2NUZEQzNEMDUyMzhF
RkUyQjREOERDMjJDNUI3REVGRTdEMDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhYaXN2NDF6VFdYZmJTaWZCRXZFVVFSMUcyZDRkWTZUc0xZUXF6dVFKdkVzLzIv
MzIzODMwMzQzYTM0NjE2MjMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzIzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARKsDANBgkqhkiG9w0BAQsFAAOCAQEAUzTwtXug
/RspyRfinWr5CbaHBaQKB50nPsDNVKY5O6gKT/0hve+y7xR5tQ3L+ecRN/0Gf0la
IRYJ+A4MXqrruziBCjOJ1dQddeC9kjveGNc5F1SKG+7JxLR6XL9p/mjk0l5AExsp
6KkAKQiNDTCEirrZyXmV+Q612J88ZTt92eZF/duuCu88/PtVwmiWFPLk8u4V94rr
yPsEjYbrwjKiIl70jLI2qTzGwSUXKVDBhhod5wceX0pkhB7FvaZmps+uoZ4V5rLr
jWQhgA1cB/1PrJhcJwWXsRlGEXM9UhUSDixEvnmakWBgeHPS35p5GBAYMDIULPgQ
RXi0PmxlbewkuQ==
-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:19 2026 by rpki-client