Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a313133343a3a2f33322d3332203d3e20323633363635.roa
File:                     323830343a313133343a3a2f33322d3332203d3e20323633363635.roa (raw, json)
Hash identifier:          9dZ5uMqhyiDO29V8IKO3ecGTx+6S0bAnAQl60F3gYTo=
Subject key identifier:   D5:ED:4A:8F:E2:22:2B:DA:2D:0B:7D:0A:A8:5F:73:A1:21:2D:FD:B0
Certificate issuer:       /CN=199D52B4A265A5991871338EDCD50C1D1DECE6D1
Certificate serial:       62D04FB91D10AD7AA914D472D8B0C175757497AC
Authority key identifier: 19:9D:52:B4:A2:65:A5:99:18:71:33:8E:DC:D5:0C:1D:1D:EC:E6:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199D52B4A265A5991871338EDCD50C1D1DECE6D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a313133343a3a2f33322d3332203d3e20323633363635.roa
Signing time:             Wed 04 Feb 2026 12:15:00 +0000
ROA not before:           Wed 04 Feb 2026 12:10:00 +0000
ROA not after:            Wed 03 Feb 2027 12:15:00 +0000
asID:                     263665
IP address blocks:        2804:1134::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/199D52B4A265A5991871338EDCD50C1D1DECE6D1.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/199D52B4A265A5991871338EDCD50C1D1DECE6D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199D52B4A265A5991871338EDCD50C1D1DECE6D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d0:4f:b9:1d:10:ad:7a:a9:14:d4:72:d8:b0:c1:75:75:74:97:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199D52B4A265A5991871338EDCD50C1D1DECE6D1
        Validity
            Not Before: Feb  4 12:10:00 2026 GMT
            Not After : Feb  3 12:15:00 2027 GMT
        Subject: CN=D5ED4A8FE2222BDA2D0B7D0AA85F73A1212DFDB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8e:54:0c:1a:f2:8f:dc:94:12:f8:11:36:f1:
                    1a:db:01:3a:26:d2:53:2e:77:85:f0:5f:34:1e:11:
                    67:ce:c7:51:33:a3:9f:83:79:65:0d:31:c6:6d:27:
                    30:a8:2d:44:b9:cc:25:10:e0:0e:5e:07:95:d2:a8:
                    2b:19:c7:0d:0b:88:8f:b7:c7:46:5b:7c:bd:67:5f:
                    68:32:b9:45:d8:20:d4:f0:74:73:2d:45:ab:53:54:
                    87:06:f0:79:c2:77:c7:3e:89:4a:f2:ab:1f:70:d6:
                    08:68:27:a7:70:fe:55:95:bf:10:a5:8e:3e:8e:96:
                    e5:89:92:b7:41:c3:b9:e1:b2:76:5c:69:1b:7b:55:
                    be:97:ce:29:a1:03:38:c2:2b:6e:9a:6b:94:06:27:
                    4e:26:66:df:50:f9:1d:49:94:2f:19:3b:54:4c:ab:
                    3a:07:a0:2b:73:1e:38:89:6e:fc:2b:c4:78:56:7a:
                    1d:61:74:65:e7:91:8a:e9:74:b1:22:ff:21:8b:2c:
                    95:ff:82:5e:92:23:45:74:c3:23:0b:95:07:81:25:
                    84:de:9a:cc:b6:71:3b:92:82:8d:47:41:96:a0:7f:
                    e2:e7:77:f3:0d:3a:c9:6f:d1:cc:30:95:e1:1b:f3:
                    2a:9a:75:eb:2d:e3:d0:4d:29:6e:34:64:b1:f1:c4:
                    d3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:ED:4A:8F:E2:22:2B:DA:2D:0B:7D:0A:A8:5F:73:A1:21:2D:FD:B0
            X509v3 Authority Key Identifier:
                keyid:19:9D:52:B4:A2:65:A5:99:18:71:33:8E:DC:D5:0C:1D:1D:EC:E6:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/199D52B4A265A5991871338EDCD50C1D1DECE6D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199D52B4A265A5991871338EDCD50C1D1DECE6D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a313133343a3a2f33322d3332203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1134::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:c3:db:a8:c3:34:9d:4b:fd:56:4b:79:be:e2:30:4b:55:b4:
         2e:be:57:fb:a9:a4:25:15:dd:88:1b:b8:f0:d4:c6:38:d8:d4:
         61:d1:ff:9f:dc:2a:48:79:0d:a3:ce:a8:62:e7:ee:c8:60:dc:
         6a:17:13:42:f4:98:fb:cb:71:8b:0f:e9:33:08:7b:9c:23:93:
         6a:6f:31:d4:ca:c5:62:8d:ec:a4:6a:be:56:78:0f:b5:35:9c:
         4a:d6:f7:d0:fa:02:72:cf:65:cb:8d:a5:3b:9a:d3:fc:1a:6d:
         74:bc:b3:93:51:df:60:3f:bc:e4:50:86:9c:99:24:12:3d:7f:
         7b:a7:f0:65:ce:e6:a6:11:04:60:60:9f:58:cb:ac:95:9c:33:
         ae:c3:b3:f8:0d:99:2f:56:fa:89:49:12:d4:29:e4:9d:d5:ad:
         f9:7a:55:65:c8:b3:28:64:60:61:b6:e9:53:3e:58:48:c8:1a:
         d8:3d:60:c2:bb:74:29:13:0b:a6:03:e1:e9:9a:73:16:88:9c:
         36:b8:b0:7a:fa:60:b7:27:9b:66:0c:f6:78:fc:b6:eb:50:cd:
         d0:8b:e2:5d:01:ce:79:d8:dd:40:99:f4:d4:71:9e:57:ad:53:
         c7:57:9c:8c:7a:a3:6d:6d:c3:9c:14:6e:ad:79:ed:4d:8f:8d:
         94:03:d5:6c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUYtBPuR0QrXqpFNRy2LDBdXV0l6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk5RDUyQjRBMjY1QTU5OTE4NzEzMzhFRENENTBDMUQx
REVDRTZEMTAeFw0yNjAyMDQxMjEwMDBaFw0yNzAyMDMxMjE1MDBaMDMxMTAvBgNV
BAMTKEQ1RUQ0QThGRTIyMjJCREEyRDBCN0QwQUE4NUY3M0ExMjEyREZEQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEjlQMGvKP3JQS+BE28RrbATom
0lMud4XwXzQeEWfOx1Ezo5+DeWUNMcZtJzCoLUS5zCUQ4A5eB5XSqCsZxw0LiI+3
x0ZbfL1nX2gyuUXYINTwdHMtRatTVIcG8HnCd8c+iUryqx9w1ghoJ6dw/lWVvxCl
jj6OluWJkrdBw7nhsnZcaRt7Vb6XzimhAzjCK26aa5QGJ04mZt9Q+R1JlC8ZO1RM
qzoHoCtzHjiJbvwrxHhWeh1hdGXnkYrpdLEi/yGLLJX/gl6SI0V0wyMLlQeBJYTe
msy2cTuSgo1HQZagf+Lnd/MNOslv0cwwleEb8yqadest49BNKW40ZLHxxNM5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU1e1Kj+IiK9otC30KqF9zoSEt/bAwHwYDVR0j
BBgwFoAUGZ1StKJlpZkYcTOO3NUMHR3s5tEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU03WlFMVXp5Tkt2M3lTRTNGQ05KQ0t1bXdLTkN0Y3pTVFlwRjdIOE1n
cmYvMC8xOTlENTJCNEEyNjVBNTk5MTg3MTMzOEVEQ0Q1MEMxRDFERUNFNkQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5OUQ1MkI0QTI2NUE1OTkx
ODcxMzM4RURDRDUwQzFEMURFQ0U2RDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNN1pRTFV6eU5LdjN5U0UzRkNOSkNLdW13S05DdGN6U1RZcEY3SDhNZ3JmLzAv
MzIzODMwMzQzYTMxMzEzMzM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzYzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQRNDANBgkqhkiG9w0BAQsFAAOCAQEAAcPbqMM0
nUv9Vkt5vuIwS1W0Lr5X+6mkJRXdiBu48NTGONjUYdH/n9wqSHkNo86oYufuyGDc
ahcTQvSY+8txiw/pMwh7nCOTam8x1MrFYo3spGq+VngPtTWcStb30PoCcs9ly42l
O5rT/BptdLyzk1HfYD+85FCGnJkkEj1/e6fwZc7mphEEYGCfWMuslZwzrsOz+A2Z
L1b6iUkS1CnkndWt+XpVZcizKGRgYbbpUz5YSMga2D1gwrt0KRMLpgPh6ZpzFoic
NriwevpgtyebZgz2ePy261DN0IviXQHOedjdQJn01HGeV61Tx1ecjHqjbW3DnBRu
rXntTY+NlAPVbA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 05:55:22 2026 by rpki-client