Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a343763303a3a2f33322d3332203d3e20323633363635.roa
File:                     323830343a343763303a3a2f33322d3332203d3e20323633363635.roa (raw, json)
Hash identifier:          pDn2NTrECD3jyPAKCGLSZqG1h8nAPsJoMyPT6dMDiIs=
Subject key identifier:   EB:71:CE:0F:26:71:AD:98:50:D5:95:B7:9A:FA:45:B5:C2:DA:17:82
Certificate issuer:       /CN=199D52B4A265A5991871338EDCD50C1D1DECE6D1
Certificate serial:       57589DB1C2421C6F0B3895DAFB06C04A21361D36
Authority key identifier: 19:9D:52:B4:A2:65:A5:99:18:71:33:8E:DC:D5:0C:1D:1D:EC:E6:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199D52B4A265A5991871338EDCD50C1D1DECE6D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a343763303a3a2f33322d3332203d3e20323633363635.roa
Signing time:             Wed 04 Feb 2026 12:15:01 +0000
ROA not before:           Wed 04 Feb 2026 12:10:01 +0000
ROA not after:            Wed 03 Feb 2027 12:15:01 +0000
asID:                     263665
IP address blocks:        2804:47c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/199D52B4A265A5991871338EDCD50C1D1DECE6D1.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/199D52B4A265A5991871338EDCD50C1D1DECE6D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199D52B4A265A5991871338EDCD50C1D1DECE6D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:58:9d:b1:c2:42:1c:6f:0b:38:95:da:fb:06:c0:4a:21:36:1d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199D52B4A265A5991871338EDCD50C1D1DECE6D1
        Validity
            Not Before: Feb  4 12:10:01 2026 GMT
            Not After : Feb  3 12:15:01 2027 GMT
        Subject: CN=EB71CE0F2671AD9850D595B79AFA45B5C2DA1782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:17:4a:73:a2:70:36:ec:3c:60:79:13:15:fc:
                    bf:74:e9:5c:fd:02:5b:3e:93:46:97:95:5d:a4:5a:
                    b6:eb:c0:4f:f8:de:d1:ff:01:1d:0b:aa:3f:3d:fc:
                    c2:9e:c0:02:cf:73:ec:17:af:56:a2:c5:96:ea:e8:
                    72:5c:ce:5d:51:04:1e:81:c5:e1:92:04:52:5f:88:
                    f0:90:f0:0a:cb:c7:06:8e:04:82:26:3d:8b:88:c0:
                    1e:82:ec:d1:1e:ac:37:79:28:84:e0:4c:b5:ac:0c:
                    77:10:e8:3d:a8:f3:a6:26:9d:41:cf:11:5a:67:6b:
                    22:fe:3e:64:7f:cb:39:26:80:8a:78:70:e5:00:44:
                    26:b8:6d:45:02:3f:00:b9:ce:e8:0b:9d:32:42:b3:
                    99:35:d5:9d:1e:8d:17:86:74:8c:8d:ff:e3:93:cc:
                    7e:4f:26:45:72:71:11:8e:a7:20:c7:0c:b9:35:53:
                    29:d9:b8:f0:ae:b6:1c:f8:ee:0c:f0:1a:23:ed:f4:
                    81:17:d8:45:f3:fc:05:f8:30:d1:a2:23:7a:a2:b1:
                    93:ad:2a:b9:0b:3b:8e:c0:e0:41:13:8b:ad:dc:6d:
                    5b:2c:f0:82:4a:d4:47:c9:ac:51:c0:43:77:ed:2a:
                    81:6b:e5:8c:08:4e:13:f6:78:d5:66:26:8b:2d:65:
                    66:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:71:CE:0F:26:71:AD:98:50:D5:95:B7:9A:FA:45:B5:C2:DA:17:82
            X509v3 Authority Key Identifier:
                keyid:19:9D:52:B4:A2:65:A5:99:18:71:33:8E:DC:D5:0C:1D:1D:EC:E6:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/199D52B4A265A5991871338EDCD50C1D1DECE6D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199D52B4A265A5991871338EDCD50C1D1DECE6D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a343763303a3a2f33322d3332203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:ed:d2:53:4d:8e:f5:76:b4:7e:21:b1:56:de:57:37:1a:91:
         72:8d:95:21:36:64:90:79:2f:4e:3b:37:eb:90:e3:bb:20:f6:
         0e:e9:00:8f:d0:bb:0f:e8:f2:5f:09:cb:76:0a:ca:9b:a6:be:
         a4:ff:36:88:85:81:ee:b2:e1:75:3e:61:0d:00:ad:59:3f:1a:
         60:4a:1f:f5:c3:28:7a:51:7e:27:81:8c:72:fb:f3:c0:fb:e9:
         37:cf:58:46:e4:4c:64:f9:ac:d4:4a:a3:31:3f:da:59:95:61:
         f8:0f:39:5a:84:1a:85:ec:56:e6:f3:35:df:d9:e1:51:1a:2d:
         3e:36:31:58:e1:f0:35:0c:42:9f:85:06:22:86:b4:31:f3:70:
         8e:2c:8c:61:8e:8e:f0:11:80:43:16:b5:f7:44:a4:cc:24:e7:
         c9:5d:96:10:6d:c3:de:40:d9:15:c0:e3:2d:cd:79:cd:66:64:
         99:d3:45:82:28:53:c9:b3:69:0b:a9:4c:d7:a5:fe:e9:07:64:
         72:4e:fa:fe:27:92:fc:63:ea:e7:15:bc:19:00:50:c3:77:da:
         ea:cd:ad:62:4a:c1:0c:f9:2c:19:2e:d9:f6:f8:58:c9:be:e3:
         0e:b8:48:ff:a2:17:19:85:61:42:02:ac:b2:0a:8a:09:3c:e4:
         94:0f:ef:1a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUV1idscJCHG8LOJXa+wbASiE2HTYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk5RDUyQjRBMjY1QTU5OTE4NzEzMzhFRENENTBDMUQx
REVDRTZEMTAeFw0yNjAyMDQxMjEwMDFaFw0yNzAyMDMxMjE1MDFaMDMxMTAvBgNV
BAMTKEVCNzFDRTBGMjY3MUFEOTg1MEQ1OTVCNzlBRkE0NUI1QzJEQTE3ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+F0pzonA27DxgeRMV/L906Vz9
Als+k0aXlV2kWrbrwE/43tH/AR0Lqj89/MKewALPc+wXr1aixZbq6HJczl1RBB6B
xeGSBFJfiPCQ8ArLxwaOBIImPYuIwB6C7NEerDd5KITgTLWsDHcQ6D2o86YmnUHP
EVpnayL+PmR/yzkmgIp4cOUARCa4bUUCPwC5zugLnTJCs5k11Z0ejReGdIyN/+OT
zH5PJkVycRGOpyDHDLk1UynZuPCuthz47gzwGiPt9IEX2EXz/AX4MNGiI3qisZOt
KrkLO47A4EETi63cbVss8IJK1EfJrFHAQ3ftKoFr5YwIThP2eNVmJostZWY7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU63HODyZxrZhQ1ZW3mvpFtcLaF4IwHwYDVR0j
BBgwFoAUGZ1StKJlpZkYcTOO3NUMHR3s5tEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU03WlFMVXp5Tkt2M3lTRTNGQ05KQ0t1bXdLTkN0Y3pTVFlwRjdIOE1n
cmYvMC8xOTlENTJCNEEyNjVBNTk5MTg3MTMzOEVEQ0Q1MEMxRDFERUNFNkQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5OUQ1MkI0QTI2NUE1OTkx
ODcxMzM4RURDRDUwQzFEMURFQ0U2RDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNN1pRTFV6eU5LdjN5U0UzRkNOSkNLdW13S05DdGN6U1RZcEY3SDhNZ3JmLzAv
MzIzODMwMzQzYTM0Mzc2MzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzYzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARHwDANBgkqhkiG9w0BAQsFAAOCAQEABu3SU02O
9Xa0fiGxVt5XNxqRco2VITZkkHkvTjs365DjuyD2DukAj9C7D+jyXwnLdgrKm6a+
pP82iIWB7rLhdT5hDQCtWT8aYEof9cMoelF+J4GMcvvzwPvpN89YRuRMZPms1Eqj
MT/aWZVh+A85WoQahexW5vM139nhURotPjYxWOHwNQxCn4UGIoa0MfNwjiyMYY6O
8BGAQxa190SkzCTnyV2WEG3D3kDZFcDjLc15zWZkmdNFgihTybNpC6lM16X+6Qdk
ck76/ieS/GPq5xW8GQBQw3fa6s2tYkrBDPksGS7Z9vhYyb7jDrhI/6IXGYVhQgKs
sgqKCTzklA/vGg==
-----END CERTIFICATE-----
Generated at Thu Feb 19 05:54:12 2026 by rpki-client