Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          xhQFhFxbWkXtYZXh12BmN2obsqZxWAQ99I/qaF3BsyU=
Subject key identifier:   D9:31:AA:DD:3A:B1:95:79:92:98:0F:13:80:52:0A:EB:84:51:E6:77
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       1D60DE72202C878A0D6124A8F4A4923D9C3F6F04
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a3a2f33362d3336203d3e203631363337.roa
Signing time:             Thu 05 Feb 2026 01:01:05 +0000
ROA not before:           Thu 05 Feb 2026 00:56:05 +0000
ROA not after:            Thu 04 Feb 2027 01:01:05 +0000
asID:                     61637
IP address blocks:        2804:1c18::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:36:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:60:de:72:20:2c:87:8a:0d:61:24:a8:f4:a4:92:3d:9c:3f:6f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Feb  5 00:56:05 2026 GMT
            Not After : Feb  4 01:01:05 2027 GMT
        Subject: CN=D931AADD3AB1957992980F1380520AEB8451E677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:70:df:e3:eb:fc:72:37:bd:01:f0:ff:c4:11:
                    88:db:42:a9:b3:f4:c0:8c:5c:69:a2:1b:08:72:e4:
                    8b:43:a6:4b:96:ad:14:12:1d:a4:4d:0c:bb:0d:99:
                    a6:20:73:1b:96:e6:2c:ad:ce:74:dc:ae:4f:9b:fb:
                    7a:04:60:5a:34:58:f0:12:45:5d:9d:16:c1:f4:29:
                    ca:fe:53:24:2b:80:6a:20:04:d4:ee:f7:ab:ce:f5:
                    f6:69:ea:cd:d6:f4:29:f7:15:07:c5:c8:cc:cc:c0:
                    8a:c4:db:06:a8:3f:35:3c:30:37:1f:0c:b6:4f:d6:
                    44:ef:b1:6d:9b:7f:25:fb:b2:53:05:c0:77:a2:d6:
                    ce:74:6f:b9:14:7e:d6:af:5f:b4:17:c2:92:78:8c:
                    1d:5f:cc:bb:76:9d:c3:1e:ae:28:cc:44:f9:3d:bf:
                    b1:39:08:cd:da:34:7d:ba:82:3d:2a:8b:a2:2e:93:
                    31:ad:0c:49:0c:05:62:67:01:75:d7:b9:96:48:30:
                    37:98:d7:3e:8f:b1:48:87:fb:3d:b2:29:57:5e:55:
                    dc:fd:6a:82:a3:16:28:42:d1:42:d4:36:2c:4b:77:
                    3b:87:89:ef:6f:1a:6c:c5:5c:22:55:43:d4:93:7b:
                    c7:51:c3:35:c3:0a:8d:2f:d9:c8:ea:f8:1a:ec:d4:
                    dc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:31:AA:DD:3A:B1:95:79:92:98:0F:13:80:52:0A:EB:84:51:E6:77
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18::/36

    Signature Algorithm: sha256WithRSAEncryption
         40:94:bd:43:2b:2f:18:4d:c5:67:f9:40:a7:d2:d9:b3:fa:99:
         4b:ad:64:8c:c3:37:48:2e:70:49:ab:f2:a8:cf:c0:8f:61:cb:
         0a:1f:b8:a9:d2:3f:62:ff:07:07:8f:04:36:a0:01:22:9f:59:
         0b:42:b5:c2:93:73:ee:5e:c6:22:43:30:c2:de:47:8b:35:04:
         99:d2:0d:44:f9:21:53:91:7b:7b:a8:00:fe:b7:10:a9:7f:9d:
         8c:93:1f:fe:79:9c:ae:34:2c:18:85:51:38:c8:d9:44:79:8b:
         c6:00:9e:1c:d7:2e:eb:45:ac:e2:4d:35:62:1a:0d:c1:90:33:
         0f:42:50:0a:cc:bd:fa:d2:34:40:ab:f6:2d:da:3a:76:18:9a:
         8a:a7:ee:8c:12:e7:83:fc:93:ad:fd:bc:a7:74:ec:cc:77:be:
         85:c9:95:43:77:56:ad:de:c7:e4:bb:a6:a4:14:a1:31:93:f7:
         e6:c6:e4:9d:16:dc:ae:f9:fe:b9:c2:b0:d6:10:07:cf:50:e5:
         8f:5b:1c:16:1d:24:ba:8a:f4:49:e4:36:4c:4c:a8:16:1a:ea:
         95:4a:a4:d6:68:75:74:44:6d:2f:f1:c4:f2:b2:91:9d:17:a9:
         d4:b3:f3:18:dc:e0:77:e8:be:f0:af:62:37:ac:79:71:da:92:
         7c:d1:68:00
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHWDeciAsh4oNYSSo9KSSPZw/bwQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE5RkJBRTVCRjYyMDBGNjBFRjA5Q0RCQzFCOTAwNTBB
N0MwNUUwQTAeFw0yNjAyMDUwMDU2MDVaFw0yNzAyMDQwMTAxMDVaMDMxMTAvBgNV
BAMTKEQ5MzFBQUREM0FCMTk1Nzk5Mjk4MEYxMzgwNTIwQUVCODQ1MUU2NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAcN/j6/xyN70B8P/EEYjbQqmz
9MCMXGmiGwhy5ItDpkuWrRQSHaRNDLsNmaYgcxuW5iytznTcrk+b+3oEYFo0WPAS
RV2dFsH0Kcr+UyQrgGogBNTu96vO9fZp6s3W9Cn3FQfFyMzMwIrE2waoPzU8MDcf
DLZP1kTvsW2bfyX7slMFwHei1s50b7kUftavX7QXwpJ4jB1fzLt2ncMerijMRPk9
v7E5CM3aNH26gj0qi6IukzGtDEkMBWJnAXXXuZZIMDeY1z6PsUiH+z2yKVdeVdz9
aoKjFihC0ULUNixLdzuHie9vGmzFXCJVQ9STe8dRwzXDCo0v2cjq+Brs1NyJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU2TGq3TqxlXmSmA8TgFIK64RR5ncwHwYDVR0j
BBgwFoAUMZ+65b9iAPYO8JzbwbkAUKfAXgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXNTcmY3cGZYTVA3c0Z6M3FSYzY2Y2FkUFp0SFVWd014RGlQazR2eGFk
ckYvMS8zMTlGQkFFNUJGNjIwMEY2MEVGMDlDREJDMUI5MDA1MEE3QzA1RTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxOUZCQUU1QkY2MjAwRjYw
RUYwOUNEQkMxQjkwMDUwQTdDMDVFMEEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlzU3JmN3BmWE1QN3NGejNxUmM2NmNhZFBadEhVVndNeERpUGs0dnhhZHJGLzEv
MzIzODMwMzQzYTMxNjMzMTM4M2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIwMzYzMTM2
MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBCgEHBgAMA0GCSqGSIb3DQEBCwUAA4IBAQBAlL1DKy8Y
TcVn+UCn0tmz+plLrWSMwzdILnBJq/Koz8CPYcsKH7ip0j9i/wcHjwQ2oAEin1kL
QrXCk3PuXsYiQzDC3keLNQSZ0g1E+SFTkXt7qAD+txCpf52Mkx/+eZyuNCwYhVE4
yNlEeYvGAJ4c1y7rRaziTTViGg3BkDMPQlAKzL360jRAq/Yt2jp2GJqKp+6MEueD
/JOt/byndOzMd76FyZVDd1at3sfku6akFKExk/fmxuSdFtyu+f65wrDWEAfPUOWP
WxwWHSS6ivRJ5DZMTKgWGuqVSqTWaHV0RG0v8cTyspGdF6nUs/MY3OB36L7wr2I3
rHlx2pJ80WgA
-----END CERTIFICATE-----
Generated at Thu Feb 19 07:20:20 2026 by rpki-client