Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a643030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a643030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          MPeAOrnwQmrDwxbOqR1Mup1vblR5AyViwjwuMbswf8Q=
Subject key identifier:   DE:87:B5:D5:F8:5A:6C:97:45:B7:B1:5C:35:4E:5E:24:0A:3C:44:28
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       553142854CA4EED1C0C7CD51EDFDD9DBC5D0E4E6
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a643030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Thu 05 Feb 2026 01:01:03 +0000
ROA not before:           Thu 05 Feb 2026 00:56:03 +0000
ROA not after:            Thu 04 Feb 2027 01:01:03 +0000
asID:                     61637
IP address blocks:        2804:1c18:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:36:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:31:42:85:4c:a4:ee:d1:c0:c7:cd:51:ed:fd:d9:db:c5:d0:e4:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Feb  5 00:56:03 2026 GMT
            Not After : Feb  4 01:01:03 2027 GMT
        Subject: CN=DE87B5D5F85A6C9745B7B15C354E5E240A3C4428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:74:a3:09:e7:4b:b9:67:fb:9b:1c:02:1a:24:
                    90:70:e8:d6:9f:de:67:78:f0:ec:80:51:16:50:75:
                    23:33:b2:24:ad:be:be:13:3b:60:ad:d6:37:65:77:
                    ba:e8:87:26:72:63:5e:6b:ba:2d:6e:af:b8:ec:bf:
                    c7:f9:eb:fb:af:cd:f8:bb:31:94:2d:61:2b:1e:e4:
                    d8:f3:da:a1:c8:93:89:44:e3:9c:4d:9c:be:87:b5:
                    a5:60:a4:72:bc:ea:af:28:c8:b3:13:b2:fe:3a:e2:
                    10:d6:95:ce:93:c9:92:ed:10:67:c4:17:07:e7:d3:
                    2b:bc:0b:d9:6e:28:45:7a:b8:15:5c:63:a1:06:06:
                    52:ad:d8:dc:8d:ea:99:28:f2:68:81:d0:94:7c:3f:
                    e1:58:75:63:3d:4b:f6:41:fa:f9:88:ea:51:63:22:
                    ad:35:3e:49:5e:1a:59:a9:cd:ed:31:e1:f5:77:f1:
                    d7:49:1f:53:10:13:77:db:b0:d2:50:4a:81:13:6c:
                    bc:04:46:9a:5b:f2:d3:3c:23:92:69:28:39:e9:0c:
                    b7:6d:7a:d4:55:f5:67:b3:4f:d9:9a:72:32:09:71:
                    6b:c3:1c:99:d2:1d:79:14:7f:12:10:0b:74:ba:69:
                    93:26:8f:9a:39:1f:85:c7:2e:de:92:6e:eb:a2:8c:
                    46:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:87:B5:D5:F8:5A:6C:97:45:B7:B1:5C:35:4E:5E:24:0A:3C:44:28
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a643030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9d:89:68:51:be:f9:53:01:1c:b7:35:4d:82:25:af:4f:d4:83:
         d1:8a:dc:e0:1b:24:a0:0f:48:07:7b:3a:41:04:ec:cb:53:9a:
         a6:bc:63:a3:7a:5a:96:14:3a:0c:3a:bd:a9:71:1f:ce:d8:84:
         e7:95:c1:57:74:0d:d1:6e:61:41:c2:24:e2:d0:48:43:be:3f:
         d6:eb:d9:af:4c:b4:90:34:d1:3c:c4:61:3f:0d:90:37:a8:80:
         a2:1c:86:a9:41:70:f9:44:de:e8:ef:01:46:ee:01:cd:45:a6:
         58:1a:7f:31:a4:a7:b9:07:0d:34:f3:79:a6:31:44:05:a9:d9:
         d8:8e:66:04:5f:80:bf:47:b5:b2:e4:da:94:4a:2a:a1:d6:f8:
         43:13:ca:b7:af:a2:b8:b6:36:99:e0:8e:be:a9:dd:e4:af:47:
         26:ab:ff:f5:0e:85:e9:4a:e8:34:8e:ed:af:2f:d6:9e:2a:72:
         14:fc:0a:c8:a5:51:c0:3c:1e:84:02:67:64:71:f3:a1:0d:b0:
         74:3f:a5:db:9a:92:d2:6a:20:3e:e7:9e:c0:69:12:fa:aa:3a:
         0b:56:73:53:ba:98:3e:6e:e4:7d:b4:a8:f0:a6:a0:71:38:00:
         92:f7:e9:30:aa:e6:7d:5f:4c:cb:87:34:e2:e4:a4:6a:fe:da:
         02:e1:81:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVTFChUyk7tHAx81R7f3Z28XQ5OYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE5RkJBRTVCRjYyMDBGNjBFRjA5Q0RCQzFCOTAwNTBB
N0MwNUUwQTAeFw0yNjAyMDUwMDU2MDNaFw0yNzAyMDQwMTAxMDNaMDMxMTAvBgNV
BAMTKERFODdCNUQ1Rjg1QTZDOTc0NUI3QjE1QzM1NEU1RTI0MEEzQzQ0MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJdKMJ50u5Z/ubHAIaJJBw6Naf
3md48OyAURZQdSMzsiStvr4TO2Ct1jdld7rohyZyY15rui1ur7jsv8f56/uvzfi7
MZQtYSse5Njz2qHIk4lE45xNnL6HtaVgpHK86q8oyLMTsv464hDWlc6TyZLtEGfE
Fwfn0yu8C9luKEV6uBVcY6EGBlKt2NyN6pko8miB0JR8P+FYdWM9S/ZB+vmI6lFj
Iq01PkleGlmpze0x4fV38ddJH1MQE3fbsNJQSoETbLwERppb8tM8I5JpKDnpDLdt
etRV9WezT9macjIJcWvDHJnSHXkUfxIQC3S6aZMmj5o5H4XHLt6SbuuijEbjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU3oe11fhabJdFt7FcNU5eJAo8RCgwHwYDVR0j
BBgwFoAUMZ+65b9iAPYO8JzbwbkAUKfAXgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXNTcmY3cGZYTVA3c0Z6M3FSYzY2Y2FkUFp0SFVWd014RGlQazR2eGFk
ckYvMS8zMTlGQkFFNUJGNjIwMEY2MEVGMDlDREJDMUI5MDA1MEE3QzA1RTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxOUZCQUU1QkY2MjAwRjYw
RUYwOUNEQkMxQjkwMDUwQTdDMDVFMEEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlzU3JmN3BmWE1QN3NGejNxUmM2NmNhZFBadEhVVndNeERpUGs0dnhhZHJGLzEv
MzIzODMwMzQzYTMxNjMzMTM4M2E2NDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDM2MzEzNjMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBBwY0DANBgkqhkiG9w0BAQsFAAOC
AQEAnYloUb75UwEctzVNgiWvT9SD0Yrc4BskoA9IB3s6QQTsy1Oaprxjo3palhQ6
DDq9qXEfztiE55XBV3QN0W5hQcIk4tBIQ74/1uvZr0y0kDTRPMRhPw2QN6iAohyG
qUFw+UTe6O8BRu4BzUWmWBp/MaSnuQcNNPN5pjFEBanZ2I5mBF+Av0e1suTalEoq
odb4QxPKt6+iuLY2meCOvqnd5K9HJqv/9Q6F6UroNI7try/WnipyFPwKyKVRwDwe
hAJnZHHzoQ2wdD+l25qS0mogPueewGkS+qo6C1ZzU7qYPm7kfbSo8KagcTgAkvfp
MKrmfV9My4c04uSkav7aAuGB4Q==
-----END CERTIFICATE-----
Generated at Thu Feb 19 11:42:09 2026 by rpki-client