Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a32303a3a2f34342d3434203d3e20323633393935.roa
File:                     323830343a323931303a32303a3a2f34342d3434203d3e20323633393935.roa (raw, json)
Hash identifier:          dc34G4NJwyfK98rm9/uZnsA2hEjeyo4QYTlDm/g7r/I=
Subject key identifier:   19:97:E2:CB:24:39:4E:30:FE:03:69:9E:D1:E2:75:65:2E:EB:50:FE
Certificate issuer:       /CN=F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4
Certificate serial:       5D98DCB9BAD676B1149C577683D2690A0CEEE549
Authority key identifier: F5:FD:FF:F7:EB:44:AA:11:B6:41:9F:C8:3D:FF:9C:70:46:54:3E:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a32303a3a2f34342d3434203d3e20323633393935.roa
Signing time:             Thu 12 Feb 2026 16:28:45 +0000
ROA not before:           Thu 12 Feb 2026 16:23:45 +0000
ROA not after:            Thu 11 Feb 2027 16:28:45 +0000
asID:                     263995
IP address blocks:        2804:2910:20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.crl
                          rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:98:dc:b9:ba:d6:76:b1:14:9c:57:76:83:d2:69:0a:0c:ee:e5:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4
        Validity
            Not Before: Feb 12 16:23:45 2026 GMT
            Not After : Feb 11 16:28:45 2027 GMT
        Subject: CN=1997E2CB24394E30FE03699ED1E275652EEB50FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:68:5c:eb:51:00:b6:f7:14:ee:70:bb:76:58:
                    a6:24:45:25:91:33:54:03:6e:75:84:db:bf:b8:1a:
                    12:f9:d9:7f:b8:11:26:b2:5e:b2:2b:43:0d:15:db:
                    43:91:4d:2c:ff:0f:b6:61:54:cc:a6:00:71:b1:28:
                    2d:ca:4b:32:02:05:73:97:4e:6f:2f:5f:a0:28:b4:
                    75:d3:71:ae:f4:de:0a:39:dd:b7:22:f8:15:fc:79:
                    81:71:89:57:29:3b:8d:6a:f6:81:ff:18:a1:c9:f1:
                    da:d1:9a:9d:8b:69:fb:92:9d:db:31:9b:9c:6e:e2:
                    3a:ba:db:d7:0b:a9:9b:22:31:e9:55:d0:30:c8:6e:
                    25:cf:59:ac:ba:ca:ed:e6:2b:d0:f7:d7:8a:4e:12:
                    eb:c0:a8:3c:25:fa:35:c0:f6:80:e6:57:52:15:3c:
                    13:83:0e:3b:98:51:60:6b:67:f8:8f:ab:d7:63:70:
                    5e:a2:1a:67:27:80:7e:fe:8a:b1:2f:fd:68:f7:d3:
                    51:b4:7c:e6:6c:c5:be:56:45:69:ca:85:6d:3b:aa:
                    81:e9:28:8e:43:e0:16:86:17:f2:d7:d1:04:71:c4:
                    00:6a:a1:19:78:ae:35:19:8c:69:e8:2d:8f:8f:0a:
                    0e:41:18:c5:ae:a5:d8:02:17:15:c8:c8:04:a8:63:
                    8e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:97:E2:CB:24:39:4E:30:FE:03:69:9E:D1:E2:75:65:2E:EB:50:FE
            X509v3 Authority Key Identifier:
                keyid:F5:FD:FF:F7:EB:44:AA:11:B6:41:9F:C8:3D:FF:9C:70:46:54:3E:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a32303a3a2f34342d3434203d3e20323633393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2910:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         00:30:21:f8:a5:19:dc:9a:0f:f0:27:f0:eb:56:6f:67:be:50:
         0b:3d:4b:a3:5d:62:27:5f:e2:5e:83:d1:21:d7:ec:74:9f:10:
         d5:ad:ff:ad:d9:37:61:57:0f:66:f5:6c:9a:c1:c2:31:8f:4e:
         02:86:5f:0a:d4:2a:d9:4b:73:ae:14:f8:12:da:2b:9d:31:9d:
         93:fd:c4:ee:d4:7a:a3:4f:a8:4f:06:77:3b:30:d2:4f:9f:e5:
         a1:c1:c3:9c:67:45:e1:18:5d:ee:53:8c:8e:a6:09:70:45:13:
         b2:b5:a4:74:98:7f:6f:8d:ca:23:e3:4d:bd:a1:00:36:8d:75:
         fc:90:93:ee:c4:a6:6b:07:0f:00:6e:1a:8a:1e:75:81:34:ef:
         8f:c7:7b:ed:eb:75:a6:69:17:74:16:ef:16:7b:f4:82:31:87:
         16:8a:2b:a5:c3:5a:4f:55:ac:5d:c3:04:b4:12:36:3a:4b:74:
         06:ed:88:3a:8e:d1:96:a1:0c:93:04:04:60:b8:e6:5b:c7:a3:
         d7:ac:ea:c6:db:aa:cb:9b:de:97:7f:fa:a6:54:d1:e6:d9:a6:
         0f:eb:31:18:55:74:3d:82:14:91:39:ce:f8:a5:d4:c6:8a:a6:
         e8:e7:84:ca:72:d0:aa:6a:d2:a2:d8:27:ec:4a:85:f3:f9:c1:
         de:17:34:98
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUXZjcubrWdrEUnFd2g9JpCgzu5UkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVGREZGRjdFQjQ0QUExMUI2NDE5RkM4M0RGRjlDNzA0
NjU0M0VDNDAeFw0yNjAyMTIxNjIzNDVaFw0yNzAyMTExNjI4NDVaMDMxMTAvBgNV
BAMTKDE5OTdFMkNCMjQzOTRFMzBGRTAzNjk5RUQxRTI3NTY1MkVFQjUwRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbaFzrUQC29xTucLt2WKYkRSWR
M1QDbnWE27+4GhL52X+4ESayXrIrQw0V20ORTSz/D7ZhVMymAHGxKC3KSzICBXOX
Tm8vX6AotHXTca703go53bci+BX8eYFxiVcpO41q9oH/GKHJ8drRmp2LafuSndsx
m5xu4jq629cLqZsiMelV0DDIbiXPWay6yu3mK9D314pOEuvAqDwl+jXA9oDmV1IV
PBODDjuYUWBrZ/iPq9djcF6iGmcngH7+irEv/Wj301G0fOZsxb5WRWnKhW07qoHp
KI5D4BaGF/LX0QRxxABqoRl4rjUZjGnoLY+PCg5BGMWupdgCFxXIyASoY46DAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUGZfiyyQ5TjD+A2me0eJ1ZS7rUP4wHwYDVR0j
BBgwFoAU9f3/9+tEqhG2QZ/IPf+ccEZUPsQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUZoVHBHQnBvV0FMZHBGeUpWcXRTTW91a0VBOXRxOUhZaVd3SFBFakNV
SFMvMC9GNUZERkZGN0VCNDRBQTExQjY0MTlGQzgzREZGOUM3MDQ2NTQzRUM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1RkRGRkY3RUI0NEFBMTFC
NjQxOUZDODNERkY5QzcwNDY1NDNFQzQuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FGaFRwR0Jwb1dBTGRwRnlKVnF0U01vdWtFQTl0cTlIWWlXd0hQRWpDVUhTLzAv
MzIzODMwMzQzYTMyMzkzMTMwM2EzMjMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIw
MzIzNjMzMzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKAQpEAAgMA0GCSqGSIb3DQEBCwUAA4IB
AQAAMCH4pRncmg/wJ/DrVm9nvlALPUujXWInX+Jeg9Eh1+x0nxDVrf+t2TdhVw9m
9WyawcIxj04Chl8K1CrZS3OuFPgS2iudMZ2T/cTu1HqjT6hPBnc7MNJPn+WhwcOc
Z0XhGF3uU4yOpglwRROytaR0mH9vjcoj4029oQA2jXX8kJPuxKZrBw8AbhqKHnWB
NO+Px3vt63WmaRd0Fu8We/SCMYcWiiulw1pPVaxdwwS0EjY6S3QG7Yg6jtGWoQyT
BARguOZbx6PXrOrG26rLm96Xf/qmVNHm2aYP6zEYVXQ9ghSROc74pdTGiqbo54TK
ctCqatKi2CfsSoXz+cHeFzSY
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:25:15 2026 by rpki-client