Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a3a2f34342d3434203d3e20323633393935.roa
File:                     323830343a323931303a3a2f34342d3434203d3e20323633393935.roa (raw, json)
Hash identifier:          G/7JQiqvj+iDOcbheR4QNYsI9ApBJ+YPaj72AXRDroc=
Subject key identifier:   42:EC:E2:F0:41:2C:05:DC:05:2A:20:A4:C6:18:DF:55:39:DB:C4:78
Certificate issuer:       /CN=F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4
Certificate serial:       1171D5EFC9B2BC4C779E406EEB1D9D15AFD55BCB
Authority key identifier: F5:FD:FF:F7:EB:44:AA:11:B6:41:9F:C8:3D:FF:9C:70:46:54:3E:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a3a2f34342d3434203d3e20323633393935.roa
Signing time:             Thu 12 Feb 2026 16:28:43 +0000
ROA not before:           Thu 12 Feb 2026 16:23:43 +0000
ROA not after:            Thu 11 Feb 2027 16:28:43 +0000
asID:                     263995
IP address blocks:        2804:2910::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.crl
                          rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:71:d5:ef:c9:b2:bc:4c:77:9e:40:6e:eb:1d:9d:15:af:d5:5b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4
        Validity
            Not Before: Feb 12 16:23:43 2026 GMT
            Not After : Feb 11 16:28:43 2027 GMT
        Subject: CN=42ECE2F0412C05DC052A20A4C618DF5539DBC478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:a6:d5:30:a3:ce:22:6f:87:75:d3:ed:60:
                    05:8f:d6:61:ee:d3:cb:d7:82:c8:8f:4b:d3:b7:2a:
                    3a:10:86:42:84:4c:ab:34:1c:a8:09:fb:f7:09:db:
                    c6:e0:1e:be:ae:9b:26:9a:94:01:f1:93:6e:a6:da:
                    05:a9:a5:c3:f8:0c:e5:d7:60:f5:1b:71:6b:c4:d7:
                    7c:c0:47:ca:55:60:bc:ec:cf:08:68:92:e8:bc:ce:
                    98:94:5f:22:19:03:77:b9:80:aa:3a:7b:41:4b:9a:
                    97:63:9e:38:e2:e5:ab:b1:10:9d:e7:0a:e3:89:f5:
                    7c:36:e7:e9:5b:24:84:d3:17:dc:db:42:1a:a5:9e:
                    12:c1:63:06:aa:25:b2:ce:ae:37:89:c3:a7:ed:84:
                    df:78:61:7f:34:1a:fd:1c:21:06:01:f2:f9:5b:76:
                    ea:48:be:f0:a1:15:d7:39:ea:84:aa:41:9b:be:95:
                    ba:be:10:c4:ae:0b:78:d5:73:0d:c4:8e:6f:71:41:
                    eb:43:2b:be:f7:ff:d3:ae:d1:e1:f5:85:5e:c1:9c:
                    c8:86:28:44:a6:bc:c2:d6:fe:fe:6b:cd:68:aa:52:
                    74:d2:b4:35:8c:ed:e7:9d:e3:66:7c:b3:2a:54:df:
                    a5:e6:df:5a:b9:55:85:65:c4:f3:ae:91:53:f0:99:
                    7c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EC:E2:F0:41:2C:05:DC:05:2A:20:A4:C6:18:DF:55:39:DB:C4:78
            X509v3 Authority Key Identifier:
                keyid:F5:FD:FF:F7:EB:44:AA:11:B6:41:9F:C8:3D:FF:9C:70:46:54:3E:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a3a2f34342d3434203d3e20323633393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2910::/44

    Signature Algorithm: sha256WithRSAEncryption
         90:71:24:f3:a0:9c:93:7c:26:fd:93:2c:ce:f5:22:30:d5:ed:
         c9:42:2f:ea:b5:59:3f:13:14:41:98:20:b0:68:55:9d:34:7a:
         85:4c:cd:d6:91:af:40:81:90:94:76:39:35:31:a9:ff:03:a5:
         c2:53:d6:9d:96:fc:2d:bf:7a:fe:ea:b1:96:a0:05:49:9e:3e:
         dc:4d:36:d5:d6:42:49:b2:4c:01:2f:33:23:38:cc:98:0e:27:
         14:8d:54:09:64:5f:8e:a7:db:7b:8c:12:ba:dd:54:67:a9:af:
         ea:a1:99:a1:54:81:66:65:c7:2e:cb:63:1e:54:cf:a1:65:f9:
         2c:4a:6b:d9:47:aa:20:a7:bb:5d:e2:7c:8d:7a:af:ce:b8:40:
         e5:87:6b:b9:c7:f6:cb:a4:4c:25:da:86:30:fa:f7:9c:3c:34:
         e7:4e:9b:b0:62:14:e2:2e:36:e9:e7:60:d7:f8:2a:83:c0:95:
         21:58:d9:c0:e7:5b:20:9f:ab:4e:78:38:01:c0:fc:cc:6f:35:
         2e:9b:7a:44:05:25:27:88:2e:e4:c1:6e:52:55:e5:26:07:ec:
         3e:1e:b7:c9:4a:9b:e8:67:e6:f7:20:f1:83:1d:56:0a:9c:74:
         74:47:1f:61:34:0e:9b:43:b4:a3:25:69:51:25:71:d5:46:2f:
         2d:49:76:7d
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUEXHV78myvEx3nkBu6x2dFa/VW8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVGREZGRjdFQjQ0QUExMUI2NDE5RkM4M0RGRjlDNzA0
NjU0M0VDNDAeFw0yNjAyMTIxNjIzNDNaFw0yNzAyMTExNjI4NDNaMDMxMTAvBgNV
BAMTKDQyRUNFMkYwNDEyQzA1REMwNTJBMjBBNEM2MThERjU1MzlEQkM0NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6v6bVMKPOIm+HddPtYAWP1mHu
08vXgsiPS9O3KjoQhkKETKs0HKgJ+/cJ28bgHr6umyaalAHxk26m2gWppcP4DOXX
YPUbcWvE13zAR8pVYLzszwhokui8zpiUXyIZA3e5gKo6e0FLmpdjnjji5auxEJ3n
CuOJ9Xw25+lbJITTF9zbQhqlnhLBYwaqJbLOrjeJw6fthN94YX80Gv0cIQYB8vlb
dupIvvChFdc56oSqQZu+lbq+EMSuC3jVcw3Ejm9xQetDK773/9Ou0eH1hV7BnMiG
KESmvMLW/v5rzWiqUnTStDWM7eed42Z8sypU36Xm31q5VYVlxPOukVPwmXx1AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUQuzi8EEsBdwFKiCkxhjfVTnbxHgwHwYDVR0j
BBgwFoAU9f3/9+tEqhG2QZ/IPf+ccEZUPsQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUZoVHBHQnBvV0FMZHBGeUpWcXRTTW91a0VBOXRxOUhZaVd3SFBFakNV
SFMvMC9GNUZERkZGN0VCNDRBQTExQjY0MTlGQzgzREZGOUM3MDQ2NTQzRUM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1RkRGRkY3RUI0NEFBMTFC
NjQxOUZDODNERkY5QzcwNDY1NDNFQzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FGaFRwR0Jwb1dBTGRwRnlKVnF0U01vdWtFQTl0cTlIWWlXd0hQRWpDVUhTLzAv
MzIzODMwMzQzYTMyMzkzMTMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIzNjMz
MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcEKAQpEAAAMA0GCSqGSIb3DQEBCwUAA4IBAQCQcSTz
oJyTfCb9kyzO9SIw1e3JQi/qtVk/ExRBmCCwaFWdNHqFTM3Wka9AgZCUdjk1Man/
A6XCU9adlvwtv3r+6rGWoAVJnj7cTTbV1kJJskwBLzMjOMyYDicUjVQJZF+Op9t7
jBK63VRnqa/qoZmhVIFmZccuy2MeVM+hZfksSmvZR6ogp7td4nyNeq/OuEDlh2u5
x/bLpEwl2oYw+vecPDTnTpuwYhTiLjbp52DX+CqDwJUhWNnA51sgn6tOeDgBwPzM
bzUum3pEBSUniC7kwW5SVeUmB+w+HrfJSpvoZ+b3IPGDHVYKnHR0Rx9hNA6bQ7Sj
JWlRJXHVRi8tSXZ9
-----END CERTIFICATE-----
Generated at Thu Feb 19 07:21:28 2026 by rpki-client