Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/323830343a366635343a3a2f33322d3334203d3e20323730363533.roa
File:                     323830343a366635343a3a2f33322d3334203d3e20323730363533.roa (raw, json)
Hash identifier:          q4vcU1W2SjTo/Q9Aw6V/b8Pe8fkWrbbNlWpZ0kkWz8k=
Subject key identifier:   D5:7D:54:DE:64:71:F8:C2:1F:CF:AF:BB:65:13:FA:AD:6B:E7:1A:A7
Certificate issuer:       /CN=E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF
Certificate serial:       1B3D8EB1B279DD2B6F3A5BAC2B69A650039FA1DB
Authority key identifier: E9:FF:1A:E1:1B:5D:C6:20:AA:13:1F:F8:B3:71:B9:CF:5E:78:68:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/323830343a366635343a3a2f33322d3334203d3e20323730363533.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     270653
IP address blocks:        2804:6f54::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.crl
                          rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3d:8e:b1:b2:79:dd:2b:6f:3a:5b:ac:2b:69:a6:50:03:9f:a1:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=D57D54DE6471F8C21FCFAFBB6513FAAD6BE71AA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5a:93:61:9d:91:17:32:b3:87:02:15:cc:9b:
                    d0:c2:e0:70:95:1b:ca:16:a8:d7:f5:48:24:1c:68:
                    e8:6f:18:b8:4a:b1:31:1e:de:08:8e:3a:f3:12:ee:
                    3f:8f:12:f4:21:3e:0d:91:81:4c:4f:92:80:ff:31:
                    3c:24:a0:21:08:a5:e8:a9:f7:5c:e3:78:55:2b:34:
                    07:61:f7:15:ca:cc:d2:29:e7:53:fb:1b:d8:29:41:
                    11:42:1d:9d:4e:27:ef:85:49:b2:74:a1:9d:ea:8f:
                    1e:e9:9c:6a:05:ba:2f:dc:bd:b9:e2:80:b2:5a:70:
                    d3:41:09:4a:4b:6f:80:10:19:12:6f:7d:1b:ca:dc:
                    fc:fe:8e:50:1a:7e:fb:a1:b1:33:e8:ef:4d:95:09:
                    9f:99:85:b6:f5:08:c1:62:37:7c:3c:56:0f:ad:21:
                    1b:d2:3f:96:b3:14:ac:a0:71:18:d1:ff:44:14:7f:
                    dc:74:70:8c:40:35:41:88:88:b3:ee:1c:cd:aa:f4:
                    70:f8:3a:0d:e4:ce:9e:9b:9d:ac:eb:18:4e:22:4b:
                    4e:a1:4a:36:97:33:70:68:64:6c:54:f7:da:5c:de:
                    e9:47:f1:19:ce:43:03:46:8f:8e:fc:5f:99:66:19:
                    84:e3:fa:b9:e7:c5:3f:0f:02:cd:e8:0f:2c:24:d9:
                    40:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7D:54:DE:64:71:F8:C2:1F:CF:AF:BB:65:13:FA:AD:6B:E7:1A:A7
            X509v3 Authority Key Identifier:
                keyid:E9:FF:1A:E1:1B:5D:C6:20:AA:13:1F:F8:B3:71:B9:CF:5E:78:68:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/323830343a366635343a3a2f33322d3334203d3e20323730363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f54::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:0c:94:58:44:20:60:c3:8e:36:ca:5e:7a:94:4d:74:8b:b9:
         2f:1a:f3:ab:73:48:46:34:6f:fa:07:16:18:a2:50:92:23:04:
         fe:af:76:78:57:30:a0:19:e9:eb:a5:30:e7:8d:68:5c:af:bd:
         17:61:e9:8b:b0:03:51:68:0f:cd:50:76:07:40:18:35:93:66:
         3e:66:34:30:52:84:24:c4:4a:12:92:5d:ee:58:ce:49:09:60:
         d4:2e:7f:fa:2c:5c:54:a1:64:8b:36:e7:aa:ed:fa:d5:a4:3e:
         53:cb:c4:81:47:28:58:ed:69:4e:cd:88:df:73:5d:c6:2c:9b:
         1a:38:dc:d1:04:01:a7:93:d2:3c:dc:6f:bf:6c:bf:66:8f:77:
         ce:99:a3:11:31:23:d5:07:8b:f0:c8:fb:1f:68:1b:7b:18:e6:
         55:2e:24:03:64:4f:23:97:a5:b2:c6:b8:96:9e:10:2a:36:bd:
         e5:79:10:e3:88:ca:01:78:62:86:71:22:a7:f5:b3:dc:04:25:
         0d:af:20:bf:d9:cb:82:d3:c6:76:1b:3d:39:3e:47:fe:fc:22:
         f3:50:92:a0:42:a5:72:32:76:e8:b4:b7:bd:c3:55:6f:20:62:
         37:43:21:fe:a7:56:4f:5c:24:ab:ef:65:47:d5:d1:b5:27:b6:
         6f:39:53:15
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUGz2OsbJ53StvOlusK2mmUAOfodswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlGRjFBRTExQjVEQzYyMEFBMTMxRkY4QjM3MUI5Q0Y1
RTc4NjhDRjAeFw0yNjAyMDQxODU1MDBaFw0yNzAyMDMxOTAwMDBaMDMxMTAvBgNV
BAMTKEQ1N0Q1NERFNjQ3MUY4QzIxRkNGQUZCQjY1MTNGQUFENkJFNzFBQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSWpNhnZEXMrOHAhXMm9DC4HCV
G8oWqNf1SCQcaOhvGLhKsTEe3giOOvMS7j+PEvQhPg2RgUxPkoD/MTwkoCEIpeip
91zjeFUrNAdh9xXKzNIp51P7G9gpQRFCHZ1OJ++FSbJ0oZ3qjx7pnGoFui/cvbni
gLJacNNBCUpLb4AQGRJvfRvK3Pz+jlAafvuhsTPo702VCZ+Zhbb1CMFiN3w8Vg+t
IRvSP5azFKygcRjR/0QUf9x0cIxANUGIiLPuHM2q9HD4Og3kzp6bnazrGE4iS06h
SjaXM3BoZGxU99pc3ulH8RnOQwNGj478X5lmGYTj+rnnxT8PAs3oDywk2UATAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU1X1U3mRx+MIfz6+7ZRP6rWvnGqcwHwYDVR0j
BBgwFoAU6f8a4RtdxiCqEx/4s3G5z154aM8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkJIeVNrY1lpUGNjTm90TVd3c0VmTmhVWnkySnpWM1NVQzU1SlhRdGsz
SnYvMS9FOUZGMUFFMTFCNURDNjIwQUExMzFGRjhCMzcxQjlDRjVFNzg2OENGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U5RkYxQUUxMUI1REM2MjBB
QTEzMUZGOEIzNzFCOUNGNUU3ODY4Q0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JCSHlTa2NZaVBjY05vdE1Xd3NFZk5oVVp5Mkp6VjNTVUM1NUpYUXRrM0p2LzEv
MzIzODMwMzQzYTM2NjYzNTM0M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNzMw
MzYzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARvVDANBgkqhkiG9w0BAQsFAAOCAQEACgyUWEQg
YMOONspeepRNdIu5Lxrzq3NIRjRv+gcWGKJQkiME/q92eFcwoBnp66Uw541oXK+9
F2Hpi7ADUWgPzVB2B0AYNZNmPmY0MFKEJMRKEpJd7ljOSQlg1C5/+ixcVKFkizbn
qu361aQ+U8vEgUcoWO1pTs2I33NdxiybGjjc0QQBp5PSPNxvv2y/Zo93zpmjETEj
1QeL8Mj7H2gbexjmVS4kA2RPI5elssa4lp4QKja95XkQ44jKAXhihnEip/Wz3AQl
Da8gv9nLgtPGdhs9OT5H/vwi81CSoEKlcjJ26LS3vcNVbyBiN0Mh/qdWT1wkq+9l
R9XRtSe2bzlTFQ==
-----END CERTIFICATE-----
Generated at Thu Feb 19 14:22:36 2026 by rpki-client