Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a323030303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a323030303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          lvHjWgesWkQfY9a292eCzDAfiG0o/MsvR9ak7wvqgZo=
Subject key identifier:   90:6A:2E:19:3A:22:46:82:C1:15:E9:DD:85:28:FF:DF:24:4A:4A:B2
Certificate issuer:       /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial:       4C8ECC47ECEF96655E008FC3C87D6C8EF1CEBA55
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a323030303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Mon 16 Feb 2026 18:51:42 +0000
ROA not before:           Mon 16 Feb 2026 18:46:42 +0000
ROA not after:            Mon 15 Feb 2027 18:51:42 +0000
asID:                     263629
IP address blocks:        2804:104c:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:49:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8e:cc:47:ec:ef:96:65:5e:00:8f:c3:c8:7d:6c:8e:f1:ce:ba:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
        Validity
            Not Before: Feb 16 18:46:42 2026 GMT
            Not After : Feb 15 18:51:42 2027 GMT
        Subject: CN=906A2E193A224682C115E9DD8528FFDF244A4AB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:39:a1:87:bd:56:c9:6f:cd:f7:7f:7c:d9:ad:
                    b5:da:21:a3:e9:e6:ee:0c:61:21:15:e2:92:ea:d7:
                    55:9e:da:6b:b3:cd:90:97:e5:fc:06:0f:be:7d:d6:
                    8f:c3:62:02:92:61:15:c1:3a:76:e3:b8:a2:fc:6e:
                    af:09:49:bf:63:07:71:35:bb:15:3a:75:29:9f:b8:
                    86:ff:6f:0c:4a:52:bb:a0:e0:16:9e:21:e0:80:41:
                    47:3d:e3:2c:30:3e:36:d6:54:b3:8d:b1:2d:5d:17:
                    0f:eb:13:a5:31:96:63:48:c6:ef:3d:89:0f:25:5f:
                    9d:4f:03:52:82:48:bc:a0:3c:0d:f2:3d:56:6c:61:
                    da:9e:72:65:62:4d:25:c5:6f:54:dd:a1:90:28:f9:
                    ea:d0:a2:bf:3a:72:c1:fc:4d:5a:df:33:7a:65:22:
                    78:b6:60:fe:34:4f:d4:51:f4:68:dc:e1:b1:d9:3c:
                    e5:ac:68:9c:ad:7f:04:81:53:94:53:d3:1f:34:bc:
                    29:6d:56:7f:f4:67:43:20:f8:4a:22:be:7b:f2:44:
                    9c:62:c9:98:a2:bc:be:32:6e:22:f4:92:fc:62:14:
                    8a:f5:72:77:2a:79:fc:6e:2c:07:15:70:51:0c:10:
                    c0:19:b2:81:da:16:9e:3a:3e:ff:a3:28:af:0b:d5:
                    a7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6A:2E:19:3A:22:46:82:C1:15:E9:DD:85:28:FF:DF:24:4A:4A:B2
            X509v3 Authority Key Identifier:
                keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a323030303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         46:a9:f0:77:48:62:39:fc:00:12:7d:65:f3:7c:77:65:c0:aa:
         2d:66:c5:40:da:d7:d4:a2:21:57:f2:3e:c8:d5:5c:3f:ab:6a:
         71:bc:9b:e5:02:22:64:33:7b:c7:c0:ef:83:0d:81:30:65:05:
         5d:b6:4a:cf:55:03:11:dd:2a:b3:15:a7:ef:61:46:17:1e:37:
         9f:a0:63:aa:4f:ed:74:ee:03:29:f8:07:a7:cc:4d:c1:88:f4:
         2a:43:8c:a3:d4:27:70:e6:ab:93:e8:05:6d:4a:68:c0:1d:76:
         b3:3d:56:13:e4:0e:6e:93:0b:8b:44:f7:d6:94:bd:53:91:0f:
         1b:bc:07:ac:d4:eb:d8:fc:ac:ce:94:ad:51:27:3d:a9:83:85:
         72:da:2a:98:52:1c:d4:04:3e:60:21:ce:f0:5c:83:e9:0f:ab:
         c3:04:16:00:ac:92:c4:02:73:c0:d2:7e:37:55:ef:5f:44:02:
         6d:66:43:8c:29:55:8f:08:9c:f4:11:a7:e0:d5:c5:b4:6a:e7:
         b2:4b:a9:ea:9c:d6:89:9a:36:e8:27:ee:48:d2:84:97:0b:2e:
         47:35:46:9a:81:ec:d0:ca:6b:25:ac:18:46:3b:44:fb:fb:6e:
         0a:d8:14:d4:25:4e:1b:b7:0e:b1:8f:47:bc:42:8a:e6:0b:db:
         38:9d:cf:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:34:47 2026 by rpki-client