Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a326330303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a326330303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          13JcyPqg0hF2TvMvO6DQ3Am1CrnnowwtFhjBaf5d/Co=
Subject key identifier:   79:5F:A4:80:42:E4:56:CB:B2:01:BA:8C:29:40:32:18:5B:48:6A:DD
Certificate issuer:       /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial:       54677650AABF340C188A244FCB40AD9BEA302FC1
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a326330303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Mon 16 Feb 2026 18:51:48 +0000
ROA not before:           Mon 16 Feb 2026 18:46:48 +0000
ROA not after:            Mon 15 Feb 2027 18:51:48 +0000
asID:                     263629
IP address blocks:        2804:104c:2c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:67:76:50:aa:bf:34:0c:18:8a:24:4f:cb:40:ad:9b:ea:30:2f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
        Validity
            Not Before: Feb 16 18:46:48 2026 GMT
            Not After : Feb 15 18:51:48 2027 GMT
        Subject: CN=795FA48042E456CBB201BA8C294032185B486ADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f2:ef:84:e6:f8:f2:9a:7f:ec:27:d5:b4:e2:
                    56:ff:8a:58:8f:f6:6b:10:82:c0:a7:22:7e:3a:21:
                    00:bf:c1:14:0a:6f:0c:18:ae:17:9a:8d:0f:10:da:
                    45:87:dc:dc:c3:6b:43:35:c4:16:97:52:ab:d2:6a:
                    d3:7e:1e:09:f2:c8:72:7c:c9:6d:0b:36:30:d8:25:
                    cb:50:7a:c6:93:7a:6f:ec:b2:14:9f:5b:99:d3:7e:
                    75:a9:28:f4:cd:b1:a4:82:46:01:7e:36:b5:ab:be:
                    41:51:ec:30:38:c7:21:a6:9c:7c:78:45:0f:55:e6:
                    03:43:98:20:5c:b7:c2:9a:89:35:7b:16:5e:68:63:
                    b6:11:2c:db:bd:f1:e9:85:bc:a1:aa:5e:40:22:d4:
                    e2:9f:04:65:0d:be:5e:99:f1:ce:7b:a6:05:ab:c0:
                    68:2a:bd:62:9e:a9:df:04:03:c3:60:90:17:7a:54:
                    bb:c9:94:c5:2e:0d:7c:1f:a1:0d:ff:95:19:ef:7e:
                    8a:06:67:cf:51:fa:a8:d0:25:05:d2:e7:e2:ee:4f:
                    e3:31:27:9c:ab:6e:bc:e8:fb:20:8b:65:b8:0a:1e:
                    58:af:58:6b:28:e3:40:a5:cd:10:e5:4d:d9:7a:d8:
                    db:75:03:83:4a:43:f9:43:40:53:aa:03:08:4e:b0:
                    f7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5F:A4:80:42:E4:56:CB:B2:01:BA:8C:29:40:32:18:5B:48:6A:DD
            X509v3 Authority Key Identifier:
                keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a326330303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:2c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         41:2f:c6:b4:5e:24:7e:9d:52:13:9b:4b:72:bc:2f:65:62:62:
         a3:ef:15:51:50:8c:38:2a:58:47:fc:6b:22:48:86:a7:5e:f9:
         2d:e9:30:39:fb:46:1c:c3:e4:4d:d2:21:6a:ab:59:1c:77:ff:
         c0:b1:bb:da:a2:40:08:18:ed:cc:ab:a6:ac:92:3a:69:c8:f1:
         80:dc:3a:01:b8:b0:8a:9d:c6:42:d5:f8:94:00:a6:75:3e:3d:
         14:62:5b:c0:b5:a4:99:91:1e:18:53:8e:ba:e2:e5:6b:2d:82:
         d1:3e:b8:94:ce:26:0d:ae:ec:9c:81:e0:2b:44:a5:05:ac:97:
         50:58:ac:71:8c:90:88:a4:27:70:01:7b:d6:8b:d4:a5:da:65:
         bd:17:13:4c:1f:05:c2:bb:62:fc:64:f2:a9:a2:0f:fb:a5:40:
         9f:6b:99:06:40:9d:9b:4e:56:19:8d:3e:ba:15:ee:d8:eb:cc:
         8b:be:b9:ec:51:e1:fa:74:f3:ce:06:9d:3f:05:4b:2e:4c:fb:
         4c:c2:00:ff:d5:0f:d3:4f:30:84:48:57:49:c9:9b:5c:44:dd:
         6a:c3:f1:93:a0:a5:93:cb:a0:0d:28:ba:4b:0c:d8:70:bb:a2:
         14:92:2f:8a:55:89:a7:43:8e:bd:ac:4f:b6:2b:55:61:a9:72:
         c4:f8:b6:e0
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVGd2UKq/NAwYiiRPy0Ctm+owL8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM5MjVBNzhGOEJGQ0I2MjBDODBDQzhGQUQ0N0Y1RjMw
MkVGRkJDRDAeFw0yNjAyMTYxODQ2NDhaFw0yNzAyMTUxODUxNDhaMDMxMTAvBgNV
BAMTKDc5NUZBNDgwNDJFNDU2Q0JCMjAxQkE4QzI5NDAzMjE4NUI0ODZBREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD8u+E5vjymn/sJ9W04lb/iliP
9msQgsCnIn46IQC/wRQKbwwYrheajQ8Q2kWH3NzDa0M1xBaXUqvSatN+HgnyyHJ8
yW0LNjDYJctQesaTem/sshSfW5nTfnWpKPTNsaSCRgF+NrWrvkFR7DA4xyGmnHx4
RQ9V5gNDmCBct8KaiTV7Fl5oY7YRLNu98emFvKGqXkAi1OKfBGUNvl6Z8c57pgWr
wGgqvWKeqd8EA8NgkBd6VLvJlMUuDXwfoQ3/lRnvfooGZ89R+qjQJQXS5+LuT+Mx
J5yrbrzo+yCLZbgKHlivWGso40ClzRDlTdl62Nt1A4NKQ/lDQFOqAwhOsPdZAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUeV+kgELkVsuyAbqMKUAyGFtIat0wHwYDVR0j
BBgwFoAU7JJaePi/y2IMgMyPrUf18wLv+80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmhOTlpuWWNBZGROQ0JuVW1uV3JDRzRhajJvdkpaSGJKcTlNbVJndzlj
WGsvMC9FQzkyNUE3OEY4QkZDQjYyMEM4MENDOEZBRDQ3RjVGMzAyRUZGQkNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDOTI1QTc4RjhCRkNCNjIw
QzgwQ0M4RkFENDdGNUYzMDJFRkZCQ0QuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JoTk5ablljQWRkTkNCblVtbldyQ0c0YWoyb3ZKWkhiSnE5TW1SZ3c5Y1hrLzAv
MzIzODMwMzQzYTMxMzAzNDYzM2EzMjYzMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzMzM2MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEEEwsMA0GCSqGSIb3DQEBCwUA
A4IBAQBBL8a0XiR+nVITm0tyvC9lYmKj7xVRUIw4KlhH/GsiSIanXvkt6TA5+0Yc
w+RN0iFqq1kcd//AsbvaokAIGO3Mq6askjppyPGA3DoBuLCKncZC1fiUAKZ1Pj0U
YlvAtaSZkR4YU4664uVrLYLRPriUziYNruycgeArRKUFrJdQWKxxjJCIpCdwAXvW
i9Sl2mW9FxNMHwXCu2L8ZPKpog/7pUCfa5kGQJ2bTlYZjT66Fe7Y68yLvrnsUeH6
dPPOBp0/BUsuTPtMwgD/1Q/TTzCESFdJyZtcRN1qw/GToKWTy6ANKLpLDNhwu6IU
ki+KVYmnQ469rE+2K1VhqXLE+Lbg
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:24:44 2026 by rpki-client