Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a363430303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a363430303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          jIQk8uWPblSYpBrEyFg/peej0XfdoiC/j4d9pdKdB6s=
Subject key identifier:   A0:D8:02:65:1D:74:17:12:43:21:8D:95:51:F1:46:1C:20:23:F2:66
Certificate issuer:       /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial:       0608AE245BB2698E953F41F8DD4E3B0CF4C4E8DB
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a363430303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Mon 16 Feb 2026 18:52:01 +0000
ROA not before:           Mon 16 Feb 2026 18:47:01 +0000
ROA not after:            Mon 15 Feb 2027 18:52:01 +0000
asID:                     263629
IP address blocks:        2804:104c:6400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:08:ae:24:5b:b2:69:8e:95:3f:41:f8:dd:4e:3b:0c:f4:c4:e8:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
        Validity
            Not Before: Feb 16 18:47:01 2026 GMT
            Not After : Feb 15 18:52:01 2027 GMT
        Subject: CN=A0D802651D74171243218D9551F1461C2023F266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cb:b6:14:39:51:94:39:a8:db:36:d2:60:a3:
                    ef:d7:51:50:6e:61:b9:5f:51:50:8c:2d:20:e4:6b:
                    4a:b2:24:09:0f:38:37:6a:70:ce:af:64:74:04:e9:
                    52:23:98:d3:b4:87:13:0d:8a:d2:90:46:f7:b1:ee:
                    32:9a:bb:2b:c4:c7:52:45:38:d4:10:b6:c6:65:82:
                    81:11:24:dc:34:76:35:ae:2f:bb:62:20:9e:b4:56:
                    aa:d5:56:56:dc:15:43:59:8b:e2:eb:3e:93:5c:96:
                    5f:c9:1a:e0:e2:17:b3:24:b6:75:10:bd:0f:f5:09:
                    e0:52:f4:a8:01:8f:f2:04:b0:20:48:7c:bd:fb:c7:
                    66:bc:57:27:a9:0a:4f:aa:46:50:cb:0a:6f:e0:9c:
                    fc:ee:c9:6c:1b:47:ac:8d:4f:66:6d:ee:49:f4:e1:
                    b3:b3:13:62:e2:37:f6:23:54:d0:24:96:b1:04:9e:
                    cc:63:26:79:34:7d:e3:7a:68:17:91:0f:1c:17:fa:
                    78:41:7b:b4:3e:7d:b6:41:d8:f3:78:bd:99:a4:6a:
                    50:d0:90:0e:23:9d:0b:c7:fb:53:bf:79:7a:55:54:
                    96:cb:31:9f:e2:f3:0f:53:65:82:a0:31:5a:97:72:
                    1a:a7:2a:21:6e:ec:ed:2f:61:9b:43:d2:95:d3:a0:
                    48:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D8:02:65:1D:74:17:12:43:21:8D:95:51:F1:46:1C:20:23:F2:66
            X509v3 Authority Key Identifier:
                keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a363430303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:6400::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:05:a5:c6:b5:74:af:2d:25:c1:f4:9e:1b:3b:72:f0:ef:c1:
         a4:5e:2b:4e:cf:bd:77:2d:e8:65:8a:7f:f7:6f:52:5c:80:0d:
         d6:90:70:7a:88:a9:34:41:d1:95:ef:fe:52:fe:3a:20:19:24:
         f9:a6:38:29:bb:77:3b:e1:2e:8e:5f:ca:07:5d:5b:53:ce:b0:
         86:0b:7c:23:6c:b5:93:9e:95:27:39:1a:34:a3:88:4a:4b:66:
         f7:05:f8:47:4c:e2:ff:58:c8:55:4b:cd:f0:1e:4d:f0:64:b3:
         41:74:59:eb:b1:bc:74:9a:6d:7d:36:86:fd:ab:71:6f:21:3f:
         99:28:e7:69:18:e2:67:a1:ba:6d:d0:c2:06:fd:f0:b8:87:2c:
         0c:96:f1:dc:d2:2e:c0:81:10:e4:e4:97:11:13:6c:4e:a8:6c:
         0d:cb:35:a5:b3:c3:fb:5a:31:6f:61:f2:3b:ae:b9:29:b2:52:
         67:08:c3:95:c4:75:23:5d:ca:67:99:3c:56:a4:88:ba:9a:e4:
         0a:78:46:3f:b0:a1:4e:d8:3f:30:d1:97:65:b7:d7:a0:22:91:
         c9:1e:87:3e:93:34:30:3c:0d:5d:e8:06:93:b3:42:05:df:68:
         84:22:2d:e0:be:79:1b:93:68:ef:45:ae:4c:44:ef:7f:12:44:
         8b:fd:d8:1f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBgiuJFuyaY6VP0H43U47DPTE6NswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM5MjVBNzhGOEJGQ0I2MjBDODBDQzhGQUQ0N0Y1RjMw
MkVGRkJDRDAeFw0yNjAyMTYxODQ3MDFaFw0yNzAyMTUxODUyMDFaMDMxMTAvBgNV
BAMTKEEwRDgwMjY1MUQ3NDE3MTI0MzIxOEQ5NTUxRjE0NjFDMjAyM0YyNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDey7YUOVGUOajbNtJgo+/XUVBu
YblfUVCMLSDka0qyJAkPODdqcM6vZHQE6VIjmNO0hxMNitKQRvex7jKauyvEx1JF
ONQQtsZlgoERJNw0djWuL7tiIJ60VqrVVlbcFUNZi+LrPpNcll/JGuDiF7MktnUQ
vQ/1CeBS9KgBj/IEsCBIfL37x2a8VyepCk+qRlDLCm/gnPzuyWwbR6yNT2Zt7kn0
4bOzE2LiN/YjVNAklrEEnsxjJnk0feN6aBeRDxwX+nhBe7Q+fbZB2PN4vZmkalDQ
kA4jnQvH+1O/eXpVVJbLMZ/i8w9TZYKgMVqXchqnKiFu7O0vYZtD0pXToEjvAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUoNgCZR10FxJDIY2VUfFGHCAj8mYwHwYDVR0j
BBgwFoAU7JJaePi/y2IMgMyPrUf18wLv+80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmhOTlpuWWNBZGROQ0JuVW1uV3JDRzRhajJvdkpaSGJKcTlNbVJndzlj
WGsvMC9FQzkyNUE3OEY4QkZDQjYyMEM4MENDOEZBRDQ3RjVGMzAyRUZGQkNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDOTI1QTc4RjhCRkNCNjIw
QzgwQ0M4RkFENDdGNUYzMDJFRkZCQ0QuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JoTk5ablljQWRkTkNCblVtbldyQ0c0YWoyb3ZKWkhiSnE5TW1SZ3c5Y1hrLzAv
MzIzODMwMzQzYTMxMzAzNDYzM2EzNjM0MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzMzM2MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEEExkMA0GCSqGSIb3DQEBCwUA
A4IBAQAmBaXGtXSvLSXB9J4bO3Lw78GkXitOz713Lehlin/3b1JcgA3WkHB6iKk0
QdGV7/5S/jogGST5pjgpu3c74S6OX8oHXVtTzrCGC3wjbLWTnpUnORo0o4hKS2b3
BfhHTOL/WMhVS83wHk3wZLNBdFnrsbx0mm19Nob9q3FvIT+ZKOdpGOJnobpt0MIG
/fC4hywMlvHc0i7AgRDk5JcRE2xOqGwNyzWls8P7WjFvYfI7rrkpslJnCMOVxHUj
XcpnmTxWpIi6muQKeEY/sKFO2D8w0Zdlt9egIpHJHoc+kzQwPA1d6AaTs0IF32iE
Ii3gvnkbk2jvRa5MRO9/EkSL/dgf
-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:06 2026 by rpki-client