Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a3830303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a3830303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          b8FOI794NodNxGhxjVUgyW8N7akBudTLDJ/omhR3IJM=
Subject key identifier:   47:1C:F2:C2:0F:CE:E6:4D:2D:E0:5A:C1:C4:AF:F7:BC:58:95:58:43
Certificate issuer:       /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial:       35E253C035C31CAC6B8F0F8820542955190D8A09
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a3830303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Mon 16 Feb 2026 18:52:13 +0000
ROA not before:           Mon 16 Feb 2026 18:47:13 +0000
ROA not after:            Mon 15 Feb 2027 18:52:13 +0000
asID:                     263629
IP address blocks:        2804:104c:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e2:53:c0:35:c3:1c:ac:6b:8f:0f:88:20:54:29:55:19:0d:8a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
        Validity
            Not Before: Feb 16 18:47:13 2026 GMT
            Not After : Feb 15 18:52:13 2027 GMT
        Subject: CN=471CF2C20FCEE64D2DE05AC1C4AFF7BC58955843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:97:e9:c9:e4:e9:cf:b6:e1:65:40:d8:0e:8e:
                    a5:c7:9c:ba:ed:87:11:6f:7d:32:4a:d8:77:1d:5c:
                    b1:73:97:59:17:4e:e8:65:29:f2:32:9c:6d:e2:df:
                    fd:e5:9b:21:92:a6:48:cc:5f:54:5f:54:31:0d:a2:
                    80:9c:c2:8d:f3:34:d8:e5:d7:94:6c:2f:f6:ce:b9:
                    05:bd:d2:bf:80:6b:91:e3:3c:51:ec:8f:96:b7:13:
                    dc:26:04:0f:64:72:47:da:38:49:20:5e:50:38:67:
                    52:0f:f8:84:fc:e3:42:f9:23:48:0a:80:0c:6c:e5:
                    05:84:42:bc:61:ef:a1:d6:ea:0b:50:0f:cf:59:62:
                    bf:96:a1:4e:d8:ed:d5:d5:36:86:18:8f:e7:17:7a:
                    4f:cc:33:22:c2:4d:de:3e:32:5a:87:f7:35:c0:ad:
                    e8:9e:73:f4:c2:d7:d2:6f:53:f9:a0:d5:8e:c8:0c:
                    a9:69:17:b8:91:55:d5:fd:ed:77:d3:ac:a2:6b:05:
                    be:75:85:23:4d:c4:21:b2:9c:37:14:cc:d0:8e:21:
                    b4:3a:58:26:36:bb:2d:e4:b9:92:92:f0:f8:51:40:
                    73:c1:eb:11:cd:8a:bd:ee:18:c5:1d:7b:4c:17:7f:
                    6a:9e:45:8c:b6:3c:e2:3d:94:c5:6c:17:55:36:36:
                    10:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1C:F2:C2:0F:CE:E6:4D:2D:E0:5A:C1:C4:AF:F7:BC:58:95:58:43
            X509v3 Authority Key Identifier:
                keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a3830303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         5f:98:0b:c6:9d:3e:3b:81:6c:0f:f1:59:c5:00:d8:ec:41:23:
         87:d8:03:9f:75:52:4e:eb:49:56:03:88:c6:09:86:8f:a2:7d:
         26:13:a9:01:2c:d4:0b:1d:4c:8c:31:e0:ac:70:47:c9:cc:9b:
         b6:f8:1e:a9:7e:25:98:1d:f8:57:90:39:c1:f3:a1:e4:dd:15:
         b6:4d:26:32:6f:31:6f:0d:08:ab:5c:90:c9:bb:7c:c7:5a:94:
         93:65:e9:23:44:b7:de:e0:e9:a1:60:2b:e0:f7:94:03:a5:3b:
         c8:58:a3:4c:5f:42:0e:de:b8:1d:91:88:67:f3:e6:1c:cc:05:
         d2:cd:a7:15:8b:aa:c6:63:38:7a:df:d5:8e:28:a5:0d:eb:f5:
         1d:04:d5:3b:31:c0:24:8b:77:06:43:06:4f:a8:5b:b5:0e:d1:
         d1:7c:ac:ca:54:b7:f6:1e:b7:e7:99:b9:7d:d8:c0:27:dd:68:
         35:2b:c0:ee:70:b8:b3:7f:8a:e4:17:bf:84:0b:a3:cc:6f:32:
         2d:0f:e2:8f:b3:6f:60:ff:c2:cb:b7:cf:09:c0:66:5f:b1:a1:
         d9:a0:0b:14:99:d0:f5:12:50:9f:19:34:e4:35:db:0d:cc:c7:
         66:8b:ba:1f:53:21:ee:9f:11:64:e4:96:9f:82:ff:15:a1:a3:
         16:65:89:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:16:08 2026 by rpki-client