Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a386330303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a386330303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          7CheqpYH8UvUJIseKLecQ6wRlYr59ZXU6K2umeYDWQs=
Subject key identifier:   09:B1:85:5F:35:16:EE:1A:DA:47:16:5D:C3:CA:09:CE:D5:F9:14:CE
Certificate issuer:       /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial:       634F128A6CC10CB1DDFA08167B9A71A483D7FF32
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a386330303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Mon 16 Feb 2026 18:51:43 +0000
ROA not before:           Mon 16 Feb 2026 18:46:43 +0000
ROA not after:            Mon 15 Feb 2027 18:51:43 +0000
asID:                     263629
IP address blocks:        2804:104c:8c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:4f:12:8a:6c:c1:0c:b1:dd:fa:08:16:7b:9a:71:a4:83:d7:ff:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
        Validity
            Not Before: Feb 16 18:46:43 2026 GMT
            Not After : Feb 15 18:51:43 2027 GMT
        Subject: CN=09B1855F3516EE1ADA47165DC3CA09CED5F914CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0b:15:2d:ee:98:f6:9e:fc:3c:07:db:56:1a:
                    b7:6b:43:79:03:0e:1e:5c:0d:45:3e:72:a2:16:73:
                    1b:31:32:24:d4:50:d7:0c:60:ca:45:20:b9:8c:98:
                    3a:87:47:d2:a2:22:04:c1:95:f5:36:6d:76:fb:f9:
                    35:e1:d1:07:f5:96:2e:98:a6:c6:05:f9:5a:91:ca:
                    91:5e:c0:c2:30:1b:f0:4f:11:53:08:a4:10:4a:05:
                    e3:15:00:cc:6d:95:57:6e:28:09:42:70:01:e4:04:
                    32:87:16:a1:9f:29:af:00:84:0c:3b:9c:3e:f5:a5:
                    88:cd:68:a7:99:39:7f:7c:1e:fe:fd:18:1c:f6:a7:
                    35:91:14:8f:ba:4e:73:57:3f:d3:6b:b4:04:b3:d4:
                    ba:35:30:38:85:4f:5d:b7:98:7e:d4:e1:a3:94:ca:
                    bb:d7:9c:33:c6:93:f8:3a:53:79:2f:71:b0:b1:ee:
                    d2:2e:e3:61:59:fa:a9:1c:eb:d4:94:b9:28:15:72:
                    b1:f7:19:65:bd:e0:2f:fe:7d:3d:3b:e4:60:dc:50:
                    38:7c:6d:66:4d:3c:10:a3:eb:1a:4b:1f:81:21:9b:
                    37:16:10:5a:e7:2e:a5:d2:e9:e9:1b:50:71:85:14:
                    2c:fa:3d:6c:38:fa:cc:2c:83:2e:8a:c9:b4:77:38:
                    eb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B1:85:5F:35:16:EE:1A:DA:47:16:5D:C3:CA:09:CE:D5:F9:14:CE
            X509v3 Authority Key Identifier:
                keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a386330303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:8c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ac:ec:ff:2f:42:a2:fa:ee:1c:3e:d3:02:29:cb:5a:5a:22:25:
         80:b2:fb:81:17:4a:c8:bb:ea:ab:95:ef:96:6e:78:8e:b9:60:
         33:bd:a5:5e:08:dd:45:8d:fe:ae:d1:aa:f2:01:0d:e5:12:e7:
         00:1d:d2:db:23:26:64:6e:53:bb:ba:0c:0c:31:aa:4c:a5:4d:
         dc:e8:e6:02:0d:c1:85:f4:a5:9b:6f:dd:af:68:4f:33:22:59:
         a7:b7:c6:8b:6a:43:42:eb:d8:7b:51:1f:01:40:26:4b:b3:7a:
         8b:df:a4:e8:56:98:c3:5f:f1:7d:0e:81:02:f8:45:73:77:6d:
         13:ec:5f:32:b3:38:2a:93:8c:b0:11:8c:aa:71:b2:13:71:d4:
         72:1f:5b:e3:b3:80:3a:f0:2e:bb:bd:92:53:92:26:19:4e:fd:
         95:b0:e0:3d:af:59:ef:7a:e2:d7:28:74:8c:c9:c3:9f:f5:3e:
         ee:d9:14:9f:7d:c8:3a:fb:72:9f:f3:1a:93:6e:f0:d1:b0:8b:
         e0:0c:dc:b0:08:62:93:24:47:5a:db:cc:df:ff:8f:76:49:a1:
         e2:5c:48:3e:78:5d:83:aa:5f:36:24:c3:6c:82:d2:4d:5f:be:
         55:96:4d:5d:73:e9:6f:e0:0f:49:89:b7:95:2f:ca:05:81:a5:
         cc:77:49:08
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUY08SimzBDLHd+ggWe5pxpIPX/zIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM5MjVBNzhGOEJGQ0I2MjBDODBDQzhGQUQ0N0Y1RjMw
MkVGRkJDRDAeFw0yNjAyMTYxODQ2NDNaFw0yNzAyMTUxODUxNDNaMDMxMTAvBgNV
BAMTKDA5QjE4NTVGMzUxNkVFMUFEQTQ3MTY1REMzQ0EwOUNFRDVGOTE0Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyCxUt7pj2nvw8B9tWGrdrQ3kD
Dh5cDUU+cqIWcxsxMiTUUNcMYMpFILmMmDqHR9KiIgTBlfU2bXb7+TXh0Qf1li6Y
psYF+VqRypFewMIwG/BPEVMIpBBKBeMVAMxtlVduKAlCcAHkBDKHFqGfKa8AhAw7
nD71pYjNaKeZOX98Hv79GBz2pzWRFI+6TnNXP9NrtASz1Lo1MDiFT123mH7U4aOU
yrvXnDPGk/g6U3kvcbCx7tIu42FZ+qkc69SUuSgVcrH3GWW94C/+fT075GDcUDh8
bWZNPBCj6xpLH4EhmzcWEFrnLqXS6ekbUHGFFCz6PWw4+swsgy6KybR3OOvHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUCbGFXzUW7hraRxZdw8oJztX5FM4wHwYDVR0j
BBgwFoAU7JJaePi/y2IMgMyPrUf18wLv+80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmhOTlpuWWNBZGROQ0JuVW1uV3JDRzRhajJvdkpaSGJKcTlNbVJndzlj
WGsvMC9FQzkyNUE3OEY4QkZDQjYyMEM4MENDOEZBRDQ3RjVGMzAyRUZGQkNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDOTI1QTc4RjhCRkNCNjIw
QzgwQ0M4RkFENDdGNUYzMDJFRkZCQ0QuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JoTk5ablljQWRkTkNCblVtbldyQ0c0YWoyb3ZKWkhiSnE5TW1SZ3c5Y1hrLzAv
MzIzODMwMzQzYTMxMzAzNDYzM2EzODYzMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzMzM2MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEEEyMMA0GCSqGSIb3DQEBCwUA
A4IBAQCs7P8vQqL67hw+0wIpy1paIiWAsvuBF0rIu+qrle+WbniOuWAzvaVeCN1F
jf6u0aryAQ3lEucAHdLbIyZkblO7ugwMMapMpU3c6OYCDcGF9KWbb92vaE8zIlmn
t8aLakNC69h7UR8BQCZLs3qL36ToVpjDX/F9DoEC+EVzd20T7F8yszgqk4ywEYyq
cbITcdRyH1vjs4A68C67vZJTkiYZTv2VsOA9r1nveuLXKHSMycOf9T7u2RSffcg6
+3Kf8xqTbvDRsIvgDNywCGKTJEda28zf/492SaHiXEg+eF2Dql82JMNsgtJNX75V
lk1dc+lv4A9JibeVL8oFgaXMd0kI
-----END CERTIFICATE-----
Generated at Thu Feb 19 10:16:59 2026 by rpki-client