Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a613830303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a613830303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          yNGDN14VGp5wD8hbgA3zw1/4x2DYUL54GS7gfP/2oLM=
Subject key identifier:   CA:01:C9:8E:59:16:FF:41:33:92:75:D7:14:AD:29:3A:DE:F3:20:9E
Certificate issuer:       /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial:       487907E345A86BA7AF7334CBA89E0F230B71F68B
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a613830303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Mon 16 Feb 2026 18:51:52 +0000
ROA not before:           Mon 16 Feb 2026 18:46:52 +0000
ROA not after:            Mon 15 Feb 2027 18:51:52 +0000
asID:                     263629
IP address blocks:        2804:104c:a800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:79:07:e3:45:a8:6b:a7:af:73:34:cb:a8:9e:0f:23:0b:71:f6:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
        Validity
            Not Before: Feb 16 18:46:52 2026 GMT
            Not After : Feb 15 18:51:52 2027 GMT
        Subject: CN=CA01C98E5916FF41339275D714AD293ADEF3209E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3c:29:83:e5:ff:b8:58:05:d7:ed:a0:3b:cd:
                    43:e6:28:a3:85:c4:55:2f:57:0c:1b:dc:a7:1c:bf:
                    0e:88:88:0d:e9:77:d9:97:a6:c9:fa:c0:fc:a8:0d:
                    6b:3d:c5:ed:bc:30:80:90:60:ff:65:d7:48:62:8b:
                    be:e7:a1:db:ea:bd:02:a2:88:a8:e5:86:c0:b3:d7:
                    48:c0:0f:27:7d:ef:9a:36:99:d2:c9:b2:c7:c6:72:
                    13:d0:5e:29:8a:65:df:1a:b5:c0:37:fb:77:b8:07:
                    f9:ce:3a:10:c4:c8:87:0d:bf:23:24:38:76:1a:96:
                    cf:f1:49:52:88:27:24:bb:8d:1d:b6:af:cc:3f:05:
                    71:fe:44:55:c9:5a:96:75:fc:e6:df:6e:3c:43:b5:
                    8c:64:6c:52:91:8e:76:27:02:5d:db:bb:be:62:99:
                    ea:15:b9:d2:68:e1:c6:99:7b:69:3d:60:14:10:31:
                    6a:a8:f7:47:79:3a:59:52:60:07:f5:39:03:e9:19:
                    22:c6:ef:83:5f:ec:75:99:4d:8c:0a:23:38:19:f9:
                    83:4a:36:98:bc:73:cf:86:4d:f8:44:cb:e7:b2:52:
                    6e:e7:b5:fd:65:0b:a5:a1:42:8f:d7:bd:d5:14:90:
                    c1:8c:a2:4a:24:b3:72:9e:d1:7d:07:61:74:1f:e9:
                    3c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:01:C9:8E:59:16:FF:41:33:92:75:D7:14:AD:29:3A:DE:F3:20:9E
            X509v3 Authority Key Identifier:
                keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a613830303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:a800::/40

    Signature Algorithm: sha256WithRSAEncryption
         af:1d:e9:ba:53:f6:e9:10:71:3c:2a:6c:ba:38:1d:a6:ba:6a:
         03:5f:63:1e:8f:fd:4f:c5:3a:dc:32:d7:b3:63:3f:c2:6e:4d:
         f1:3d:07:da:6c:b8:6e:f7:c8:60:48:a0:e9:38:d7:69:42:02:
         b1:e2:d9:4d:f9:53:77:a1:2c:86:f0:a9:7e:95:c0:b5:34:d6:
         fa:20:cc:3e:2c:00:fa:da:49:d3:d0:90:ee:02:26:f2:a7:69:
         f3:40:87:90:1b:46:2e:57:b3:4c:f0:ba:64:7e:04:02:b3:d2:
         4c:0a:62:9b:fd:6b:fc:6b:84:db:e1:35:96:1f:0f:71:ba:c9:
         8c:0a:63:dc:b7:f5:39:c5:75:b6:e8:7a:08:11:5b:73:19:0a:
         51:44:2c:bb:62:6f:21:e8:d7:b2:bf:c6:88:a7:b3:36:f1:c2:
         91:24:57:e5:8c:9e:8d:17:bf:8a:56:b0:18:69:ca:fd:de:4c:
         f7:82:6e:ad:9b:8b:cf:1f:e4:8b:38:7c:12:9a:5c:36:06:d6:
         51:bb:73:9b:86:1c:0e:ed:d8:3b:2e:53:c5:52:48:99:f9:ba:
         26:53:8a:7b:ba:a6:f8:3b:eb:e7:4d:cc:26:d3:bf:d6:de:d4:
         1e:8f:71:a7:24:2f:36:ef:ed:ae:62:d9:50:ac:ae:82:1a:98:
         44:f6:a7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:25:32 2026 by rpki-client