Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a653230303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a653230303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          rzYfBd/AafgtfgXcRH7ssbiTP2/lkf5zB70eW/7/rQI=
Subject key identifier:   0F:97:54:09:2E:F2:1D:9C:5A:29:CB:66:87:D2:48:6B:45:5E:F8:E4
Certificate issuer:       /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial:       116539C6ABFFD76A66D388987CA32FB161AA78FD
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a653230303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Mon 16 Feb 2026 18:52:11 +0000
ROA not before:           Mon 16 Feb 2026 18:47:11 +0000
ROA not after:            Mon 15 Feb 2027 18:52:11 +0000
asID:                     263629
IP address blocks:        2804:104c:e200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:65:39:c6:ab:ff:d7:6a:66:d3:88:98:7c:a3:2f:b1:61:aa:78:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
        Validity
            Not Before: Feb 16 18:47:11 2026 GMT
            Not After : Feb 15 18:52:11 2027 GMT
        Subject: CN=0F9754092EF21D9C5A29CB6687D2486B455EF8E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f1:c4:ad:ec:6f:e9:d1:de:c6:e1:7c:45:b3:
                    50:96:fd:5c:d1:4f:0a:5a:13:40:20:62:7a:bd:9d:
                    e4:aa:57:09:29:68:54:08:f7:3b:9b:28:15:e9:c5:
                    45:0b:d6:04:3c:f8:26:66:98:91:28:92:00:99:0a:
                    4a:6e:c6:1d:71:af:1e:50:83:38:53:50:50:bf:0b:
                    6e:f5:3f:af:03:ff:87:f6:75:69:76:59:4c:fc:43:
                    24:bc:9b:d4:3a:0b:29:03:24:2a:e0:28:90:7a:f2:
                    68:e8:9c:9d:f6:73:65:1d:57:54:82:21:f3:b9:e4:
                    b6:06:8a:04:71:5a:8f:ed:57:9b:e3:e0:df:4b:c4:
                    80:65:86:e3:c0:21:8a:47:ec:95:08:45:90:71:3e:
                    c0:b3:48:65:72:f6:30:d1:51:70:81:b3:41:8d:e8:
                    43:a2:e9:f8:10:6c:b4:2a:5a:b9:90:0f:31:2c:19:
                    f9:8c:a2:d6:d1:1b:93:09:f9:d2:f3:8f:45:75:75:
                    6b:2b:04:d1:69:e4:29:67:55:fa:ac:63:e3:a7:18:
                    29:dc:ad:70:d7:4a:aa:00:50:b5:4e:b4:ba:df:52:
                    9b:96:d4:66:87:c9:dd:22:5f:e4:85:76:ca:a5:1a:
                    64:9e:05:a0:b8:76:31:63:d8:d0:20:42:64:61:7a:
                    c6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:97:54:09:2E:F2:1D:9C:5A:29:CB:66:87:D2:48:6B:45:5E:F8:E4
            X509v3 Authority Key Identifier:
                keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a653230303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:e200::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:5c:48:f2:e8:ea:cf:72:00:dd:c6:f1:13:5e:43:c9:02:6b:
         53:66:f7:cf:63:64:32:fd:9c:64:9b:b3:b4:8b:9d:49:bb:34:
         29:6f:3d:ce:29:04:d9:31:02:af:cd:24:8e:c7:9f:26:07:c0:
         30:db:d2:e5:3e:48:9c:24:17:4f:de:85:61:8d:21:7b:57:2f:
         d1:a5:40:ab:56:c2:e7:db:d0:fb:3f:b6:e9:52:ff:f3:d1:8f:
         8f:7a:8f:a1:d8:d3:97:6b:e4:7a:4a:32:3e:7a:41:c0:38:19:
         39:fb:1c:95:f5:f7:ad:ce:b4:f0:a5:66:86:53:e3:70:73:fe:
         8b:c2:ff:05:be:b1:ba:98:ed:19:45:0e:db:7a:42:0a:28:00:
         1b:75:fa:13:39:2a:fd:ad:52:f3:00:53:76:71:52:31:b8:8c:
         13:48:00:90:ff:a1:9e:94:c6:8e:32:97:5b:80:28:62:93:3b:
         c1:c0:f7:5d:62:32:f7:27:f8:88:23:9b:81:35:b5:82:e9:16:
         dc:34:53:4f:ea:b0:b7:e5:5b:13:45:b2:70:ba:ff:fc:53:2e:
         2d:39:8a:4a:30:f3:f7:b1:08:c1:f6:bd:d5:d8:53:f5:18:7c:
         48:9d:e2:66:45:44:fe:15:5c:b7:d1:95:9f:a9:06:c7:fd:9a:
         01:47:e1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:56:13 2026 by rpki-client