Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a653430303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a653430303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          76G5lv0DOjIAxlLrllvRL4HQvQlt3L0oa80lQb4lOqg=
Subject key identifier:   F5:DA:81:5D:E5:C4:21:B9:AA:DD:98:27:1E:9C:49:A8:FE:91:F0:97
Certificate issuer:       /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial:       0E6C815744DF0893706647A57D8849C0018ACA85
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a653430303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Mon 16 Feb 2026 18:52:02 +0000
ROA not before:           Mon 16 Feb 2026 18:47:02 +0000
ROA not after:            Mon 15 Feb 2027 18:52:02 +0000
asID:                     263629
IP address blocks:        2804:104c:e400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6c:81:57:44:df:08:93:70:66:47:a5:7d:88:49:c0:01:8a:ca:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
        Validity
            Not Before: Feb 16 18:47:02 2026 GMT
            Not After : Feb 15 18:52:02 2027 GMT
        Subject: CN=F5DA815DE5C421B9AADD98271E9C49A8FE91F097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:59:f8:ad:ff:b5:d6:3d:51:e6:b5:0e:88:9c:
                    9b:89:32:b6:a0:63:31:ce:c5:16:2d:97:c6:7d:51:
                    cb:ab:62:89:cb:bc:41:74:fc:fe:a5:fb:a4:0f:56:
                    4b:bc:39:26:b3:dd:05:01:83:1a:cd:70:a7:74:70:
                    a9:1e:d5:6b:dd:1d:a3:61:d3:68:43:80:f1:e0:4e:
                    b6:44:f7:ff:5d:bd:3f:20:7c:2d:52:82:2d:ce:03:
                    2d:25:15:ba:23:5c:d4:9e:7f:39:2c:ce:4a:27:e5:
                    7e:22:30:c9:44:74:d4:4f:cd:35:ac:85:86:75:02:
                    72:e6:13:b1:18:8f:28:cf:1b:ac:e5:00:02:2c:38:
                    d9:fa:04:69:78:e4:42:e9:9d:55:1d:b3:2f:93:f7:
                    f8:6f:a5:58:67:db:ed:3e:6a:19:9d:19:3d:e5:57:
                    68:c4:b9:42:36:ca:a9:35:ad:7b:af:46:61:f3:7c:
                    b6:ec:eb:67:b9:49:d9:2e:32:ab:c7:70:f7:e8:23:
                    11:0d:88:95:0d:db:70:67:d5:34:56:68:d0:75:b1:
                    63:a9:1c:4c:36:c0:48:63:f2:67:28:dc:3d:00:c8:
                    78:72:a7:58:64:b4:f0:8a:09:f7:7c:bb:75:b6:e4:
                    62:f3:17:e6:5d:2d:33:f5:63:d0:e0:0c:eb:4a:39:
                    2f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DA:81:5D:E5:C4:21:B9:AA:DD:98:27:1E:9C:49:A8:FE:91:F0:97
            X509v3 Authority Key Identifier:
                keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a653430303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:e400::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:09:29:64:6c:17:bd:22:76:b8:b5:e7:ed:aa:aa:ff:f6:f7:
         c9:a0:72:2f:e2:67:3b:b4:2c:ce:17:fc:46:25:ca:97:1e:79:
         d2:a1:b1:4f:5a:15:f9:ab:53:d3:2f:dd:e7:f6:f7:b0:26:d8:
         62:ae:59:e2:1e:c3:92:46:ec:1d:d6:54:47:94:1e:cd:b3:6f:
         0c:51:95:0a:aa:29:38:3a:08:78:fc:9c:10:21:d5:d6:0d:47:
         54:50:c3:fc:07:89:68:65:38:a8:5d:55:b0:75:9e:3a:73:f9:
         a2:40:84:85:0e:ba:76:20:6d:43:7e:14:19:24:58:be:2d:08:
         df:47:03:3a:f9:75:c1:6c:48:8f:ac:d5:0c:b4:ef:e9:57:eb:
         b8:7c:33:91:ee:02:76:19:db:1b:fb:df:57:07:8a:f3:cf:8a:
         44:b2:c4:d3:6f:0a:c6:23:99:48:45:46:47:52:a8:6d:23:09:
         5f:7b:e3:19:e5:ec:ea:de:2c:a8:a2:de:d4:c5:7d:20:22:01:
         fd:06:e5:64:eb:e3:e1:ac:cb:d8:12:64:dc:0a:a1:90:d5:19:
         85:53:02:73:5a:4b:83:f2:0d:cd:c8:3f:4c:18:66:91:0c:ad:
         d0:28:56:31:ab:b5:1e:87:69:24:97:15:70:37:e2:23:7d:7f:
         0c:36:bc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:58:26 2026 by rpki-client