Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a663830303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a663830303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          DnkUd6wqnfVFfMlay8w/GAz0klQgmiWG+BakhnljR/U=
Subject key identifier:   CE:6B:C2:69:94:E2:20:E3:62:CD:92:BC:1F:E9:4B:E6:3B:37:21:AF
Certificate issuer:       /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial:       D9FCD09FF6CCAE492E6C42CA7DDAAE90AAB684
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a663830303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Mon 16 Feb 2026 18:52:10 +0000
ROA not before:           Mon 16 Feb 2026 18:47:10 +0000
ROA not after:            Mon 15 Feb 2027 18:52:10 +0000
asID:                     263629
IP address blocks:        2804:104c:f800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d9:fc:d0:9f:f6:cc:ae:49:2e:6c:42:ca:7d:da:ae:90:aa:b6:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
        Validity
            Not Before: Feb 16 18:47:10 2026 GMT
            Not After : Feb 15 18:52:10 2027 GMT
        Subject: CN=CE6BC26994E220E362CD92BC1FE94BE63B3721AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0b:a4:ad:7a:bc:fe:f4:14:59:e9:0f:93:cf:
                    82:91:13:a5:af:94:c6:28:a7:29:60:96:30:ec:0d:
                    f5:a3:25:a4:5a:23:0f:84:a7:2f:1a:16:af:37:dd:
                    6a:7c:dc:d7:34:cc:0d:cd:25:4b:f6:89:c6:d9:24:
                    11:d5:1f:9e:51:07:d6:02:5b:73:7b:2b:11:3a:40:
                    de:6f:2a:30:25:72:ec:9e:db:ee:81:f7:c1:93:f6:
                    43:af:85:e8:85:75:c2:85:b2:5d:3c:d3:05:a6:34:
                    2a:04:8f:6f:d0:b2:c1:34:db:58:f3:21:69:b3:33:
                    ec:e8:14:d3:db:7c:b4:16:ac:a9:39:42:da:8f:a6:
                    d3:77:d3:16:31:a7:d8:e3:06:e1:da:12:8a:8b:91:
                    44:d6:3c:02:6a:62:41:21:e4:d9:0b:0b:0c:a8:a7:
                    26:8d:bd:0a:d6:7c:85:74:6c:60:f2:9b:1e:1a:e4:
                    7b:f3:45:46:24:4a:16:f7:58:4c:89:93:70:42:dc:
                    70:1e:23:40:b8:74:65:06:81:6b:ec:9c:52:59:12:
                    a0:8c:b9:18:8a:05:16:c2:e4:af:da:85:75:5e:8a:
                    b5:13:ad:9c:78:6d:42:f2:1c:ec:fe:d1:0c:02:d2:
                    ce:23:e8:2c:fd:e6:77:d5:f8:ec:00:67:c9:d5:4c:
                    80:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6B:C2:69:94:E2:20:E3:62:CD:92:BC:1F:E9:4B:E6:3B:37:21:AF
            X509v3 Authority Key Identifier:
                keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a663830303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:f800::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:59:2d:c4:2a:a5:17:ef:86:82:c9:e7:17:ba:b8:4e:d8:00:
         6a:27:07:bb:6f:c8:53:5d:11:5e:f5:71:3a:f1:ab:ac:a5:7e:
         d2:5b:c1:79:ac:33:f2:9c:36:b7:66:b6:7f:2c:97:65:f9:56:
         3e:62:75:cf:a1:5d:78:3c:e8:28:32:f3:3b:d6:5f:92:37:96:
         e5:bd:9a:6e:ab:c1:1d:7b:57:b5:a6:70:46:47:2b:6e:7a:46:
         ab:a5:de:ae:7d:a4:df:be:b5:75:c8:4c:d7:75:18:80:32:96:
         aa:ff:e6:50:c3:4e:89:2e:d8:51:40:10:cc:45:09:71:6a:bf:
         e0:36:35:57:09:3b:0d:9f:87:83:2e:9f:83:5c:74:95:2e:96:
         6e:59:75:c6:41:d3:0c:ad:bf:bd:74:35:63:73:6e:f8:0d:20:
         3c:a2:08:e8:62:40:b9:ea:4d:4c:08:1a:a2:31:c9:6c:4e:e2:
         9b:ab:ce:05:64:3b:a4:c0:8f:59:7d:9b:0a:d4:9d:98:db:e8:
         27:c2:73:3b:29:8c:0e:6a:03:01:e0:a0:a3:46:a4:0e:b6:71:
         67:5a:0b:49:95:2f:b9:85:c6:85:56:b7:33:e8:20:e1:97:17:
         7a:77:77:00:d3:a8:54:a5:3e:59:8e:d7:b2:e8:9a:ac:18:ad:
         5c:f9:b3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:58:02 2026 by rpki-client