Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a3a2f33322d3332203d3e20323731373534.roa
File:                     323830343a383038303a3a2f33322d3332203d3e20323731373534.roa (raw, json)
Hash identifier:          1CYM+lfNzbhk3t6ojtq94Hwaabr/GjokAPRrekXBgPc=
Subject key identifier:   9B:BE:65:48:B3:95:9B:ED:7E:96:23:F0:73:18:D3:58:38:A7:8F:5B
Certificate issuer:       /CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
Certificate serial:       1CEED4EF3D52DF2372F68D59488E7B3552E9ADCF
Authority key identifier: A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a3a2f33322d3332203d3e20323731373534.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     271754
IP address blocks:        2804:8080::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl
                          rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ee:d4:ef:3d:52:df:23:72:f6:8d:59:48:8e:7b:35:52:e9:ad:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=3082010A0282010100B773CE306D8977EDEEC15927EB40CB69431C12E8D43329658D3EFF8C850592D2141826CC36ED35CB397752A16F30EAA6E5F194DF36246A15B6170CCF89BAD258B8D95C6E0DC6A40022D595CF52E4D0101DB38698BEB5BA6B068BB9FA8AA9470909779E5900240B80DAC56F3F5875C58B19EDA8B75C5243BEF6F762A5E4789A56252BD3982757387860FECDC50E6875FF3A4BC4E45B88F1000241083C57D47473D8E575697564F28EE776EAE987E3EE80AB7BCD840A9012C48478B8A713F574F3D8A3F626F96CC50662219B6325AE4F150D4E9523B827C368A4444CE2B005D61BF9DE6427118D804A180D1ADA8A037F7B9578A9C8E8B0F024D341DE7B845A8D130203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:73:ce:30:6d:89:77:ed:ee:c1:59:27:eb:40:
                    cb:69:43:1c:12:e8:d4:33:29:65:8d:3e:ff:8c:85:
                    05:92:d2:14:18:26:cc:36:ed:35:cb:39:77:52:a1:
                    6f:30:ea:a6:e5:f1:94:df:36:24:6a:15:b6:17:0c:
                    cf:89:ba:d2:58:b8:d9:5c:6e:0d:c6:a4:00:22:d5:
                    95:cf:52:e4:d0:10:1d:b3:86:98:be:b5:ba:6b:06:
                    8b:b9:fa:8a:a9:47:09:09:77:9e:59:00:24:0b:80:
                    da:c5:6f:3f:58:75:c5:8b:19:ed:a8:b7:5c:52:43:
                    be:f6:f7:62:a5:e4:78:9a:56:25:2b:d3:98:27:57:
                    38:78:60:fe:cd:c5:0e:68:75:ff:3a:4b:c4:e4:5b:
                    88:f1:00:02:41:08:3c:57:d4:74:73:d8:e5:75:69:
                    75:64:f2:8e:e7:76:ea:e9:87:e3:ee:80:ab:7b:cd:
                    84:0a:90:12:c4:84:78:b8:a7:13:f5:74:f3:d8:a3:
                    f6:26:f9:6c:c5:06:62:21:9b:63:25:ae:4f:15:0d:
                    4e:95:23:b8:27:c3:68:a4:44:4c:e2:b0:05:d6:1b:
                    f9:de:64:27:11:8d:80:4a:18:0d:1a:da:8a:03:7f:
                    7b:95:78:a9:c8:e8:b0:f0:24:d3:41:de:7b:84:5a:
                    8d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BE:65:48:B3:95:9B:ED:7E:96:23:F0:73:18:D3:58:38:A7:8F:5B
            X509v3 Authority Key Identifier:
                keyid:A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a3a2f33322d3332203d3e20323731373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8080::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:a7:71:ee:fa:e5:b8:ab:17:0d:4a:05:91:db:55:d4:a2:48:
         31:cd:c4:95:59:ce:fa:38:6c:e9:9e:23:14:fc:e8:a1:5a:8f:
         0a:60:98:6f:33:93:61:78:19:d2:54:57:8d:44:c0:ad:a9:8b:
         d6:b2:1a:a7:86:75:6c:a6:fc:ea:df:e8:c8:cd:6a:74:8c:0a:
         c2:d1:e8:01:f5:55:f1:81:5b:36:5c:99:55:2c:7e:fb:92:9b:
         5f:a9:59:38:24:16:b4:28:44:36:31:3e:86:ab:40:1c:ef:e8:
         07:83:5c:55:69:30:a9:1a:f9:21:f7:47:09:a3:a4:41:f7:ee:
         da:10:8b:5e:a9:8f:26:8e:66:da:84:3a:ec:c6:65:70:85:57:
         50:23:f1:cb:f4:2e:a0:ae:a7:c6:0c:04:cc:4e:6e:a7:88:7c:
         93:b7:f6:db:31:a0:77:65:13:dd:19:a0:0c:06:51:80:73:6c:
         45:2c:c1:e6:2f:7c:1a:38:9e:4e:02:8a:02:93:12:4a:88:b7:
         da:1c:51:af:ed:12:83:fa:ee:3e:18:24:9a:9a:d5:19:07:72:
         23:de:e3:38:5c:07:b5:79:88:04:c6:51:52:ff:e0:a7:70:6d:
         b5:fb:72:dc:91:5e:8c:3d:2c:22:12:ef:07:ef:64:9c:e2:91:
         8b:8e:a4:69
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUHO7U7z1S3yNy9o1ZSI57NVLprc8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE2NTMxOUFBMzZENEZGRDJBNUQ5QTJCRTQyRjVDMkVG
MEUyMEI4RTAeFw0yNjAyMDQxODU1MDBaFw0yNzAyMDMxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjc3M0NFMzA2RDg5NzdFREVF
QzE1OTI3RUI0MENCNjk0MzFDMTJFOEQ0MzMyOTY1OEQzRUZGOEM4NTA1OTJEMjE0
MTgyNkNDMzZFRDM1Q0IzOTc3NTJBMTZGMzBFQUE2RTVGMTk0REYzNjI0NkExNUI2
MTcwQ0NGODlCQUQyNThCOEQ5NUM2RTBEQzZBNDAwMjJENTk1Q0Y1MkU0RDAxMDFE
QjM4Njk4QkVCNUJBNkIwNjhCQjlGQThBQTk0NzA5MDk3NzlFNTkwMDI0MEI4MERB
QzU2RjNGNTg3NUM1OEIxOUVEQThCNzVDNTI0M0JFRjZGNzYyQTVFNDc4OUE1NjI1
MkJEMzk4Mjc1NzM4Nzg2MEZFQ0RDNTBFNjg3NUZGM0E0QkM0RTQ1Qjg4RjEwMDAy
NDEwODNDNTdENDc0NzNEOEU1NzU2OTc1NjRGMjhFRTc3NkVBRTk4N0UzRUU4MEFC
N0JDRDg0MEE5MDEyQzQ4NDc4QjhBNzEzRjU3NEYzRDhBM0Y2MjZGOTZDQzUwNjYy
MjE5QjYzMjVBRTRGMTUwRDRFOTUyM0I4MjdDMzY4QTQ0NDRDRTJCMDA1RDYxQkY5
REU2NDI3MTE4RDgwNEExODBEMUFEQThBMDM3RjdCOTU3OEE5QzhFOEIwRjAyNEQz
NDFERTdCODQ1QThEMTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt3POMG2Jd+3uwVkn60DLaUMcEujUMylljT7/jIUFktIUGCbMNu01
yzl3UqFvMOqm5fGU3zYkahW2FwzPibrSWLjZXG4NxqQAItWVz1Lk0BAds4aYvrW6
awaLufqKqUcJCXeeWQAkC4DaxW8/WHXFixntqLdcUkO+9vdipeR4mlYlK9OYJ1c4
eGD+zcUOaHX/OkvE5FuI8QACQQg8V9R0c9jldWl1ZPKO53bq6Yfj7oCre82ECpAS
xIR4uKcT9XTz2KP2JvlsxQZiIZtjJa5PFQ1OlSO4J8NopERM4rAF1hv53mQnEY2A
ShgNGtqKA397lXipyOiw8CTTQd57hFqNEwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FJu+ZUizlZvtfpYj8HMY01g4p49bMB8GA1UdIwQYMBaAFKFlMZqjbU/9Kl2aK+Qv
XC7w4guOMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JxZDRrdWtLbWVOb2Y5
WEdEMkJTY2hzZHFkYUJVQ3RtM3gzM3JTcEZMY0gyLzEvQTE2NTMxOUFBMzZENEZG
RDJBNUQ5QTJCRTQyRjVDMkVGMEUyMEI4RS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BMTY1MzE5QUEzNkQ0RkZEMkE1RDlBMkJFNDJGNUMyRUYwRTIw
QjhFLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CcWQ0a3VrS21lTm9mOVhHRDJC
U2Noc2RxZGFCVUN0bTN4MzNyU3BGTGNIMi8xLzMyMzgzMDM0M2EzODMwMzgzMDNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMTM3MzUzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
gIAwDQYJKoZIhvcNAQELBQADggEBAAynce765birFw1KBZHbVdSiSDHNxJVZzvo4
bOmeIxT86KFajwpgmG8zk2F4GdJUV41EwK2pi9ayGqeGdWym/Orf6MjNanSMCsLR
6AH1VfGBWzZcmVUsfvuSm1+pWTgkFrQoRDYxPoarQBzv6AeDXFVpMKka+SH3Rwmj
pEH37toQi16pjyaOZtqEOuzGZXCFV1Aj8cv0LqCup8YMBMxObqeIfJO39tsxoHdl
E90ZoAwGUYBzbEUsweYvfBo4nk4CigKTEkqIt9ocUa/tEoP67j4YJJqa1RkHciPe
4zhcB7V5iATGUVL/4KdwbbX7ctyRXow9LCIS7wfvZJzikYuOpGk=
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:06 2026 by rpki-client