Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/323830343a333239633a3a2f33322d3438203d3e20323635303838.roa
File:                     323830343a333239633a3a2f33322d3438203d3e20323635303838.roa (raw, json)
Hash identifier:          wxF3r8Aw9oNoIkz7x4E5Hb3S6vOvVvLMZ35Whz3JHwM=
Subject key identifier:   2F:A2:62:34:F1:F3:1D:C2:E9:0A:2F:E1:D7:0C:E7:06:D7:5C:C6:1F
Certificate issuer:       /CN=66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7
Certificate serial:       2864C54BDB6F86C3CC70D894CD743F38CE0626F1
Authority key identifier: 66:AB:3C:6D:69:62:BB:C2:0D:BF:F5:97:96:9F:5D:2B:8E:D6:E1:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/323830343a333239633a3a2f33322d3438203d3e20323635303838.roa
Signing time:             Thu 05 Feb 2026 12:08:31 +0000
ROA not before:           Thu 05 Feb 2026 12:03:31 +0000
ROA not after:            Thu 04 Feb 2027 12:08:31 +0000
asID:                     265088
IP address blocks:        2804:329c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.crl
                          rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:64:c5:4b:db:6f:86:c3:cc:70:d8:94:cd:74:3f:38:ce:06:26:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7
        Validity
            Not Before: Feb  5 12:03:31 2026 GMT
            Not After : Feb  4 12:08:31 2027 GMT
        Subject: CN=2FA26234F1F31DC2E90A2FE1D70CE706D75CC61F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:03:f6:91:d8:b0:34:69:83:03:a8:2f:3c:19:
                    56:d6:75:e5:5a:2b:15:b7:f8:dd:70:30:0b:22:5e:
                    ac:3c:1f:de:e3:c8:ee:de:14:85:3f:d6:2e:98:ba:
                    01:f6:a4:e4:cc:fd:9b:2b:7f:58:b9:f1:73:3a:d5:
                    b3:8a:f1:d0:f8:d9:00:5b:77:cb:56:c8:6a:98:6e:
                    a0:cc:7d:4b:f0:de:47:5d:79:56:bc:18:96:37:27:
                    40:a4:d4:21:93:8a:f6:bc:a6:b9:36:23:f1:66:9f:
                    20:3d:73:f7:0f:9c:56:42:1d:b5:63:6c:11:25:e7:
                    69:93:de:5b:33:4b:ec:42:fe:7c:15:7f:32:71:a8:
                    e4:e4:86:ad:84:25:0a:81:3d:7c:f4:a8:30:fb:99:
                    74:27:3d:9a:77:9d:13:8f:9d:d7:65:bf:c1:8e:3a:
                    16:69:69:31:f3:f3:d7:ac:f0:ff:ce:85:16:8e:d1:
                    69:f4:8d:33:66:d0:8e:34:4d:ad:d6:27:35:b7:fe:
                    2a:ae:f9:3a:f9:d4:0e:5c:60:d5:6e:32:b7:fb:e5:
                    43:fe:84:fc:7d:be:fd:9b:2c:39:c1:96:5f:b8:5c:
                    8d:64:f6:a5:eb:69:9c:76:3b:e7:81:95:5f:31:bd:
                    39:87:be:ae:85:a0:d5:ef:fc:1a:89:2e:96:75:68:
                    f9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A2:62:34:F1:F3:1D:C2:E9:0A:2F:E1:D7:0C:E7:06:D7:5C:C6:1F
            X509v3 Authority Key Identifier:
                keyid:66:AB:3C:6D:69:62:BB:C2:0D:BF:F5:97:96:9F:5D:2B:8E:D6:E1:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/323830343a333239633a3a2f33322d3438203d3e20323635303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:329c::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:c8:18:ec:e4:ce:6c:79:f8:0f:f9:e0:f5:d1:3c:1b:69:a5:
         b6:82:00:bc:4a:56:71:35:02:55:8a:ed:0a:1a:36:2d:da:01:
         d6:2d:46:94:17:68:f8:6c:82:42:5d:89:75:cd:96:c8:4d:a7:
         45:d7:2a:b8:6d:88:01:ec:3e:da:af:0a:14:5f:c1:80:0f:d3:
         8f:fc:64:76:09:0d:ce:19:42:9e:2a:e0:8d:7e:71:ec:0e:bb:
         da:60:23:2e:0e:96:a6:1e:11:55:7c:af:fc:81:96:0d:a0:c9:
         af:2a:bd:bd:4b:2c:8d:81:75:b1:23:22:be:2e:89:e2:25:33:
         e8:ef:f2:6a:5e:34:c2:eb:6a:3b:b4:09:ab:75:5f:bb:99:b4:
         65:41:91:20:6c:3e:47:03:58:85:96:d7:b3:aa:8d:87:36:93:
         d5:74:4d:1d:8a:4e:57:ce:57:0d:43:6b:a2:b1:fb:70:f4:f2:
         75:fc:8a:3a:b9:58:cd:e5:73:05:42:c9:2c:46:89:26:40:b7:
         3b:99:0d:c4:79:c8:34:14:fb:de:53:81:27:be:36:f3:89:84:
         fd:f4:14:ad:6d:70:7f:0d:61:8d:c2:f0:e2:a1:04:40:82:4f:
         c1:1f:f6:07:96:9e:03:52:19:0a:b8:f5:53:0f:2b:db:bb:d7:
         80:c6:cd:93
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUKGTFS9tvhsPMcNiUzXQ/OM4GJvEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZBQjNDNkQ2OTYyQkJDMjBEQkZGNTk3OTY5RjVEMkI4
RUQ2RTFBNzAeFw0yNjAyMDUxMjAzMzFaFw0yNzAyMDQxMjA4MzFaMDMxMTAvBgNV
BAMTKDJGQTI2MjM0RjFGMzFEQzJFOTBBMkZFMUQ3MENFNzA2RDc1Q0M2MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFA/aR2LA0aYMDqC88GVbWdeVa
KxW3+N1wMAsiXqw8H97jyO7eFIU/1i6YugH2pOTM/Zsrf1i58XM61bOK8dD42QBb
d8tWyGqYbqDMfUvw3kddeVa8GJY3J0Ck1CGTiva8prk2I/FmnyA9c/cPnFZCHbVj
bBEl52mT3lszS+xC/nwVfzJxqOTkhq2EJQqBPXz0qDD7mXQnPZp3nROPnddlv8GO
OhZpaTHz89es8P/OhRaO0Wn0jTNm0I40Ta3WJzW3/iqu+Tr51A5cYNVuMrf75UP+
hPx9vv2bLDnBll+4XI1k9qXraZx2O+eBlV8xvTmHvq6FoNXv/BqJLpZ1aPmHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUL6JiNPHzHcLpCi/h1wznBtdcxh8wHwYDVR0j
BBgwFoAUZqs8bWliu8INv/WXlp9dK47W4acwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnd3M2NrR01TSHlOUTlONjdES2gzUUpKOXpzdFJqbzY1VWpaNFVoeTRl
cXkvMS82NkFCM0M2RDY5NjJCQkMyMERCRkY1OTc5NjlGNUQyQjhFRDZFMUE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2QUIzQzZENjk2MkJCQzIw
REJGRjU5Nzk2OUY1RDJCOEVENkUxQTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J3dzNja0dNU0h5TlE5TjY3REtoM1FKSjl6c3RSam82NVVqWjRVaHk0ZXF5LzEv
MzIzODMwMzQzYTMzMzIzOTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzAzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQynDANBgkqhkiG9w0BAQsFAAOCAQEAlcgY7OTO
bHn4D/ng9dE8G2mltoIAvEpWcTUCVYrtCho2LdoB1i1GlBdo+GyCQl2Jdc2WyE2n
RdcquG2IAew+2q8KFF/BgA/Tj/xkdgkNzhlCnirgjX5x7A672mAjLg6Wph4RVXyv
/IGWDaDJryq9vUssjYF1sSMivi6J4iUz6O/yal40wutqO7QJq3Vfu5m0ZUGRIGw+
RwNYhZbXs6qNhzaT1XRNHYpOV85XDUNrorH7cPTydfyKOrlYzeVzBULJLEaJJkC3
O5kNxHnINBT73lOBJ74284mE/fQUrW1wfw1hjcLw4qEEQIJPwR/2B5aeA1IZCrj1
Uw8r27vXgMbNkw==
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:54:38 2026 by rpki-client