Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a343030303a3a2f33342d3334203d3e20323634333131.roa
File:                     323830343a323566303a343030303a3a2f33342d3334203d3e20323634333131.roa (raw, json)
Hash identifier:          MJzxyBpaq3dxL7ZErsUmSjclyY6NyuVdIu3Ss3xM8co=
Subject key identifier:   EC:52:C8:12:28:EF:BA:8A:02:26:3F:DE:13:A0:12:5B:52:30:5E:F7
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       1B2E7D8107791F673FD49EB4FE68996E44B6532A
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a343030303a3a2f33342d3334203d3e20323634333131.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     264311
IP address blocks:        2804:25f0:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl
                          rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:2e:7d:81:07:79:1f:67:3f:d4:9e:b4:fe:68:99:6e:44:b6:53:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:14:7c:88:1b:79:bd:25:4e:22:5d:89:78:ba:
                    1b:0b:e0:00:e8:a9:a1:ee:33:81:6b:05:f9:86:9a:
                    bc:13:5d:8a:c2:15:81:89:73:3f:b8:de:6e:58:66:
                    e0:a0:0d:dd:cd:e6:4a:5b:bd:b8:b5:9f:22:96:5a:
                    fb:f9:33:4f:c5:81:a0:32:8d:11:1f:63:5e:1c:f4:
                    6f:0b:9d:e7:da:88:8d:c7:6e:91:08:1d:51:67:96:
                    e4:ce:44:a0:4a:e3:9b:72:01:d2:40:c2:6b:5e:07:
                    e2:ea:c8:9d:ce:f8:5a:6a:97:6c:0e:94:c5:c9:1b:
                    76:2b:ec:4b:e9:77:e8:9b:34:1f:bc:b1:43:af:d4:
                    a3:3f:67:17:84:ef:5c:e2:63:c7:18:dc:c5:52:71:
                    6a:11:f4:4a:f2:ed:a9:80:82:52:2c:71:33:b4:7f:
                    bc:84:f1:03:e9:85:c8:9a:96:07:1c:ce:8d:c5:4d:
                    6c:ff:e8:44:43:2d:fa:02:de:a7:3c:c1:6a:15:ac:
                    b9:e2:f9:2c:55:06:5c:72:01:c4:1e:09:4e:ec:aa:
                    f6:4f:aa:98:86:b8:9c:9e:a0:a5:eb:5c:33:95:ee:
                    3e:f4:b7:be:5f:15:f3:1e:ad:7b:58:76:a7:c0:ab:
                    08:50:9a:0d:cd:e7:01:a6:1d:c0:49:d9:0c:73:53:
                    c0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:52:C8:12:28:EF:BA:8A:02:26:3F:DE:13:A0:12:5B:52:30:5E:F7
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a343030303a3a2f33342d3334203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25f0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         05:ce:91:e8:7f:b2:41:e3:3b:6f:df:e0:c8:46:0d:47:73:99:
         c1:f2:76:2f:8c:74:ec:38:db:bf:3f:c1:25:27:39:01:f2:76:
         06:64:c8:df:21:6f:96:c2:80:d1:2f:59:ae:ce:e5:f6:a3:0f:
         b1:b7:a7:cc:ff:90:a4:05:a6:a8:f2:81:d9:87:2c:49:27:6e:
         18:bc:21:ab:e3:81:e5:da:c2:07:8c:52:fd:44:2a:40:b8:84:
         10:a1:fe:aa:f7:91:11:bc:74:3f:50:95:12:c6:69:16:0c:4a:
         3b:4f:3f:ec:d5:1b:ca:49:c6:bb:9e:8c:97:0d:80:4f:e8:12:
         d9:39:86:ca:a7:81:de:2c:b3:5e:9b:75:cc:3a:58:7e:28:22:
         47:29:85:2e:02:df:5f:ee:7b:c6:07:5d:77:37:96:e5:e2:5c:
         f5:f1:0a:90:a4:b6:99:7c:94:59:0c:61:bb:db:c2:12:ec:9f:
         4b:30:ff:b5:fc:97:17:7c:37:7d:2b:88:8b:9f:a0:b6:ae:77:
         27:48:5f:89:dd:93:b7:09:6e:29:ec:84:95:e0:86:eb:98:5c:
         03:db:6c:36:e8:0b:45:1a:f7:7c:d8:14:8e:e2:11:34:73:a4:
         0a:bc:fe:94:89:b5:6c:ff:21:83:b0:8a:97:09:12:b5:ef:d3:
         5c:ca:2e:a1
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUGy59gQd5H2c/1J60/miZbkS2UyowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVFMEJFM0M0RjczRjg1MkJGRjM1MzU1MzcwMzdDQUU0
ODJBNEVGQTAeFw0yNjAyMDQxODU1MDBaFw0yNzAyMDMxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjQxNDdDODgxQjc5QkQyNTRF
MjI1RDg5NzhCQTFCMEJFMDAwRThBOUExRUUzMzgxNkIwNUY5ODY5QUJDMTM1RDhB
QzIxNTgxODk3MzNGQjhERTZFNTg2NkUwQTAwREREQ0RFNjRBNUJCREI4QjU5RjIy
OTY1QUZCRjkzMzRGQzU4MUEwMzI4RDExMUY2MzVFMUNGNDZGMEI5REU3REE4ODhE
Qzc2RTkxMDgxRDUxNjc5NkU0Q0U0NEEwNEFFMzlCNzIwMUQyNDBDMjZCNUUwN0Uy
RUFDODlEQ0VGODVBNkE5NzZDMEU5NEM1QzkxQjc2MkJFQzRCRTk3N0U4OUIzNDFG
QkNCMTQzQUZENEEzM0Y2NzE3ODRFRjVDRTI2M0M3MThEQ0M1NTI3MTZBMTFGNDRB
RjJFREE5ODA4MjUyMkM3MTMzQjQ3RkJDODRGMTAzRTk4NUM4OUE5NjA3MUNDRThE
QzU0RDZDRkZFODQ0NDMyREZBMDJERUE3M0NDMTZBMTVBQ0I5RTJGOTJDNTUwNjVD
NzIwMUM0MUUwOTRFRUNBQUY2NEZBQTk4ODZCODlDOUVBMEE1RUI1QzMzOTVFRTNF
RjRCN0JFNUYxNUYzMUVBRDdCNTg3NkE3QzBBQjA4NTA5QTBEQ0RFNzAxQTYxREMw
NDlEOTBDNzM1M0MwNzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtBR8iBt5vSVOIl2JeLobC+AA6Kmh7jOBawX5hpq8E12KwhWBiXM/
uN5uWGbgoA3dzeZKW724tZ8illr7+TNPxYGgMo0RH2NeHPRvC53n2oiNx26RCB1R
Z5bkzkSgSuObcgHSQMJrXgfi6sidzvhaapdsDpTFyRt2K+xL6XfomzQfvLFDr9Sj
P2cXhO9c4mPHGNzFUnFqEfRK8u2pgIJSLHEztH+8hPED6YXImpYHHM6NxU1s/+hE
Qy36At6nPMFqFay54vksVQZccgHEHglO7Kr2T6qYhricnqCl61wzle4+9Le+XxXz
Hq17WHanwKsIUJoNzecBph3ASdkMc1PAdQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FOxSyBIo77qKAiY/3hOgEltSMF73MB8GA1UdIwQYMBaAFLXgvjxPc/hSv/NTVTcD
fK5IKk76MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NDbXdzVEgzZ3F0UUdI
d2VWRGtWVjV6RXdRS1JkUHZVQWNEYWpBUXQ5V1JmLzEvQjVFMEJFM0M0RjczRjg1
MkJGRjM1MzU1MzcwMzdDQUU0ODJBNEVGQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CNUUwQkUzQzRGNzNGODUyQkZGMzUzNTUzNzAzN0NBRTQ4MkE0
RUZBLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DQ213c1RIM2dxdFFHSHdlVkRr
VlY1ekV3UUtSZFB2VUFjRGFqQVF0OVdSZi8xLzMyMzgzMDM0M2EzMjM1NjYzMDNh
MzQzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM2MzQzMzMxMzEucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgYoBCXwQDANBgkqhkiG9w0BAQsFAAOCAQEABc6R6H+yQeM7b9/gyEYN
R3OZwfJ2L4x07Djbvz/BJSc5AfJ2BmTI3yFvlsKA0S9Zrs7l9qMPsbenzP+QpAWm
qPKB2YcsSSduGLwhq+OB5drCB4xS/UQqQLiEEKH+qveREbx0P1CVEsZpFgxKO08/
7NUbyknGu56Mlw2AT+gS2TmGyqeB3iyzXpt1zDpYfigiRymFLgLfX+57xgdddzeW
5eJc9fEKkKS2mXyUWQxhu9vCEuyfSzD/tfyXF3w3fSuIi5+gtq53J0hfid2Ttwlu
KeyEleCG65hcA9tsNugLRRr3fNgUjuIRNHOkCrz+lIm1bP8hg7CKlwkSte/TXMou
oQ==
-----END CERTIFICATE-----
Generated at Thu Feb 19 11:55:48 2026 by rpki-client