Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/323830343a333939383a3a2f33322d3334203d3e20323636303338.roa
File:                     323830343a333939383a3a2f33322d3334203d3e20323636303338.roa (raw, json)
Hash identifier:          qa4JmpUgTKi07m1iEVngLtO90kMKRzciKUko8CQur6I=
Subject key identifier:   CD:79:13:D1:D5:55:D1:04:0C:BE:CA:EA:54:22:7F:E2:97:AC:33:0A
Certificate issuer:       /CN=96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE
Certificate serial:       056B7B1D2FA05F60B4D0E713A84AF6E341FF33C1
Authority key identifier: 96:F2:FB:F6:6A:D2:E9:F6:1E:CC:CE:C6:77:41:C6:AD:17:36:AC:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/323830343a333939383a3a2f33322d3334203d3e20323636303338.roa
Signing time:             Thu 05 Feb 2026 19:56:43 +0000
ROA not before:           Thu 05 Feb 2026 19:51:43 +0000
ROA not after:            Thu 04 Feb 2027 19:56:43 +0000
asID:                     266038
IP address blocks:        2804:3998::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.crl
                          rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:6b:7b:1d:2f:a0:5f:60:b4:d0:e7:13:a8:4a:f6:e3:41:ff:33:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE
        Validity
            Not Before: Feb  5 19:51:43 2026 GMT
            Not After : Feb  4 19:56:43 2027 GMT
        Subject: CN=CD7913D1D555D1040CBECAEA54227FE297AC330A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8e:58:c7:eb:c0:34:0f:d5:ed:64:50:c6:ac:
                    46:a8:89:76:67:b5:9a:cd:0a:23:6c:73:69:95:4e:
                    cc:71:cf:a0:d1:ce:66:da:8e:b9:fd:fa:be:ea:43:
                    96:0c:67:6a:11:39:d6:7f:62:b3:a3:cf:a1:b6:91:
                    a1:b8:78:87:ba:bc:13:95:28:29:25:b7:3b:d5:a9:
                    15:37:a9:5f:59:28:59:86:85:ca:e0:de:97:60:19:
                    4b:a3:f1:70:f2:23:58:f5:66:13:9d:4c:bf:f6:4f:
                    48:bf:d7:05:d5:88:93:3a:0b:17:c7:bc:2e:be:74:
                    94:49:43:00:07:b0:11:53:2f:07:ca:4e:44:d9:fb:
                    da:2a:1f:b6:51:c5:8d:19:47:95:a5:9b:28:4a:e1:
                    ba:bd:76:76:b1:85:e7:d7:3f:bf:d0:0d:74:10:39:
                    ee:e6:99:02:10:85:5d:67:1e:25:49:3f:e9:f7:9c:
                    92:c3:10:4d:cb:dc:d4:9c:c9:3f:ab:f7:72:31:f4:
                    25:24:64:2d:6f:e4:79:6e:1b:56:e3:6b:d7:f6:d5:
                    73:8e:8a:85:1f:02:06:2a:8b:0b:29:50:ec:38:9a:
                    46:8c:63:15:ba:5f:f7:f0:62:60:84:d0:f6:ac:d0:
                    f5:8b:a8:3b:85:54:ff:3d:71:cd:44:fc:ac:43:b4:
                    98:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:79:13:D1:D5:55:D1:04:0C:BE:CA:EA:54:22:7F:E2:97:AC:33:0A
            X509v3 Authority Key Identifier:
                keyid:96:F2:FB:F6:6A:D2:E9:F6:1E:CC:CE:C6:77:41:C6:AD:17:36:AC:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/323830343a333939383a3a2f33322d3334203d3e20323636303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3998::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:2e:73:1c:63:34:59:b4:e9:4e:87:cd:e2:a6:13:87:0a:26:
         d8:1c:b4:ca:d1:09:7e:74:18:95:b5:4b:b9:41:87:8a:af:0c:
         da:d8:4a:d7:9a:a5:ac:f3:ca:99:bd:cd:34:47:8b:eb:95:a9:
         b8:95:7a:18:6e:e5:84:fa:6b:2d:69:b0:48:91:7e:d9:19:2d:
         bf:2b:ff:92:ab:f7:10:01:0d:79:1f:0a:ca:46:71:2c:b3:b1:
         d9:1e:55:f4:5f:42:03:6b:c7:eb:29:22:9f:28:41:ed:da:fa:
         f3:41:fb:7a:9f:1f:5a:48:0e:26:ab:b2:9f:f9:f9:45:ac:d2:
         b6:e3:50:da:ed:85:7f:75:54:26:7d:8f:98:ac:de:1f:ba:13:
         16:6e:26:4c:19:6a:c0:94:e3:7c:b3:3a:74:77:d7:01:1e:59:
         f6:53:3e:78:1c:f2:5d:d7:44:28:30:21:0a:af:ff:cf:67:e6:
         55:21:59:4c:0a:c2:9b:59:24:40:a1:14:56:30:06:0d:60:6d:
         4d:49:8d:54:86:62:8c:54:e8:5a:eb:2d:e6:e6:c7:5c:2a:8a:
         34:65:c7:09:cb:b5:55:68:3b:57:a8:aa:2c:70:0f:a9:4f:7c:
         a6:53:4a:03:ea:d8:b6:44:5b:00:1e:d6:36:53:50:02:89:d0:
         4c:3b:9a:e3
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUBWt7HS+gX2C00OcTqEr240H/M8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZGMkZCRjY2QUQyRTlGNjFFQ0NDRUM2Nzc0MUM2QUQx
NzM2QUNERTAeFw0yNjAyMDUxOTUxNDNaFw0yNzAyMDQxOTU2NDNaMDMxMTAvBgNV
BAMTKENENzkxM0QxRDU1NUQxMDQwQ0JFQ0FFQTU0MjI3RkUyOTdBQzMzMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQjljH68A0D9XtZFDGrEaoiXZn
tZrNCiNsc2mVTsxxz6DRzmbajrn9+r7qQ5YMZ2oROdZ/YrOjz6G2kaG4eIe6vBOV
KCkltzvVqRU3qV9ZKFmGhcrg3pdgGUuj8XDyI1j1ZhOdTL/2T0i/1wXViJM6CxfH
vC6+dJRJQwAHsBFTLwfKTkTZ+9oqH7ZRxY0ZR5WlmyhK4bq9dnaxhefXP7/QDXQQ
Oe7mmQIQhV1nHiVJP+n3nJLDEE3L3NScyT+r93Ix9CUkZC1v5HluG1bja9f21XOO
ioUfAgYqiwspUOw4mkaMYxW6X/fwYmCE0Pas0PWLqDuFVP89cc1E/KxDtJhTAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUzXkT0dVV0QQMvsrqVCJ/4pesMwowHwYDVR0j
BBgwFoAUlvL79mrS6fYezM7Gd0HGrRc2rN4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ05NZ2YyQW02dFdoekp5YUFIMmlpMlhmVlJpNXQ0eEdmNlRIM2N2Qmh1
aEcvMS85NkYyRkJGNjZBRDJFOUY2MUVDQ0NFQzY3NzQxQzZBRDE3MzZBQ0RFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2RjJGQkY2NkFEMkU5RjYx
RUNDQ0VDNjc3NDFDNkFEMTczNkFDREUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NOTWdmMkFtNnRXaHpKeWFBSDJpaTJYZlZSaTV0NHhHZjZUSDNjdkJodWhHLzEv
MzIzODMwMzQzYTMzMzkzOTM4M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM2
MzAzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ5mDANBgkqhkiG9w0BAQsFAAOCAQEAfS5zHGM0
WbTpTofN4qYThwom2By0ytEJfnQYlbVLuUGHiq8M2thK15qlrPPKmb3NNEeL65Wp
uJV6GG7lhPprLWmwSJF+2Rktvyv/kqv3EAENeR8KykZxLLOx2R5V9F9CA2vH6yki
nyhB7dr680H7ep8fWkgOJquyn/n5RazStuNQ2u2Ff3VUJn2PmKzeH7oTFm4mTBlq
wJTjfLM6dHfXAR5Z9lM+eBzyXddEKDAhCq//z2fmVSFZTArCm1kkQKEUVjAGDWBt
TUmNVIZijFToWust5ubHXCqKNGXHCcu1VWg7V6iqLHAPqU98plNKA+rYtkRbAB7W
NlNQAonQTDua4w==
-----END CERTIFICATE-----
Generated at Thu Feb 19 19:08:15 2026 by rpki-client