Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a383030303a3a2f33332d3333203d3e20323731303031.roa
File:                     323830343a373463303a383030303a3a2f33332d3333203d3e20323731303031.roa (raw, json)
Hash identifier:          qYZkWgpVVLbm9MkhZNlJEtL1eu/zJOHCRqzNVEJEnoU=
Subject key identifier:   C7:B7:85:86:B8:B7:0F:AF:1C:F0:96:CC:6A:F8:D2:67:3A:E0:0F:20
Certificate issuer:       /CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
Certificate serial:       6545BA5839E1B6448A5474F0B5D503DE3DFF7C50
Authority key identifier: B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a383030303a3a2f33332d3333203d3e20323731303031.roa
Signing time:             Thu 05 Feb 2026 02:16:17 +0000
ROA not before:           Thu 05 Feb 2026 02:11:17 +0000
ROA not after:            Thu 04 Feb 2027 02:16:17 +0000
asID:                     271001
IP address blocks:        2804:74c0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl
                          rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:45:ba:58:39:e1:b6:44:8a:54:74:f0:b5:d5:03:de:3d:ff:7c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
        Validity
            Not Before: Feb  5 02:11:17 2026 GMT
            Not After : Feb  4 02:16:17 2027 GMT
        Subject: CN=C7B78586B8B70FAF1CF096CC6AF8D2673AE00F20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:60:a8:6b:67:ab:97:2d:8d:9c:fb:8c:55:
                    50:e8:38:80:54:8f:12:aa:11:9b:8b:96:af:90:8d:
                    ee:e9:f0:5b:4c:d2:6d:96:8f:5a:64:81:74:19:de:
                    81:53:22:c0:5f:ca:69:a9:7c:07:43:8f:b4:64:78:
                    74:86:0a:31:51:2f:dc:f1:cd:5e:a2:15:5e:e2:93:
                    30:eb:ff:24:06:e5:2b:8a:50:e0:e9:29:2f:51:8b:
                    e9:f8:d5:e5:28:3d:f7:00:6d:49:91:be:88:b7:50:
                    36:61:0b:4f:40:08:92:d7:26:0d:6b:37:2e:51:7d:
                    4d:6a:aa:49:f5:c7:f3:04:5e:35:19:bf:3e:c4:92:
                    c6:a4:0a:b1:05:d2:10:aa:39:4e:16:b8:91:59:c3:
                    1c:4d:2d:04:89:2e:9f:20:16:a9:c7:40:38:33:3f:
                    f8:da:4c:24:74:0b:d8:57:5c:7e:5b:32:a8:ee:0c:
                    2d:7c:ee:7e:f6:2c:07:d1:d0:df:01:73:82:9c:46:
                    8f:df:58:5c:c2:d3:50:7f:b3:26:9e:2d:fb:7b:2f:
                    7b:c6:90:1b:3b:7f:d2:69:31:2e:76:8d:63:85:0a:
                    23:bb:e2:5a:90:fc:14:52:0a:39:83:a7:09:ac:66:
                    06:4e:d8:0f:e9:be:f0:7b:2a:57:11:6e:80:04:85:
                    05:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B7:85:86:B8:B7:0F:AF:1C:F0:96:CC:6A:F8:D2:67:3A:E0:0F:20
            X509v3 Authority Key Identifier:
                keyid:B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a383030303a3a2f33332d3333203d3e20323731303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74c0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         95:20:3a:bc:f7:e7:df:02:08:6b:14:ae:b3:59:76:e1:a5:67:
         2d:d2:c7:a7:a7:86:45:3d:4d:c1:b2:43:7f:e0:9d:73:84:eb:
         8b:a9:2c:8e:9d:4f:f7:ca:3f:f2:e4:ed:ab:ad:df:9d:7a:44:
         3e:3a:bb:6c:82:29:b7:1e:00:3b:8f:28:48:3c:39:2c:c5:ec:
         d5:f8:81:4c:05:d6:52:7a:69:5c:af:c5:ad:19:c6:b8:11:49:
         0e:a3:fb:79:db:6c:6c:9a:75:9f:d6:e9:27:89:d0:9c:ef:8e:
         c9:41:72:7b:72:2a:f4:fc:08:91:62:15:ee:3b:75:11:c1:4c:
         a4:a3:0f:b6:f3:88:93:66:c1:48:3e:d1:67:8e:59:ba:5a:d5:
         a4:08:ad:c5:b7:52:85:fa:3a:ea:eb:bc:c4:e8:07:1f:50:7b:
         69:79:10:95:46:93:23:80:93:93:84:25:14:d8:0c:0f:71:a4:
         17:3f:75:5b:e5:7f:69:53:31:34:57:9a:2c:a1:20:04:64:6f:
         89:28:44:b4:b9:9e:f9:11:9f:7c:bf:2d:29:7c:2b:84:52:58:
         fa:dc:72:28:b9:25:c5:15:50:21:a4:8e:31:87:12:80:0c:f9:
         8a:58:0c:26:a1:8f:c7:e3:e9:05:f1:12:b0:26:79:eb:de:94:
         3b:9a:70:2e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUZUW6WDnhtkSKVHTwtdUD3j3/fFAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZDNUZCODU3RTY5QTkwNDQ5NzNGQTMwNjJBQTFENkZC
RjVDNEE4MTAeFw0yNjAyMDUwMjExMTdaFw0yNzAyMDQwMjE2MTdaMDMxMTAvBgNV
BAMTKEM3Qjc4NTg2QjhCNzBGQUYxQ0YwOTZDQzZBRjhEMjY3M0FFMDBGMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9VWCoa2erly2NnPuMVVDoOIBU
jxKqEZuLlq+Qje7p8FtM0m2Wj1pkgXQZ3oFTIsBfymmpfAdDj7RkeHSGCjFRL9zx
zV6iFV7ikzDr/yQG5SuKUODpKS9Ri+n41eUoPfcAbUmRvoi3UDZhC09ACJLXJg1r
Ny5RfU1qqkn1x/MEXjUZvz7EksakCrEF0hCqOU4WuJFZwxxNLQSJLp8gFqnHQDgz
P/jaTCR0C9hXXH5bMqjuDC187n72LAfR0N8Bc4KcRo/fWFzC01B/syaeLft7L3vG
kBs7f9JpMS52jWOFCiO74lqQ/BRSCjmDpwmsZgZO2A/pvvB7KlcRboAEhQXDAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUx7eFhri3D68c8JbMavjSZzrgDyAwHwYDVR0j
BBgwFoAUtsX7hX5pqQRJc/owYqodb79cSoEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1o1dWN2NzIxZDRmRGJxQXVFMVVtOFpuUWo4cGFwYUo1MUhTUnBIeGlX
RFUvMS9CNkM1RkI4NTdFNjlBOTA0NDk3M0ZBMzA2MkFBMUQ2RkJGNUM0QTgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I2QzVGQjg1N0U2OUE5MDQ0
OTczRkEzMDYyQUExRDZGQkY1QzRBODEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NaNXVjdjcyMWQ0ZkRicUF1RTFVbThablFqOHBhcGFKNTFIU1JwSHhpV0RVLzEv
MzIzODMwMzQzYTM3MzQ2MzMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMTMwMzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEdMCAMA0GCSqGSIb3DQEBCwUA
A4IBAQCVIDq89+ffAghrFK6zWXbhpWct0senp4ZFPU3BskN/4J1zhOuLqSyOnU/3
yj/y5O2rrd+dekQ+Ortsgim3HgA7jyhIPDksxezV+IFMBdZSemlcr8WtGca4EUkO
o/t522xsmnWf1uknidCc747JQXJ7cir0/AiRYhXuO3URwUykow+284iTZsFIPtFn
jlm6WtWkCK3Ft1KF+jrq67zE6AcfUHtpeRCVRpMjgJOThCUU2AwPcaQXP3Vb5X9p
UzE0V5osoSAEZG+JKES0uZ75EZ98vy0pfCuEUlj63HIouSXFFVAhpI4xhxKADPmK
WAwmoY/H4+kF8RKwJnnr3pQ7mnAu
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:36:26 2026 by rpki-client