Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a383030303a3a2f33342d3334203d3e20323638383739.roa
File:                     323830343a356266343a383030303a3a2f33342d3334203d3e20323638383739.roa (raw, json)
Hash identifier:          pCul15Ayhk39LPdTB+kLgETeZ6J6TdBciZqOZ2uU50Q=
Subject key identifier:   F5:71:05:8F:BB:7E:79:74:47:EB:AD:28:C6:41:4E:00:1F:A3:CF:6B
Certificate issuer:       /CN=28C4721E667593A43DA7832F588E6B6B8F57311C
Certificate serial:       552C65A0FD6FBD0DE912FA71FB2B0620C2BD1F37
Authority key identifier: 28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a383030303a3a2f33342d3334203d3e20323638383739.roa
Signing time:             Thu 05 Feb 2026 07:29:24 +0000
ROA not before:           Thu 05 Feb 2026 07:24:24 +0000
ROA not after:            Thu 04 Feb 2027 07:29:24 +0000
asID:                     268879
IP address blocks:        2804:5bf4:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl
                          rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 10:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:2c:65:a0:fd:6f:bd:0d:e9:12:fa:71:fb:2b:06:20:c2:bd:1f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C4721E667593A43DA7832F588E6B6B8F57311C
        Validity
            Not Before: Feb  5 07:24:24 2026 GMT
            Not After : Feb  4 07:29:24 2027 GMT
        Subject: CN=F571058FBB7E797447EBAD28C6414E001FA3CF6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5f:d0:64:ab:64:38:90:3b:f1:50:37:61:34:
                    5d:50:36:5f:61:0c:ec:84:c5:d0:2d:04:f7:79:ff:
                    7a:9f:0c:e0:79:bf:e7:38:e1:c7:f2:6e:b9:a8:cd:
                    22:88:7f:b5:c5:2e:a9:bd:75:c9:f6:70:f6:20:fe:
                    18:60:d1:60:c2:c0:29:39:4e:54:0e:b9:da:96:f3:
                    d7:cb:65:7d:39:d3:7c:ef:8c:5f:e0:56:91:a9:10:
                    b4:df:e2:ed:8c:51:9d:d2:9b:e3:cb:0c:e2:07:ca:
                    54:d3:24:16:3f:fa:e2:b4:a1:29:e3:e5:7b:78:69:
                    df:0e:d2:88:c8:1b:e0:3c:3d:c4:88:6b:fb:c5:f0:
                    d4:07:34:28:b9:45:30:e2:93:35:f9:44:b2:8f:29:
                    c3:c2:09:6d:8a:39:02:ef:6d:c3:bb:a9:a0:76:c6:
                    a7:c7:2b:be:75:ee:f8:f8:15:d0:e0:bb:a5:3e:b4:
                    ba:e6:d3:70:88:2f:31:99:18:52:08:4f:f4:b6:ad:
                    77:f6:e2:b7:91:08:89:24:c6:0c:fc:ec:9b:5f:95:
                    2e:6c:b1:d5:a4:de:60:be:ad:32:bb:f3:8a:ca:1c:
                    0f:98:f1:24:ed:01:a6:f6:ad:d1:3d:b5:a8:5a:b1:
                    22:ed:ed:93:1e:4b:5e:8b:92:34:11:5c:03:a6:3e:
                    72:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:71:05:8F:BB:7E:79:74:47:EB:AD:28:C6:41:4E:00:1F:A3:CF:6B
            X509v3 Authority Key Identifier:
                keyid:28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a383030303a3a2f33342d3334203d3e20323638383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bf4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         05:50:03:66:a3:af:e1:57:27:d1:34:24:8e:d8:b8:de:7b:3b:
         d4:13:a3:ff:68:01:0e:1d:e5:bb:f3:ef:c3:ef:1f:a0:ad:54:
         6a:22:a3:1a:e2:b8:73:0b:96:b1:82:74:0f:fc:ad:73:f9:27:
         08:71:79:a0:95:6e:4b:9f:7f:f0:c0:da:52:56:cd:25:d0:74:
         29:9c:02:24:68:f3:1c:72:5d:32:3a:c1:87:45:be:ce:a0:3b:
         ba:0d:cd:c9:d6:32:d8:2f:8b:df:a8:d5:61:06:f2:31:7c:3b:
         75:0e:25:0a:63:0b:96:cf:10:0b:ef:2c:42:af:e2:73:b0:74:
         71:d2:9b:cc:65:6e:83:54:cc:e8:f3:00:fe:11:ad:19:75:b6:
         2a:2d:8a:dd:62:0c:e6:25:a7:18:0f:e1:82:6c:66:98:86:e5:
         ea:e8:2f:9b:15:4f:d8:db:1c:f4:f8:94:41:3f:05:df:07:5c:
         13:f3:d0:dd:a8:17:db:37:c0:e0:ee:e6:b1:95:e6:d2:73:6d:
         96:57:d0:e4:2d:a9:aa:83:d9:ac:10:d1:6d:0d:de:4f:b8:dc:
         2e:f7:a8:6f:6f:06:00:1b:27:e7:0b:6e:27:83:9d:2b:39:8f:
         6e:9f:17:be:10:b4:66:e7:11:7d:87:b4:ad:9e:3a:bb:bc:d8:
         66:60:eb:9c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVSxloP1vvQ3pEvpx+ysGIMK9HzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhDNDcyMUU2Njc1OTNBNDNEQTc4MzJGNTg4RTZCNkI4
RjU3MzExQzAeFw0yNjAyMDUwNzI0MjRaFw0yNzAyMDQwNzI5MjRaMDMxMTAvBgNV
BAMTKEY1NzEwNThGQkI3RTc5NzQ0N0VCQUQyOEM2NDE0RTAwMUZBM0NGNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAX9Bkq2Q4kDvxUDdhNF1QNl9h
DOyExdAtBPd5/3qfDOB5v+c44cfybrmozSKIf7XFLqm9dcn2cPYg/hhg0WDCwCk5
TlQOudqW89fLZX0503zvjF/gVpGpELTf4u2MUZ3Sm+PLDOIHylTTJBY/+uK0oSnj
5Xt4ad8O0ojIG+A8PcSIa/vF8NQHNCi5RTDikzX5RLKPKcPCCW2KOQLvbcO7qaB2
xqfHK7517vj4FdDgu6U+tLrm03CILzGZGFIIT/S2rXf24reRCIkkxgz87JtflS5s
sdWk3mC+rTK784rKHA+Y8STtAab2rdE9tahasSLt7ZMeS16LkjQRXAOmPnLJAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU9XEFj7t+eXRH660oxkFOAB+jz2swHwYDVR0j
BBgwFoAUKMRyHmZ1k6Q9p4MvWI5ra49XMRwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFRlNU5LRnZmUDk2TEt6OG1IdWFHa0ZlZVRmREMxeUJVeGtyb3VmTnNU
cEMvMS8yOEM0NzIxRTY2NzU5M0E0M0RBNzgzMkY1ODhFNkI2QjhGNTczMTFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4QzQ3MjFFNjY3NTkzQTQz
REE3ODMyRjU4OEU2QjZCOEY1NzMxMUMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RUZTVOS0Z2ZlA5NkxLejhtSHVhR2tGZWVUZkRDMXlCVXhrcm91Zk5zVHBDLzEv
MzIzODMwMzQzYTM1NjI2NjM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODM4MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEW/SAMA0GCSqGSIb3DQEBCwUA
A4IBAQAFUANmo6/hVyfRNCSO2LjeezvUE6P/aAEOHeW78+/D7x+grVRqIqMa4rhz
C5axgnQP/K1z+ScIcXmglW5Ln3/wwNpSVs0l0HQpnAIkaPMccl0yOsGHRb7OoDu6
Dc3J1jLYL4vfqNVhBvIxfDt1DiUKYwuWzxAL7yxCr+JzsHRx0pvMZW6DVMzo8wD+
Ea0ZdbYqLYrdYgzmJacYD+GCbGaYhuXq6C+bFU/Y2xz0+JRBPwXfB1wT89DdqBfb
N8Dg7uaxlebSc22WV9DkLamqg9msENFtDd5PuNwu96hvbwYAGyfnC24ng50rOY9u
nxe+ELRm5xF9h7Stnjq7vNhmYOuc
-----END CERTIFICATE-----
Generated at Thu Feb 19 14:22:11 2026 by rpki-client