Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/323830343a333565303a323030303a3a2f33362d3336203d3e20323636333132.roa
File:                     323830343a333565303a323030303a3a2f33362d3336203d3e20323636333132.roa (raw, json)
Hash identifier:          iIYkbGKN7Ioth/1Xf8vWuIT+kfZdWc4FldNxQcie1w4=
Subject key identifier:   D7:6B:B1:62:97:60:BA:2B:D5:AA:11:2E:5E:1F:D5:8E:CF:11:91:5A
Certificate issuer:       /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial:       2ED31805C2724CA1670AB3CE05E6E186A2DC70AA
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/323830343a333565303a323030303a3a2f33362d3336203d3e20323636333132.roa
Signing time:             Thu 05 Feb 2026 13:03:52 +0000
ROA not before:           Thu 05 Feb 2026 12:58:52 +0000
ROA not after:            Thu 04 Feb 2027 13:03:52 +0000
asID:                     266312
IP address blocks:        2804:35e0:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl
                          rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d3:18:05:c2:72:4c:a1:67:0a:b3:ce:05:e6:e1:86:a2:dc:70:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
        Validity
            Not Before: Feb  5 12:58:52 2026 GMT
            Not After : Feb  4 13:03:52 2027 GMT
        Subject: CN=D76BB1629760BA2BD5AA112E5E1FD58ECF11915A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:16:f3:a1:a2:aa:36:d1:5a:31:0f:05:ad:99:
                    d5:8a:65:45:6e:ba:26:7d:e5:83:90:bb:b8:55:8f:
                    9b:c8:a0:fb:8f:c2:0a:f9:98:56:dc:2b:a6:fb:28:
                    b4:65:df:6a:97:63:4b:e1:c4:ed:85:86:f7:35:db:
                    99:51:75:0d:2c:23:0f:19:3b:6b:f2:f0:a8:44:42:
                    45:3e:40:1f:d4:05:5d:96:16:81:c8:95:df:7e:dc:
                    be:36:e5:a6:ba:f0:ea:a8:67:38:ec:8d:6c:0a:13:
                    ed:af:0c:ef:2a:b9:68:95:13:44:05:b7:df:a2:c7:
                    7e:f4:a7:c2:ae:35:32:c0:cc:49:5e:62:17:5c:83:
                    12:a4:91:17:f5:12:0e:98:39:27:56:94:b4:58:1a:
                    64:ef:53:2d:a3:c5:5c:14:63:70:b4:34:50:13:a6:
                    f8:b6:d2:e3:6d:f9:8b:7d:a0:bd:24:d3:1d:71:0f:
                    da:10:08:b5:bf:1e:97:62:96:11:78:0b:1a:1a:10:
                    da:9f:2a:06:e7:a0:08:f0:83:25:de:dc:d1:81:63:
                    27:50:33:8c:b7:f9:67:62:75:8b:33:da:47:ba:3b:
                    99:e7:d2:c7:79:5c:e0:99:8c:eb:be:57:c0:3f:29:
                    94:62:77:1c:e0:61:02:56:e4:ad:cd:7c:ed:4e:53:
                    20:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6B:B1:62:97:60:BA:2B:D5:AA:11:2E:5E:1F:D5:8E:CF:11:91:5A
            X509v3 Authority Key Identifier:
                keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/323830343a333565303a323030303a3a2f33362d3336203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35e0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3c:87:99:70:5b:21:4b:bc:40:7b:12:f0:ab:1c:59:ff:48:15:
         65:96:eb:63:85:fb:b2:e5:a0:e1:cd:6c:81:be:cf:0c:4f:d0:
         ec:f3:6f:d0:c6:dd:81:43:be:b6:a1:78:2e:fa:18:5b:b2:e5:
         d6:91:07:c1:83:75:fa:01:3e:dc:f0:13:f1:0f:31:a3:83:bb:
         65:7c:02:16:9a:6d:66:ce:3f:c4:c2:ca:59:08:b3:71:1f:17:
         3d:05:36:e0:d3:43:fa:cf:d9:3a:8a:52:79:04:a1:6b:19:96:
         12:3c:6e:83:2a:18:65:86:51:75:27:71:ef:af:11:8a:6f:b8:
         e1:16:2c:13:fa:19:e3:c8:dd:fd:95:b4:0f:e7:81:17:c0:35:
         a8:ce:10:d6:37:8c:6c:3e:bd:86:7a:cd:77:f2:b3:c6:7f:f7:
         91:75:05:41:1f:ab:01:63:09:75:b0:58:2c:d9:f9:0e:e3:e1:
         91:e4:74:82:67:d0:43:98:3e:37:bb:90:a0:d8:7e:75:87:b0:
         dc:3b:87:49:78:2b:e2:70:6f:2f:8c:cf:d4:79:6b:84:01:c7:
         2d:7d:84:d9:2e:6b:ba:a6:e8:3e:7c:4f:d6:6a:ec:25:16:1c:
         f4:c4:47:90:dc:26:56:85:fd:26:cc:26:49:ff:8d:01:58:37:
         9d:fb:f9:6b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIULtMYBcJyTKFnCrPOBebhhqLccKowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEyREM5RjU5MUQzMjU5OUMzQUIwNTYxQ0I4REVGNTlD
Mzk2QzA1NTAeFw0yNjAyMDUxMjU4NTJaFw0yNzAyMDQxMzAzNTJaMDMxMTAvBgNV
BAMTKEQ3NkJCMTYyOTc2MEJBMkJENUFBMTEyRTVFMUZENThFQ0YxMTkxNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwFvOhoqo20VoxDwWtmdWKZUVu
uiZ95YOQu7hVj5vIoPuPwgr5mFbcK6b7KLRl32qXY0vhxO2Fhvc125lRdQ0sIw8Z
O2vy8KhEQkU+QB/UBV2WFoHIld9+3L425aa68OqoZzjsjWwKE+2vDO8quWiVE0QF
t9+ix370p8KuNTLAzEleYhdcgxKkkRf1Eg6YOSdWlLRYGmTvUy2jxVwUY3C0NFAT
pvi20uNt+Yt9oL0k0x1xD9oQCLW/HpdilhF4CxoaENqfKgbnoAjwgyXe3NGBYydQ
M4y3+WdidYsz2ke6O5nn0sd5XOCZjOu+V8A/KZRidxzgYQJW5K3NfO1OUyDNAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU12uxYpdguivVqhEuXh/Vjs8RkVowHwYDVR0j
BBgwFoAUCi3J9ZHTJZnDqwVhy43vWcOWwFUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGRQQkpGNXZTMWl0eEZMUXh6OTlYeXVKVkFaeWFYUHpzVUU5Ykh3Mzdh
M24vMS8wQTJEQzlGNTkxRDMyNTk5QzNBQjA1NjFDQjhERUY1OUMzOTZDMDU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBMkRDOUY1OTFEMzI1OTlD
M0FCMDU2MUNCOERFRjU5QzM5NkMwNTUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RkUEJKRjV2UzFpdHhGTFF4ejk5WHl1SlZBWnlhWFB6c1VFOWJIdzM3YTNuLzEv
MzIzODMwMzQzYTMzMzU2NTMwM2EzMjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNjMzMzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgENeAgMA0GCSqGSIb3DQEBCwUA
A4IBAQA8h5lwWyFLvEB7EvCrHFn/SBVllutjhfuy5aDhzWyBvs8MT9Ds82/Qxt2B
Q762oXgu+hhbsuXWkQfBg3X6AT7c8BPxDzGjg7tlfAIWmm1mzj/EwspZCLNxHxc9
BTbg00P6z9k6ilJ5BKFrGZYSPG6DKhhlhlF1J3HvrxGKb7jhFiwT+hnjyN39lbQP
54EXwDWozhDWN4xsPr2Ges138rPGf/eRdQVBH6sBYwl1sFgs2fkO4+GR5HSCZ9BD
mD43u5Cg2H51h7DcO4dJeCvicG8vjM/UeWuEAcctfYTZLmu6pug+fE/WauwlFhz0
xEeQ3CZWhf0mzCZJ/40BWDed+/lr
-----END CERTIFICATE-----
Generated at Thu Feb 19 11:42:25 2026 by rpki-client