Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a3a2f33322d3332203d3e20323634323437.roa
File:                     323830343a323465343a3a2f33322d3332203d3e20323634323437.roa (raw, json)
Hash identifier:          EF15jBZSyTHZQvsdvblHtdmAWc8RHgvtx1gXjTVp0/c=
Subject key identifier:   C2:42:DD:F0:0C:D8:A5:41:85:13:A1:10:D0:D5:33:AA:34:2D:3C:92
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       559D60BF92114960944DD6D565AF091DBA55FE8C
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a3a2f33322d3332203d3e20323634323437.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     264247
IP address blocks:        2804:24e4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl
                          rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:9d:60:bf:92:11:49:60:94:4d:d6:d5:65:af:09:1d:ba:55:fe:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=C242DDF00CD8A5418513A110D0D533AA342D3C92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a1:34:e7:52:a8:0e:86:42:a4:cb:cd:61:d4:
                    90:03:0e:06:f7:29:ed:14:bd:b4:60:7e:b4:0a:ed:
                    7e:34:f3:d4:d6:df:5a:ba:05:82:b5:de:b9:5c:f5:
                    ee:cd:1a:e0:b6:00:ab:04:81:17:d7:1c:46:47:72:
                    c8:eb:77:99:e2:d9:58:7c:2d:ca:f8:01:73:df:e5:
                    b2:a2:74:fe:93:2d:ca:b8:74:14:7f:2a:52:52:54:
                    4b:e2:63:c3:a6:68:08:ac:30:b5:0c:a1:9e:a4:e6:
                    e2:3f:34:f3:91:fa:88:d3:39:81:a8:7c:8d:af:af:
                    7e:b1:27:2c:d8:11:71:81:6f:9e:52:d2:df:23:ab:
                    67:8a:1c:bd:48:25:8a:88:86:73:03:f2:65:e5:74:
                    37:0e:46:85:cf:0b:5f:dd:74:1d:0f:67:cf:6e:5d:
                    30:b6:ac:1b:1c:e2:1c:01:84:62:da:97:6e:08:4e:
                    05:a6:92:2a:dd:af:7c:1b:ca:7c:3d:08:e1:52:34:
                    a3:cc:51:5b:c5:00:59:cd:b5:14:20:19:6b:b5:2e:
                    5a:8e:52:de:16:33:09:87:cd:d2:73:99:9a:44:b9:
                    6e:e7:8f:73:89:19:98:75:6f:d9:71:a3:6f:bb:f3:
                    2f:3c:4b:22:08:8c:28:74:e8:7a:20:5a:bf:6a:5e:
                    3d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:42:DD:F0:0C:D8:A5:41:85:13:A1:10:D0:D5:33:AA:34:2D:3C:92
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a3a2f33322d3332203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:0c:ad:81:f3:82:77:b6:a3:ec:f6:2f:55:17:22:6f:92:7f:
         d0:f2:f8:b9:b1:0d:da:20:a2:a1:a9:96:db:3b:f5:58:78:b7:
         8d:40:0f:be:44:79:e4:56:5b:a5:a8:e5:c5:37:8d:26:06:2f:
         61:6b:65:f0:b7:0e:81:c5:79:88:7d:87:fa:41:39:05:64:b1:
         b9:5d:1a:09:bd:ed:ef:b9:18:78:8b:97:8e:1c:85:fb:9f:b1:
         9e:bf:17:b5:0d:91:c4:15:f1:1c:e6:07:cb:4c:12:6f:35:8b:
         ae:3f:5d:29:48:3f:06:fb:88:a2:79:0b:40:48:6f:12:ca:04:
         14:68:93:24:b2:5a:30:06:91:31:4a:21:3a:1c:da:6e:e0:ef:
         2f:e8:be:9e:95:20:f5:a2:bf:cd:65:d1:7a:e2:0c:18:95:04:
         e8:df:21:5e:5a:4a:6c:40:a6:36:8c:9a:10:90:c4:c2:b4:ed:
         be:a1:64:cb:9e:56:9d:82:57:4c:ac:ab:d3:3e:ba:4b:4f:ab:
         3d:8e:98:09:54:03:18:7c:4e:34:31:2b:28:6f:89:b4:af:56:
         96:50:4a:ca:eb:b2:94:79:72:0c:0a:b9:56:6b:5d:6c:27:72:
         d4:26:1c:30:a7:9d:47:e7:a8:97:dd:3e:39:97:57:04:0d:ad:
         38:c0:01:48
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVZ1gv5IRSWCUTdbVZa8JHbpV/owwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJGRTE2RkFDRDI5OTMxNkZDRUY3M0NGRUE3ODI4NDRE
N0MyRTY5ODAeFw0yNjAyMDQxODU1MDBaFw0yNzAyMDMxOTAwMDBaMDMxMTAvBgNV
BAMTKEMyNDJEREYwMENEOEE1NDE4NTEzQTExMEQwRDUzM0FBMzQyRDNDOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVoTTnUqgOhkKky81h1JADDgb3
Ke0UvbRgfrQK7X4089TW31q6BYK13rlc9e7NGuC2AKsEgRfXHEZHcsjrd5ni2Vh8
Lcr4AXPf5bKidP6TLcq4dBR/KlJSVEviY8OmaAisMLUMoZ6k5uI/NPOR+ojTOYGo
fI2vr36xJyzYEXGBb55S0t8jq2eKHL1IJYqIhnMD8mXldDcORoXPC1/ddB0PZ89u
XTC2rBsc4hwBhGLal24ITgWmkirdr3wbynw9COFSNKPMUVvFAFnNtRQgGWu1LlqO
Ut4WMwmHzdJzmZpEuW7nj3OJGZh1b9lxo2+78y88SyIIjCh06HogWr9qXj1NAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUwkLd8AzYpUGFE6EQ0NUzqjQtPJIwHwYDVR0j
BBgwFoAUEv4W+s0pkxb873PP6ngoRNfC5pgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGlBdHRMaURMaXJEUjMycWdlZk5oTDNzdkhTYUh0VXltM0dxaHVaWFY0
dHMvMS8xMkZFMTZGQUNEMjk5MzE2RkNFRjczQ0ZFQTc4Mjg0NEQ3QzJFNjk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyRkUxNkZBQ0QyOTkzMTZG
Q0VGNzNDRkVBNzgyODQ0RDdDMkU2OTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RpQXR0TGlETGlyRFIzMnFnZWZOaEwzc3ZIU2FIdFV5bTNHcWh1WlhWNHRzLzEv
MzIzODMwMzQzYTMyMzQ2NTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzIzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQk5DANBgkqhkiG9w0BAQsFAAOCAQEAswytgfOC
d7aj7PYvVRcib5J/0PL4ubEN2iCioamW2zv1WHi3jUAPvkR55FZbpajlxTeNJgYv
YWtl8LcOgcV5iH2H+kE5BWSxuV0aCb3t77kYeIuXjhyF+5+xnr8XtQ2RxBXxHOYH
y0wSbzWLrj9dKUg/BvuIonkLQEhvEsoEFGiTJLJaMAaRMUohOhzabuDvL+i+npUg
9aK/zWXReuIMGJUE6N8hXlpKbECmNoyaEJDEwrTtvqFky55WnYJXTKyr0z66S0+r
PY6YCVQDGHxONDErKG+JtK9WllBKyuuylHlyDAq5VmtdbCdy1CYcMKedR+eol90+
OZdXBA2tOMABSA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 15:56:57 2026 by rpki-client