Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/1/323830343a333839633a3a2f33322d3430203d3e20323636343839.roa
File:                     323830343a333839633a3a2f33322d3430203d3e20323636343839.roa (raw, json)
Hash identifier:          mNfJHfOcPaAIBsqOvuWzf8kT6Rv8l+xDBhoic1MMk8Q=
Subject key identifier:   B0:A9:5E:2E:AD:E3:A7:A1:7A:AF:1E:AF:0A:A6:9C:59:AB:B2:2A:40
Certificate issuer:       /CN=EF945D3089B26045153874D31CF2D92589258BB1
Certificate serial:       74C45500E7466AC4BD9BE5419338799E5FD545DE
Authority key identifier: EF:94:5D:30:89:B2:60:45:15:38:74:D3:1C:F2:D9:25:89:25:8B:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF945D3089B26045153874D31CF2D92589258BB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/1/323830343a333839633a3a2f33322d3430203d3e20323636343839.roa
Signing time:             Thu 05 Feb 2026 05:29:20 +0000
ROA not before:           Thu 05 Feb 2026 05:24:20 +0000
ROA not after:            Thu 04 Feb 2027 05:29:20 +0000
asID:                     266489
IP address blocks:        2804:389c::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/1/EF945D3089B26045153874D31CF2D92589258BB1.crl
                          rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/1/EF945D3089B26045153874D31CF2D92589258BB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF945D3089B26045153874D31CF2D92589258BB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:20:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c4:55:00:e7:46:6a:c4:bd:9b:e5:41:93:38:79:9e:5f:d5:45:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF945D3089B26045153874D31CF2D92589258BB1
        Validity
            Not Before: Feb  5 05:24:20 2026 GMT
            Not After : Feb  4 05:29:20 2027 GMT
        Subject: CN=B0A95E2EADE3A7A17AAF1EAF0AA69C59ABB22A40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5b:24:63:eb:f5:f1:ea:bd:de:be:df:ef:01:
                    bd:00:d1:57:4f:94:b2:da:6c:39:1f:40:af:48:db:
                    3f:5b:86:88:6a:c1:69:07:f1:a4:a3:ed:76:30:12:
                    aa:5c:c6:2a:d8:13:7d:59:37:f9:75:ca:f3:07:64:
                    0d:e7:82:8c:b3:07:fb:20:9c:84:bf:26:f5:bb:d5:
                    e8:d8:7e:77:24:f4:31:34:9e:cc:76:28:99:ad:3a:
                    67:56:73:66:cb:60:c7:7c:3d:43:a1:b0:bf:d7:3d:
                    ae:09:67:07:55:72:e6:2b:2e:fa:42:0b:f8:7b:60:
                    78:8f:40:e1:d9:fb:80:81:b7:0b:33:f7:fc:0e:b2:
                    ca:bc:94:16:2a:f9:36:4b:49:16:fd:20:b7:ab:08:
                    93:f9:e6:08:13:d2:f5:72:b6:8a:10:2b:87:cc:61:
                    63:37:a0:10:53:36:1b:3c:6a:fa:18:c8:a7:86:3c:
                    99:e8:8e:3f:d1:c9:e9:11:ea:59:b2:ed:45:7a:bd:
                    72:30:4e:03:84:a8:14:21:d4:f4:a6:12:9d:81:f6:
                    43:5e:34:14:d2:17:4e:cc:29:e1:08:ea:58:95:dd:
                    d5:df:83:c4:e5:e8:29:f0:db:60:11:12:9b:97:4e:
                    df:15:45:68:3b:1b:35:5c:3c:a7:d3:ec:0b:e2:ed:
                    02:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A9:5E:2E:AD:E3:A7:A1:7A:AF:1E:AF:0A:A6:9C:59:AB:B2:2A:40
            X509v3 Authority Key Identifier:
                keyid:EF:94:5D:30:89:B2:60:45:15:38:74:D3:1C:F2:D9:25:89:25:8B:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/1/EF945D3089B26045153874D31CF2D92589258BB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF945D3089B26045153874D31CF2D92589258BB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/1/323830343a333839633a3a2f33322d3430203d3e20323636343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:389c::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:ca:a7:d2:3e:b2:e6:cc:4e:ae:f4:39:28:0a:62:6b:77:15:
         50:b5:9c:2a:39:40:df:91:a3:4a:f7:17:c4:14:af:08:13:78:
         30:ca:9b:07:26:a8:3a:b6:24:b6:00:ac:25:47:9a:53:2d:2a:
         98:10:38:a3:f8:52:eb:35:5f:65:ce:2c:0a:db:16:e6:fa:f4:
         db:d7:20:47:bd:7d:34:bf:a5:12:69:a2:ae:44:8e:bd:63:d6:
         90:f6:03:df:cc:d4:4a:42:cc:cd:f2:c5:31:00:b6:46:1a:7d:
         66:2d:f3:96:5e:b8:99:3f:2c:8b:09:db:cf:e1:c5:6a:8f:4c:
         24:e4:d3:79:7c:20:ef:95:7f:29:b3:56:a5:d3:c6:13:fb:6e:
         35:8a:d5:1d:ea:84:01:a5:3e:7d:48:98:f3:82:3b:66:a0:c4:
         5b:b5:30:62:95:c5:57:b3:b8:e3:fd:8c:0a:32:72:c6:22:a8:
         77:b2:55:24:1f:17:11:5a:3e:80:98:86:e6:ae:23:dc:f1:e2:
         af:df:df:61:db:9b:ad:8c:0d:9a:1b:5f:1f:e2:79:aa:92:f2:
         67:eb:96:0a:64:f9:06:14:bf:91:ce:d8:3b:6f:57:d9:80:fe:
         d8:06:3d:4a:f0:d1:81:2c:1c:76:42:dd:d6:1b:83:33:45:26:
         cf:86:81:83
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUdMRVAOdGasS9m+VBkzh5nl/VRd4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY5NDVEMzA4OUIyNjA0NTE1Mzg3NEQzMUNGMkQ5MjU4
OTI1OEJCMTAeFw0yNjAyMDUwNTI0MjBaFw0yNzAyMDQwNTI5MjBaMDMxMTAvBgNV
BAMTKEIwQTk1RTJFQURFM0E3QTE3QUFGMUVBRjBBQTY5QzU5QUJCMjJBNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/WyRj6/Xx6r3evt/vAb0A0VdP
lLLabDkfQK9I2z9bhohqwWkH8aSj7XYwEqpcxirYE31ZN/l1yvMHZA3ngoyzB/sg
nIS/JvW71ejYfnck9DE0nsx2KJmtOmdWc2bLYMd8PUOhsL/XPa4JZwdVcuYrLvpC
C/h7YHiPQOHZ+4CBtwsz9/wOssq8lBYq+TZLSRb9ILerCJP55ggT0vVytooQK4fM
YWM3oBBTNhs8avoYyKeGPJnojj/RyekR6lmy7UV6vXIwTgOEqBQh1PSmEp2B9kNe
NBTSF07MKeEI6liV3dXfg8Tl6Cnw22AREpuXTt8VRWg7GzVcPKfT7Avi7QIxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUsKleLq3jp6F6rx6vCqacWauyKkAwHwYDVR0j
BBgwFoAU75RdMImyYEUVOHTTHPLZJYkli7EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHNOeW0zQWh3REpLYWlzdHcyekIzc2hHU1dNU0E0UGZtNmo5NG9mUFU0
dEIvMS9FRjk0NUQzMDg5QjI2MDQ1MTUzODc0RDMxQ0YyRDkyNTg5MjU4QkIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGOTQ1RDMwODlCMjYwNDUx
NTM4NzREMzFDRjJEOTI1ODkyNThCQjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RzTnltM0Fod0RKS2Fpc3R3MnpCM3NoR1NXTVNBNFBmbTZqOTRvZlBVNHRCLzEv
MzIzODMwMzQzYTMzMzgzOTYzM2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNjM2
MzQzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ4nDANBgkqhkiG9w0BAQsFAAOCAQEAlMqn0j6y
5sxOrvQ5KApia3cVULWcKjlA35GjSvcXxBSvCBN4MMqbByaoOrYktgCsJUeaUy0q
mBA4o/hS6zVfZc4sCtsW5vr029cgR719NL+lEmmirkSOvWPWkPYD38zUSkLMzfLF
MQC2Rhp9Zi3zll64mT8siwnbz+HFao9MJOTTeXwg75V/KbNWpdPGE/tuNYrVHeqE
AaU+fUiY84I7ZqDEW7UwYpXFV7O44/2MCjJyxiKod7JVJB8XEVo+gJiG5q4j3PHi
r9/fYdubrYwNmhtfH+J5qpLyZ+uWCmT5BhS/kc7YO29X2YD+2AY9SvDRgSwcdkLd
1huDM0Umz4aBgw==
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:29:23 2026 by rpki-client