Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/323830343a316338343a3a2f33322d3438203d3e203631363539.roa
File:                     323830343a316338343a3a2f33322d3438203d3e203631363539.roa (raw, json)
Hash identifier:          nLLmZ8EQUhz7OXKMVJeC2fRgvtjpcy8YTaA23mxddjY=
Subject key identifier:   7E:8A:4E:08:F4:0B:B3:52:2A:FB:E9:39:73:40:A7:84:68:6B:2D:5A
Certificate issuer:       /CN=D9C94E0B7C905030F4DB01C33BF8C1682B2E042F
Certificate serial:       5F28A5403A6A1FEEC1629E85502EC00CB9C645BC
Authority key identifier: D9:C9:4E:0B:7C:90:50:30:F4:DB:01:C3:3B:F8:C1:68:2B:2E:04:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/323830343a316338343a3a2f33322d3438203d3e203631363539.roa
Signing time:             Thu 05 Feb 2026 04:01:06 +0000
ROA not before:           Thu 05 Feb 2026 03:56:06 +0000
ROA not after:            Thu 04 Feb 2027 04:01:06 +0000
asID:                     61659
IP address blocks:        2804:1c84::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.crl
                          rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:28:a5:40:3a:6a:1f:ee:c1:62:9e:85:50:2e:c0:0c:b9:c6:45:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9C94E0B7C905030F4DB01C33BF8C1682B2E042F
        Validity
            Not Before: Feb  5 03:56:06 2026 GMT
            Not After : Feb  4 04:01:06 2027 GMT
        Subject: CN=7E8A4E08F40BB3522AFBE9397340A784686B2D5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:18:a7:ff:4e:83:b4:6c:4c:2b:c5:87:4e:6e:
                    7b:35:42:05:21:f5:3a:30:b3:25:08:26:a4:55:ff:
                    8c:ca:1c:e3:13:b2:06:4b:c1:b6:ab:c6:48:26:72:
                    37:3b:9d:33:fb:cc:58:7c:1c:10:85:98:4b:28:5c:
                    00:52:44:d2:d1:1a:88:7f:13:e5:23:77:e2:0a:28:
                    88:7e:6e:c3:f1:4b:9a:44:71:3f:89:50:6a:42:14:
                    5d:d6:cb:d1:94:8b:68:50:67:06:ad:ff:7e:4c:b0:
                    e5:8f:8c:c6:18:76:a9:b1:b3:7d:be:6c:70:5f:6f:
                    e7:69:4b:5f:cb:b0:2d:03:bb:a7:27:e5:3b:01:04:
                    6f:35:5c:fa:c7:b4:c9:47:f7:a1:88:26:f0:f7:2c:
                    52:aa:0a:03:55:f9:26:85:1a:03:21:8d:b9:9c:1f:
                    df:08:f6:66:a1:53:bd:51:0d:22:96:4e:a9:b4:08:
                    50:e1:11:ae:06:b8:1a:6a:80:da:9a:44:5e:5e:70:
                    7c:ca:7a:c5:b4:be:84:03:66:7c:aa:5f:54:00:4b:
                    39:cb:84:2f:b2:e0:32:ac:2a:7e:da:13:66:d5:ab:
                    e8:8f:9e:2f:33:07:04:ad:8a:60:dc:1a:09:31:de:
                    e3:f0:cf:54:50:da:1c:03:4e:1d:a3:96:36:4e:97:
                    93:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8A:4E:08:F4:0B:B3:52:2A:FB:E9:39:73:40:A7:84:68:6B:2D:5A
            X509v3 Authority Key Identifier:
                keyid:D9:C9:4E:0B:7C:90:50:30:F4:DB:01:C3:3B:F8:C1:68:2B:2E:04:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/323830343a316338343a3a2f33322d3438203d3e203631363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c84::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:64:f4:fa:f2:98:59:aa:f8:67:72:07:b9:6c:31:10:6d:ab:
         02:ca:6e:ad:a5:ea:93:3d:20:ab:91:fd:04:a4:d1:e1:3e:64:
         f6:67:4e:e5:4b:7e:66:ca:23:73:7b:5e:b1:23:7d:e9:aa:e9:
         01:9e:75:c3:e6:6b:48:0c:9c:b5:45:c6:98:4d:c5:4a:bf:51:
         ad:b6:1d:fb:89:23:20:ba:7e:ba:b9:b7:2a:00:81:af:2b:16:
         80:7e:3f:be:3a:aa:e7:f6:d2:ac:55:3e:4a:af:51:1e:56:98:
         6c:e2:8b:ed:cd:6a:00:24:56:ef:4b:a4:cd:06:f2:31:f0:2c:
         df:be:22:27:dc:65:76:70:8e:22:53:98:19:81:a6:14:44:5a:
         3e:33:41:9a:f9:06:0c:68:f3:2b:fa:8f:f6:16:90:35:0e:c5:
         d0:51:c2:8f:9b:36:5c:43:fb:4c:f2:94:6f:2c:aa:0e:1a:ca:
         5c:d7:85:c3:da:dc:21:d0:d8:15:51:71:cb:32:4c:31:4b:17:
         d6:f5:78:fc:84:4b:55:65:ce:bd:7d:2c:f1:7a:e3:c9:de:1e:
         d0:31:e9:19:7e:db:a2:82:6c:8f:59:a9:f2:d8:dc:ae:4d:dc:
         96:f0:8b:50:63:13:60:9d:ef:39:1c:3f:1c:ca:66:e0:1a:bb:
         24:76:c7:80
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUXyilQDpqH+7BYp6FUC7ADLnGRbwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDlDOTRFMEI3QzkwNTAzMEY0REIwMUMzM0JGOEMxNjgy
QjJFMDQyRjAeFw0yNjAyMDUwMzU2MDZaFw0yNzAyMDQwNDAxMDZaMDMxMTAvBgNV
BAMTKDdFOEE0RTA4RjQwQkIzNTIyQUZCRTkzOTczNDBBNzg0Njg2QjJENUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7GKf/ToO0bEwrxYdObns1QgUh
9TowsyUIJqRV/4zKHOMTsgZLwbarxkgmcjc7nTP7zFh8HBCFmEsoXABSRNLRGoh/
E+Ujd+IKKIh+bsPxS5pEcT+JUGpCFF3Wy9GUi2hQZwat/35MsOWPjMYYdqmxs32+
bHBfb+dpS1/LsC0Du6cn5TsBBG81XPrHtMlH96GIJvD3LFKqCgNV+SaFGgMhjbmc
H98I9mahU71RDSKWTqm0CFDhEa4GuBpqgNqaRF5ecHzKesW0voQDZnyqX1QASznL
hC+y4DKsKn7aE2bVq+iPni8zBwStimDcGgkx3uPwz1RQ2hwDTh2jljZOl5PDAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUfopOCPQLs1Iq++k5c0CnhGhrLVowHwYDVR0j
BBgwFoAU2clOC3yQUDD02wHDO/jBaCsuBC8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVA4WW52WWVyOGlrNk0zUExodDNxWFdjdVloUTViWllnVzVhTHN3UVhk
ZVkvMS9EOUM5NEUwQjdDOTA1MDMwRjREQjAxQzMzQkY4QzE2ODJCMkUwNDJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5Qzk0RTBCN0M5MDUwMzBG
NERCMDFDMzNCRjhDMTY4MkIyRTA0MkYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VQOFludlllcjhpazZNM1BMaHQzcVhXY3VZaFE1YlpZZ1c1YUxzd1FYZGVZLzEv
MzIzODMwMzQzYTMxNjMzODM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM2
MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEHIQwDQYJKoZIhvcNAQELBQADggEBABpk9PrymFmq
+GdyB7lsMRBtqwLKbq2l6pM9IKuR/QSk0eE+ZPZnTuVLfmbKI3N7XrEjfemq6QGe
dcPma0gMnLVFxphNxUq/Ua22HfuJIyC6frq5tyoAga8rFoB+P746quf20qxVPkqv
UR5WmGzii+3NagAkVu9LpM0G8jHwLN++IifcZXZwjiJTmBmBphREWj4zQZr5Bgxo
8yv6j/YWkDUOxdBRwo+bNlxD+0zylG8sqg4aylzXhcPa3CHQ2BVRccsyTDFLF9b1
ePyES1Vlzr19LPF648neHtAx6Rl+26KCbI9ZqfLY3K5N3Jbwi1BjE2Cd7zkcPxzK
ZuAauyR2x4A=
-----END CERTIFICATE-----
Generated at Thu Feb 19 14:24:26 2026 by rpki-client