Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/323830343a313263303a3a2f33322d3438203d3e20323633343936.roa
File:                     323830343a313263303a3a2f33322d3438203d3e20323633343936.roa (raw, json)
Hash identifier:          lQMvzGKTexKr11ZtKxbyzWnk1sR3ocinG38SpRXYKuU=
Subject key identifier:   2E:FB:9C:E3:C9:B3:D7:EE:11:42:F6:17:94:8C:C7:9E:0A:B8:72:E0
Certificate issuer:       /CN=89F33609E2B118C8ED9A105548D2D01FD6E38729
Certificate serial:       4D13D3E792FB64EB0F1AB022F80E78D27E13DA7B
Authority key identifier: 89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/323830343a313263303a3a2f33322d3438203d3e20323633343936.roa
Signing time:             Thu 05 Feb 2026 13:46:20 +0000
ROA not before:           Thu 05 Feb 2026 13:41:20 +0000
ROA not after:            Thu 04 Feb 2027 13:46:20 +0000
asID:                     263496
IP address blocks:        2804:12c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl
                          rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:13:d3:e7:92:fb:64:eb:0f:1a:b0:22:f8:0e:78:d2:7e:13:da:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89F33609E2B118C8ED9A105548D2D01FD6E38729
        Validity
            Not Before: Feb  5 13:41:20 2026 GMT
            Not After : Feb  4 13:46:20 2027 GMT
        Subject: CN=2EFB9CE3C9B3D7EE1142F617948CC79E0AB872E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:57:4b:59:6d:d6:dc:0f:18:9a:97:26:b9:
                    ce:78:d2:a9:6c:4b:a3:72:02:9e:99:81:56:1e:82:
                    58:b3:d6:cc:41:e2:05:a9:fe:c7:c6:00:2a:fe:19:
                    f7:2d:39:32:ac:5d:87:1d:22:d1:2e:e1:2f:42:52:
                    2c:ac:2b:de:57:46:25:f0:3d:71:48:45:b9:73:f0:
                    49:40:d7:5c:1e:cb:76:3f:c4:ad:10:04:b4:af:5c:
                    d0:60:bc:e5:13:20:a1:39:8f:5f:28:49:d2:8e:e6:
                    50:54:84:58:f5:d8:f0:33:d4:76:ea:72:e3:99:cc:
                    c8:ee:43:bf:3c:20:66:0c:bf:7f:ae:87:fa:77:f9:
                    ee:2f:23:97:c9:ad:26:4a:b1:d2:1e:2f:01:c5:3d:
                    0f:28:d4:7e:c6:bf:50:eb:fc:86:65:26:2c:ec:74:
                    5c:25:98:e8:d3:f7:40:89:08:00:9a:c0:82:5f:54:
                    59:84:ee:16:ee:53:5e:7e:8f:fa:d6:2c:b3:c2:b5:
                    d9:cf:e7:08:4f:67:c9:22:d1:18:20:5b:83:49:1e:
                    f0:a7:50:16:45:9f:2c:60:81:57:77:55:e1:9f:d0:
                    e6:8b:c8:cd:36:2c:46:cf:67:ba:83:6f:97:07:c2:
                    e6:3e:2f:49:ab:1d:f5:c6:a4:e9:52:a4:57:29:01:
                    8b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FB:9C:E3:C9:B3:D7:EE:11:42:F6:17:94:8C:C7:9E:0A:B8:72:E0
            X509v3 Authority Key Identifier:
                keyid:89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/323830343a313263303a3a2f33322d3438203d3e20323633343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:5c:4f:62:56:53:0e:e8:d3:6f:95:f6:3e:03:95:63:82:5a:
         27:a5:3e:51:bf:92:4f:68:c5:3f:09:52:1b:5e:90:b4:f3:53:
         01:f9:17:a0:7e:80:78:ef:c4:23:52:40:09:b4:20:84:01:dc:
         81:9f:26:bd:1e:e8:c1:f6:37:4c:77:27:b3:b5:9c:f0:93:b0:
         99:aa:ac:9e:23:5a:d4:65:37:6a:76:18:be:c4:28:69:3b:86:
         b1:6c:0e:6f:b4:8c:a4:9c:51:67:20:3b:f4:f5:b3:e1:ee:c9:
         42:a6:4d:75:d8:38:a6:cc:c1:1b:81:e2:b9:db:2f:25:e4:e9:
         32:96:ff:97:29:cc:7a:99:b4:10:d5:20:93:a5:8c:63:0d:3f:
         c8:09:da:86:a6:f0:68:ce:87:a5:bd:10:e5:42:68:dc:81:cb:
         9f:4e:ea:5c:ca:b3:70:1d:46:a0:6a:fc:f8:95:0f:3e:da:c4:
         c4:6c:3c:28:83:d2:f9:08:44:f9:f7:07:9d:c6:0d:1c:8a:6e:
         19:14:6f:46:4d:c2:91:68:18:f8:f8:69:b2:d2:10:13:c1:92:
         f8:0a:9c:98:76:82:2b:f9:65:4e:e8:69:70:24:1b:00:f2:cf:
         47:e6:89:e4:bd:81:21:e7:20:00:4c:9b:5c:67:39:65:10:32:
         61:9c:2e:20
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUTRPT55L7ZOsPGrAi+A540n4T2nswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlGMzM2MDlFMkIxMThDOEVEOUExMDU1NDhEMkQwMUZE
NkUzODcyOTAeFw0yNjAyMDUxMzQxMjBaFw0yNzAyMDQxMzQ2MjBaMDMxMTAvBgNV
BAMTKDJFRkI5Q0UzQzlCM0Q3RUUxMTQyRjYxNzk0OENDNzlFMEFCODcyRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyFldLWW3W3A8Ympcmuc540qls
S6NyAp6ZgVYegliz1sxB4gWp/sfGACr+GfctOTKsXYcdItEu4S9CUiysK95XRiXw
PXFIRblz8ElA11wey3Y/xK0QBLSvXNBgvOUTIKE5j18oSdKO5lBUhFj12PAz1Hbq
cuOZzMjuQ788IGYMv3+uh/p3+e4vI5fJrSZKsdIeLwHFPQ8o1H7Gv1Dr/IZlJizs
dFwlmOjT90CJCACawIJfVFmE7hbuU15+j/rWLLPCtdnP5whPZ8ki0RggW4NJHvCn
UBZFnyxggVd3VeGf0OaLyM02LEbPZ7qDb5cHwuY+L0mrHfXGpOlSpFcpAYuvAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQULvuc48mz1+4RQvYXlIzHngq4cuAwHwYDVR0j
BBgwFoAUifM2CeKxGMjtmhBVSNLQH9bjhykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4
ekUvMS84OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RjMzNjA5RTJCMTE4QzhF
RDlBMTA1NTQ4RDJEMDFGRDZFMzg3MjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VwZWNiZXFDSlA1UlFhaGhaa3o2TVlGaGs1UUJDSEFMV0pDS0xMOTdWOHpFLzEv
MzIzODMwMzQzYTMxMzI2MzMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz
MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQSwDANBgkqhkiG9w0BAQsFAAOCAQEAPVxPYlZT
DujTb5X2PgOVY4JaJ6U+Ub+ST2jFPwlSG16QtPNTAfkXoH6AeO/EI1JACbQghAHc
gZ8mvR7owfY3THcns7Wc8JOwmaqsniNa1GU3anYYvsQoaTuGsWwOb7SMpJxRZyA7
9PWz4e7JQqZNddg4pszBG4HiudsvJeTpMpb/lynMepm0ENUgk6WMYw0/yAnahqbw
aM6Hpb0Q5UJo3IHLn07qXMqzcB1GoGr8+JUPPtrExGw8KIPS+QhE+fcHncYNHIpu
GRRvRk3CkWgY+PhpstIQE8GS+AqcmHaCK/llTuhpcCQbAPLPR+aJ5L2BIecgAEyb
XGc5ZRAyYZwuIA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 14:23:04 2026 by rpki-client