Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/323830343a6138633a3a2f33322d3438203d3e20323632323939.roa
File:                     323830343a6138633a3a2f33322d3438203d3e20323632323939.roa (raw, json)
Hash identifier:          Jh7lgKB/S4sNuKKNjXErREjCWds0jaCiCdxM7v7Rvig=
Subject key identifier:   6F:90:C6:19:0A:1F:FC:EB:A3:A9:CD:D4:77:32:FD:6C:CB:AE:49:5B
Certificate issuer:       /CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7
Certificate serial:       54869AC902C06953FC0C6068668DBBAAFE37EE46
Authority key identifier: 20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/323830343a6138633a3a2f33322d3438203d3e20323632323939.roa
Signing time:             Thu 05 Feb 2026 21:08:43 +0000
ROA not before:           Thu 05 Feb 2026 21:03:43 +0000
ROA not after:            Thu 04 Feb 2027 21:08:43 +0000
asID:                     262299
IP address blocks:        2804:a8c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl
                          rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:56:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:86:9a:c9:02:c0:69:53:fc:0c:60:68:66:8d:bb:aa:fe:37:ee:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7
        Validity
            Not Before: Feb  5 21:03:43 2026 GMT
            Not After : Feb  4 21:08:43 2027 GMT
        Subject: CN=6F90C6190A1FFCEBA3A9CDD47732FD6CCBAE495B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:83:9a:0c:68:7e:1c:3d:dd:c6:c1:dd:18:db:
                    b7:4c:f1:f5:a2:4a:19:b8:ab:32:4d:71:97:45:3f:
                    27:91:21:e2:d5:65:0e:81:c0:94:45:61:5f:1a:98:
                    8e:56:47:fb:42:81:9e:da:80:a4:92:1d:23:91:e5:
                    a3:88:c9:10:ed:2b:8c:5f:b3:12:4c:27:0c:6c:11:
                    eb:a9:f2:da:12:a8:c4:96:14:b4:be:56:2e:d1:5a:
                    96:b9:54:09:53:00:b3:62:59:85:c8:b2:24:1b:ec:
                    7c:35:bc:d5:6c:ef:d6:3a:41:d1:07:ca:55:56:17:
                    ee:98:b1:e3:74:3b:79:cd:b7:95:87:63:e6:d5:4d:
                    cb:f7:db:77:40:25:00:21:4f:73:3d:af:30:2e:6d:
                    9f:c6:f9:60:2c:75:f0:b0:0a:52:4c:5b:52:2a:d9:
                    cc:52:51:4c:8d:2a:b2:e9:d0:3d:83:91:d4:96:d9:
                    f7:8c:a3:72:a4:0c:bf:01:7c:5d:60:e6:cb:b4:d0:
                    c8:5a:fe:7d:55:9b:50:d8:86:8a:85:1b:1d:64:a7:
                    e2:6b:94:82:4b:92:ed:8b:ec:c3:24:34:8b:bb:19:
                    49:92:eb:b1:be:60:a5:26:36:31:e2:1a:23:d3:24:
                    bd:7d:a1:7f:25:ad:dc:a9:17:88:20:a5:9d:9c:26:
                    cb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:90:C6:19:0A:1F:FC:EB:A3:A9:CD:D4:77:32:FD:6C:CB:AE:49:5B
            X509v3 Authority Key Identifier:
                keyid:20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/323830343a6138633a3a2f33322d3438203d3e20323632323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:12:08:73:b3:e1:e5:22:ac:b4:2b:7d:ef:20:48:cf:5c:4f:
         0f:31:45:51:5c:89:ac:ba:43:0c:e6:01:65:e2:35:f3:6f:b3:
         08:ec:0c:9d:fa:61:36:af:e6:84:1d:01:22:ae:2e:f9:cd:e7:
         86:f6:b7:47:66:bc:a0:78:f5:2b:0b:39:bc:4e:16:bc:40:10:
         0a:3d:77:68:9b:df:a0:9f:2c:6b:ef:da:39:e6:a2:f7:66:26:
         73:33:87:62:80:dd:a6:b3:0f:f8:c3:60:22:41:aa:e9:cf:e3:
         56:f5:7d:7c:df:b3:f7:60:1a:c4:3c:17:d0:8a:60:78:01:bc:
         e7:63:e8:be:92:7a:57:3c:31:ee:45:e9:54:aa:3a:aa:10:e5:
         00:38:0d:e3:e3:72:79:eb:9a:ea:f4:2f:c5:e2:7e:47:b6:3d:
         1b:6a:09:fa:62:03:2b:93:4f:b8:80:7f:68:a1:e3:00:eb:96:
         83:d7:fe:e2:f9:e5:25:52:bb:48:d0:cc:25:57:cd:59:88:ef:
         b9:d4:09:1f:3e:f0:07:bb:f6:9f:35:6d:d7:df:29:61:80:2e:
         7e:83:d6:c1:d3:bc:8d:74:1e:0a:8b:b2:ac:b5:97:f1:a3:da:
         6c:45:78:84:a4:db:68:22:57:7b:68:1b:e7:9b:35:a1:4d:0a:
         4b:39:b5:0e
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUVIaayQLAaVP8DGBoZo27qv437kYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjAzRENDQTdERTc5QzhDNERBQkFBMTBBNkNBOUU5M0VB
N0QzOURGNzAeFw0yNjAyMDUyMTAzNDNaFw0yNzAyMDQyMTA4NDNaMDMxMTAvBgNV
BAMTKDZGOTBDNjE5MEExRkZDRUJBM0E5Q0RENDc3MzJGRDZDQ0JBRTQ5NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQg5oMaH4cPd3Gwd0Y27dM8fWi
Shm4qzJNcZdFPyeRIeLVZQ6BwJRFYV8amI5WR/tCgZ7agKSSHSOR5aOIyRDtK4xf
sxJMJwxsEeup8toSqMSWFLS+Vi7RWpa5VAlTALNiWYXIsiQb7Hw1vNVs79Y6QdEH
ylVWF+6YseN0O3nNt5WHY+bVTcv323dAJQAhT3M9rzAubZ/G+WAsdfCwClJMW1Iq
2cxSUUyNKrLp0D2DkdSW2feMo3KkDL8BfF1g5su00Mha/n1Vm1DYhoqFGx1kp+Jr
lIJLku2L7MMkNIu7GUmS67G+YKUmNjHiGiPTJL19oX8lrdypF4ggpZ2cJssZAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUb5DGGQof/Oujqc3UdzL9bMuuSVswHwYDVR0j
BBgwFoAUID3Mp955yMTauqEKbKnpPqfTnfcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkJ4dUxwQ2YzeWFlOU1HZUIyYzZUQzlheEJaR1pEVjV3Y1E1dmZGb3BH
U0UvMS8yMDNEQ0NBN0RFNzlDOEM0REFCQUExMEE2Q0E5RTkzRUE3RDM5REY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwM0RDQ0E3REU3OUM4QzRE
QUJBQTEwQTZDQTlFOTNFQTdEMzlERjcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZCeHVMcENmM3lhZTlNR2VCMmM2VEM5YXhCWkdaRFY1d2NRNXZmRm9wR1NFLzEv
MzIzODMwMzQzYTYxMzg2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMjMy
MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgECowwDQYJKoZIhvcNAQELBQADggEBAGwSCHOz4eUi
rLQrfe8gSM9cTw8xRVFciay6QwzmAWXiNfNvswjsDJ36YTav5oQdASKuLvnN54b2
t0dmvKB49SsLObxOFrxAEAo9d2ib36CfLGvv2jnmovdmJnMzh2KA3aazD/jDYCJB
qunP41b1fXzfs/dgGsQ8F9CKYHgBvOdj6L6Selc8Me5F6VSqOqoQ5QA4DePjcnnr
mur0L8Xifke2PRtqCfpiAyuTT7iAf2ih4wDrloPX/uL55SVSu0jQzCVXzVmI77nU
CR8+8Ae79p81bdffKWGALn6D1sHTvI10HgqLsqy1l/Gj2mxFeISk22giV3toG+eb
NaFNCks5tQ4=
-----END CERTIFICATE-----
Generated at Thu Feb 19 14:23:34 2026 by rpki-client