Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/1/323830343a333230633a3a2f33322d3438203d3e20323635303533.roa
File:                     323830343a333230633a3a2f33322d3438203d3e20323635303533.roa (raw, json)
Hash identifier:          TR55Q+1s4tbghafrmCmdmuhVvUCGGdIz3X4fPNaciYM=
Subject key identifier:   87:61:19:4D:0C:BD:19:01:C0:0D:D6:F2:40:24:E6:F8:EB:65:42:3C
Certificate issuer:       /CN=EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF
Certificate serial:       3E3C67982606AE83EF9339EE9D68BDCE7DAC3A1D
Authority key identifier: EB:B9:51:B5:7F:CD:B4:FC:B1:62:FE:5C:BA:65:54:D2:2C:AD:4B:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/1/323830343a333230633a3a2f33322d3438203d3e20323635303533.roa
Signing time:             Thu 05 Feb 2026 11:08:29 +0000
ROA not before:           Thu 05 Feb 2026 11:03:29 +0000
ROA not after:            Thu 04 Feb 2027 11:08:29 +0000
asID:                     265053
IP address blocks:        2804:320c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/1/EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF.crl
                          rsync://rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/1/EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:3c:67:98:26:06:ae:83:ef:93:39:ee:9d:68:bd:ce:7d:ac:3a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF
        Validity
            Not Before: Feb  5 11:03:29 2026 GMT
            Not After : Feb  4 11:08:29 2027 GMT
        Subject: CN=8761194D0CBD1901C00DD6F24024E6F8EB65423C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c0:a7:d9:b8:09:d6:be:45:a6:48:17:b5:93:
                    d5:d7:2b:a9:25:70:bc:15:d7:05:a3:c7:f0:20:38:
                    88:e9:8d:81:6c:b0:f2:f9:84:cf:d0:62:82:5e:61:
                    1d:d5:a3:5a:9a:fc:7e:96:4a:7c:13:9f:4f:e7:d2:
                    f9:2d:f7:f9:fe:5c:35:be:59:46:fe:61:d4:8a:fd:
                    fd:ef:ea:3d:fa:90:fa:17:6f:27:18:7a:e0:26:80:
                    be:1d:09:aa:22:36:c7:eb:96:66:7b:c9:37:70:da:
                    62:29:22:0b:a6:c8:a5:d8:df:a3:24:01:bf:8c:7b:
                    e0:28:1b:61:3d:ed:73:42:e2:53:dd:82:2f:b8:7b:
                    41:c2:db:f4:06:84:11:09:53:fd:94:e5:29:8f:cb:
                    39:1b:91:b3:7b:51:10:c8:69:51:ee:7b:4a:0b:af:
                    f6:d9:b0:65:0e:f0:be:87:37:c4:08:fc:be:32:2d:
                    06:e9:a9:cc:e8:f6:de:9d:cb:ac:08:d3:cf:45:94:
                    8e:77:de:19:eb:a2:da:30:54:c7:ef:04:64:e9:0d:
                    a2:b4:49:48:05:70:3e:8b:86:0e:52:76:7e:d2:f8:
                    80:0c:27:fb:72:ed:41:10:6d:e3:cb:e9:0a:69:77:
                    00:af:b9:41:f1:f6:09:cd:3b:05:0c:3b:d8:1b:32:
                    6d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:61:19:4D:0C:BD:19:01:C0:0D:D6:F2:40:24:E6:F8:EB:65:42:3C
            X509v3 Authority Key Identifier:
                keyid:EB:B9:51:B5:7F:CD:B4:FC:B1:62:FE:5C:BA:65:54:D2:2C:AD:4B:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/1/EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/1/323830343a333230633a3a2f33322d3438203d3e20323635303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:320c::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:a0:14:a2:92:88:75:b0:af:0a:2f:40:51:5a:e7:7b:02:1d:
         8a:51:3c:a5:1b:e6:7d:b4:45:67:2b:e7:48:ca:79:6f:c7:f9:
         93:6e:96:fb:9b:8a:4c:56:eb:76:9d:7b:27:87:60:db:d9:2e:
         42:be:4c:42:2d:39:3a:80:24:37:91:ed:aa:ce:85:8c:1c:8e:
         1f:d2:ac:d0:b3:b5:78:72:4f:06:21:5d:a4:b9:66:b8:3d:26:
         b7:cd:39:58:ce:49:0f:f2:31:6a:b2:41:75:cb:8e:6b:19:8f:
         1a:87:e4:9b:31:da:be:3c:4a:e0:ad:58:84:4c:91:a2:42:40:
         3d:6d:2d:59:23:ac:98:b7:9e:72:1e:0a:b5:5d:b7:7e:33:d5:
         52:32:23:a1:6a:ef:74:18:ac:2f:f0:80:ad:80:cc:23:16:ed:
         a1:36:f8:8b:fe:64:53:1e:ca:7a:a0:2d:3f:e9:44:dc:a2:58:
         bb:29:0f:ae:78:94:fb:da:59:18:80:e2:c7:9b:0b:7e:3a:1d:
         93:90:d9:3f:30:fb:1b:64:bc:05:b6:e8:dd:b3:ad:6a:34:a2:
         ac:4f:6f:47:f2:81:45:76:af:00:ed:43:44:98:82:06:ea:b4:
         c8:02:c8:fc:11:2d:c7:d4:8d:01:aa:ee:38:ec:86:c2:d8:db:
         2c:16:a0:a8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPjxnmCYGroPvkznunWi9zn2sOh0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJCOTUxQjU3RkNEQjRGQ0IxNjJGRTVDQkE2NTU0RDIy
Q0FENEJCRjAeFw0yNjAyMDUxMTAzMjlaFw0yNzAyMDQxMTA4MjlaMDMxMTAvBgNV
BAMTKDg3NjExOTREMENCRDE5MDFDMDBERDZGMjQwMjRFNkY4RUI2NTQyM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3wKfZuAnWvkWmSBe1k9XXK6kl
cLwV1wWjx/AgOIjpjYFssPL5hM/QYoJeYR3Vo1qa/H6WSnwTn0/n0vkt9/n+XDW+
WUb+YdSK/f3v6j36kPoXbycYeuAmgL4dCaoiNsfrlmZ7yTdw2mIpIgumyKXY36Mk
Ab+Me+AoG2E97XNC4lPdgi+4e0HC2/QGhBEJU/2U5SmPyzkbkbN7URDIaVHue0oL
r/bZsGUO8L6HN8QI/L4yLQbpqczo9t6dy6wI089FlI533hnrotowVMfvBGTpDaK0
SUgFcD6Lhg5Sdn7S+IAMJ/ty7UEQbePL6QppdwCvuUHx9gnNOwUMO9gbMm1DAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUh2EZTQy9GQHADdbyQCTm+OtlQjwwHwYDVR0j
BBgwFoAU67lRtX/NtPyxYv5cumVU0iytS78wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkhOc0dZaEVGMXVuUDhFNE5nb2hQRWNmbXdjdUNrTThiSkJWNnNmYzRS
bnQvMS9FQkI5NTFCNTdGQ0RCNEZDQjE2MkZFNUNCQTY1NTREMjJDQUQ0QkJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VCQjk1MUI1N0ZDREI0RkNC
MTYyRkU1Q0JBNjU1NEQyMkNBRDRCQkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZITnNHWWhFRjF1blA4RTROZ29oUEVjZm13Y3VDa004YkpCVjZzZmM0Um50LzEv
MzIzODMwMzQzYTMzMzIzMDYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzAzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQyDDANBgkqhkiG9w0BAQsFAAOCAQEAX6AUopKI
dbCvCi9AUVrnewIdilE8pRvmfbRFZyvnSMp5b8f5k26W+5uKTFbrdp17J4dg29ku
Qr5MQi05OoAkN5Htqs6FjByOH9Ks0LO1eHJPBiFdpLlmuD0mt805WM5JD/IxarJB
dcuOaxmPGofkmzHavjxK4K1YhEyRokJAPW0tWSOsmLeech4KtV23fjPVUjIjoWrv
dBisL/CArYDMIxbtoTb4i/5kUx7KeqAtP+lE3KJYuykPrniU+9pZGIDix5sLfjod
k5DZPzD7G2S8Bbbo3bOtajSirE9vR/KBRXavAO1DRJiCBuq0yALI/BEtx9SNAaru
OOyGwtjbLBagqA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 10:14:11 2026 by rpki-client