Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/323830343a383466343a3a2f33322d3431203d3e20323732353438.roa
File:                     323830343a383466343a3a2f33322d3431203d3e20323732353438.roa (raw, json)
Hash identifier:          +/yEWVWelkgwbT9fdhEkuI7UicylMDj4RHbcZNPYDq4=
Subject key identifier:   FC:AE:69:EE:D6:D5:C1:91:CA:52:3C:B2:D6:A8:F3:FB:53:84:06:98
Certificate issuer:       /CN=34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F
Certificate serial:       3B9A46CE7D3293A2CEB7A05BBFB5DEA201E01D78
Authority key identifier: 34:29:6A:C0:27:4C:9E:18:FF:A1:DE:6A:76:D8:E8:B8:EF:7F:D3:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/323830343a383466343a3a2f33322d3431203d3e20323732353438.roa
Signing time:             Thu 05 Feb 2026 16:47:45 +0000
ROA not before:           Thu 05 Feb 2026 16:42:45 +0000
ROA not after:            Thu 04 Feb 2027 16:47:45 +0000
asID:                     272548
IP address blocks:        2804:84f4::/32 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.crl
                          rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 10:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9a:46:ce:7d:32:93:a2:ce:b7:a0:5b:bf:b5:de:a2:01:e0:1d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F
        Validity
            Not Before: Feb  5 16:42:45 2026 GMT
            Not After : Feb  4 16:47:45 2027 GMT
        Subject: CN=FCAE69EED6D5C191CA523CB2D6A8F3FB53840698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2b:59:33:16:74:c4:88:ee:65:fd:b8:5d:c5:
                    fd:1f:51:12:f5:f3:ea:fb:ce:f0:6d:dd:df:30:24:
                    ab:30:24:01:1c:6e:2e:c4:b6:48:d9:88:aa:5f:f4:
                    68:6d:a4:c8:a1:01:ce:be:89:e1:92:43:d3:df:41:
                    65:d4:ef:5e:ff:63:84:f9:8b:3d:13:54:05:51:b4:
                    d0:e1:a7:92:98:85:e8:b9:b1:18:9d:dc:d1:eb:22:
                    5a:cb:25:97:f7:c0:34:42:5f:0b:e2:31:ce:9c:9c:
                    57:ad:8c:27:f6:c1:c4:57:be:de:6a:27:ea:72:e9:
                    3d:17:5a:ae:69:92:15:f9:fc:cb:49:73:3c:2c:6e:
                    ac:a1:03:a6:ad:dd:1f:88:26:5e:57:63:5f:4f:c9:
                    17:fe:c6:bd:b1:3a:e6:7c:de:67:5f:30:af:d7:98:
                    b1:36:69:98:07:03:0d:5a:a3:88:33:f0:47:06:48:
                    2e:40:5e:90:ad:89:a2:d3:8c:51:ab:f5:0a:9f:2c:
                    c8:4d:43:c1:c1:57:c2:c2:6c:f2:54:07:1d:db:b6:
                    33:82:50:16:bd:93:0b:72:ff:63:48:07:ab:f8:bb:
                    3d:1c:1c:53:c4:12:6b:ef:20:fa:f1:a7:55:20:ce:
                    4e:c1:00:0d:4c:18:14:0b:d6:54:60:d7:cb:63:26:
                    91:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AE:69:EE:D6:D5:C1:91:CA:52:3C:B2:D6:A8:F3:FB:53:84:06:98
            X509v3 Authority Key Identifier:
                keyid:34:29:6A:C0:27:4C:9E:18:FF:A1:DE:6A:76:D8:E8:B8:EF:7F:D3:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/323830343a383466343a3a2f33322d3431203d3e20323732353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:68:8a:f9:cb:9d:58:80:ca:b0:18:20:38:6f:65:b7:f3:ec:
         a5:0d:82:03:64:51:34:b3:b6:f5:95:6a:f3:eb:d9:34:06:e3:
         5b:bc:60:fa:78:d1:7c:9c:bb:f7:0c:c2:8f:27:8d:4d:30:19:
         a0:7b:61:7b:82:f9:9f:70:b5:55:bd:a3:4f:a5:a0:31:56:d3:
         b3:42:8b:2b:ca:2a:5f:80:9e:9c:45:5c:7e:20:c0:cf:f3:24:
         8f:1e:17:c5:32:eb:13:63:8c:d7:02:60:d4:a2:c8:a4:70:a7:
         f8:03:ef:9c:5a:8f:c4:e7:64:35:19:56:84:79:06:af:fe:5c:
         fc:2f:0a:b3:76:e0:69:13:21:1a:44:d7:8b:3a:51:a1:b3:42:
         82:d7:de:23:2b:89:72:69:85:3a:ad:d0:75:9d:f1:bb:20:9d:
         28:f8:0c:f3:4f:ac:92:5f:aa:59:48:30:1c:48:ca:cc:df:ed:
         af:8d:2c:b2:05:86:40:1b:79:51:b8:86:32:1a:26:4f:af:c4:
         a8:48:64:ee:10:a2:70:ad:a5:71:20:8e:8b:f6:c2:a9:b6:ba:
         ba:80:7f:ac:e0:67:50:38:da:a2:d1:4e:b8:ad:9b:e0:21:0f:
         be:73:e2:63:2c:16:ab:28:e6:36:3b:be:0e:b6:15:01:b7:41:
         2b:60:fe:a8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUO5pGzn0yk6LOt6Bbv7XeogHgHXgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQyOTZBQzAyNzRDOUUxOEZGQTFERTZBNzZEOEU4QjhF
RjdGRDMxRjAeFw0yNjAyMDUxNjQyNDVaFw0yNzAyMDQxNjQ3NDVaMDMxMTAvBgNV
BAMTKEZDQUU2OUVFRDZENUMxOTFDQTUyM0NCMkQ2QThGM0ZCNTM4NDA2OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYK1kzFnTEiO5l/bhdxf0fURL1
8+r7zvBt3d8wJKswJAEcbi7EtkjZiKpf9GhtpMihAc6+ieGSQ9PfQWXU717/Y4T5
iz0TVAVRtNDhp5KYhei5sRid3NHrIlrLJZf3wDRCXwviMc6cnFetjCf2wcRXvt5q
J+py6T0XWq5pkhX5/MtJczwsbqyhA6at3R+IJl5XY19PyRf+xr2xOuZ83mdfMK/X
mLE2aZgHAw1ao4gz8EcGSC5AXpCtiaLTjFGr9QqfLMhNQ8HBV8LCbPJUBx3btjOC
UBa9kwty/2NIB6v4uz0cHFPEEmvvIPrxp1Ugzk7BAA1MGBQL1lRg18tjJpElAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU/K5p7tbVwZHKUjyy1qjz+1OEBpgwHwYDVR0j
BBgwFoAUNClqwCdMnhj/od5qdtjouO9/0x8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRk5CUzVWQktkZTROOWNiSDJzenNqMWVvaHhNUHAxNm5BTUZROUE2REtS
R2svMS8zNDI5NkFDMDI3NEM5RTE4RkZBMURFNkE3NkQ4RThCOEVGN0ZEMzFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0Mjk2QUMwMjc0QzlFMThG
RkExREU2QTc2RDhFOEI4RUY3RkQzMUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZOQlM1VkJLZGU0TjljYkgyc3pzajFlb2h4TVBwMTZuQU1GUTlBNkRLUkdrLzEv
MzIzODMwMzQzYTM4MzQ2NjM0M2EzYTJmMzMzMjJkMzQzMTIwM2QzZTIwMzIzNzMy
MzUzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASE9DANBgkqhkiG9w0BAQsFAAOCAQEAl2iK+cud
WIDKsBggOG9lt/PspQ2CA2RRNLO29ZVq8+vZNAbjW7xg+njRfJy79wzCjyeNTTAZ
oHthe4L5n3C1Vb2jT6WgMVbTs0KLK8oqX4CenEVcfiDAz/Mkjx4XxTLrE2OM1wJg
1KLIpHCn+APvnFqPxOdkNRlWhHkGr/5c/C8Ks3bgaRMhGkTXizpRobNCgtfeIyuJ
cmmFOq3QdZ3xuyCdKPgM80+skl+qWUgwHEjKzN/tr40ssgWGQBt5UbiGMhomT6/E
qEhk7hCicK2lcSCOi/bCqba6uoB/rOBnUDjaotFOuK2b4CEPvnPiYywWqyjmNju+
DrYVAbdBK2D+qA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 11:37:21 2026 by rpki-client