Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a3a2f33322d313238203d3e20323633303533.roa
File:                     323830343a3932303a3a2f33322d313238203d3e20323633303533.roa (raw, json)
Hash identifier:          IrhzTFNdhvVANjsbl/xNpnPMoe797p+pRTw7pFmsJNU=
Subject key identifier:   FA:74:D2:E5:10:32:C4:AD:64:F7:10:95:D3:B6:7D:57:41:DF:60:CF
Certificate issuer:       /CN=7712A7E13E9B64DD9CFFF2779A9ABCE998490DE6
Certificate serial:       0C40EF0BB38C0AA207B711A3E3CEA7C1BADD73A2
Authority key identifier: 77:12:A7:E1:3E:9B:64:DD:9C:FF:F2:77:9A:9A:BC:E9:98:49:0D:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7712A7E13E9B64DD9CFFF2779A9ABCE998490DE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a3a2f33322d313238203d3e20323633303533.roa
Signing time:             Wed 18 Feb 2026 21:50:04 +0000
ROA not before:           Wed 18 Feb 2026 21:45:04 +0000
ROA not after:            Wed 17 Feb 2027 21:50:04 +0000
asID:                     263053
IP address blocks:        2804:920::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/7712A7E13E9B64DD9CFFF2779A9ABCE998490DE6.crl
                          rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/7712A7E13E9B64DD9CFFF2779A9ABCE998490DE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7712A7E13E9B64DD9CFFF2779A9ABCE998490DE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:18:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:40:ef:0b:b3:8c:0a:a2:07:b7:11:a3:e3:ce:a7:c1:ba:dd:73:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7712A7E13E9B64DD9CFFF2779A9ABCE998490DE6
        Validity
            Not Before: Feb 18 21:45:04 2026 GMT
            Not After : Feb 17 21:50:04 2027 GMT
        Subject: CN=FA74D2E51032C4AD64F71095D3B67D5741DF60CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:28:40:fc:c2:8f:ae:fb:2a:c8:bd:e1:c5:2a:
                    ef:ea:bf:04:03:c9:2f:96:3c:1e:4c:2d:78:13:1b:
                    d8:00:1f:ce:91:3a:20:ee:f7:a5:85:79:33:92:e6:
                    82:9e:46:d1:29:01:e3:96:fc:96:50:54:3f:68:14:
                    43:70:f7:15:d0:2d:fd:87:8a:9c:b0:c9:f3:c0:73:
                    0d:67:f7:70:5b:bd:4a:46:41:27:6e:97:c3:91:35:
                    1e:87:f2:aa:94:3f:1d:de:d7:07:c1:f2:b4:ec:32:
                    3e:40:1e:28:33:3b:64:2b:c4:8c:6a:a0:87:59:c5:
                    db:9f:9e:9d:a0:9a:7b:bc:64:d0:49:2c:cf:d7:f3:
                    a6:4a:b1:d9:fc:41:58:ee:17:0c:a8:1c:16:a2:7f:
                    95:9a:d7:c8:33:39:40:e0:3d:73:bc:71:19:2a:15:
                    a5:19:90:9e:a7:0c:f2:64:52:bd:98:a5:42:f4:28:
                    03:6e:ec:62:a8:05:c1:59:04:e2:0f:16:ce:38:08:
                    6c:27:ac:f7:62:a8:21:29:50:6a:4a:57:20:09:2f:
                    cf:d5:59:7e:bf:c3:fe:65:fd:be:29:83:1a:8a:0c:
                    b8:47:28:19:d8:23:ce:2e:5b:c1:ab:e9:e3:bd:14:
                    d2:ea:d8:ab:1c:7c:62:96:28:b8:28:0d:41:db:eb:
                    63:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:74:D2:E5:10:32:C4:AD:64:F7:10:95:D3:B6:7D:57:41:DF:60:CF
            X509v3 Authority Key Identifier:
                keyid:77:12:A7:E1:3E:9B:64:DD:9C:FF:F2:77:9A:9A:BC:E9:98:49:0D:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/7712A7E13E9B64DD9CFFF2779A9ABCE998490DE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7712A7E13E9B64DD9CFFF2779A9ABCE998490DE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a3a2f33322d313238203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:920::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:4b:76:9c:fe:10:fb:b3:f9:25:53:19:43:34:85:97:56:2b:
         22:c4:3d:5f:11:55:1c:ef:f4:47:14:e1:e4:f5:39:3c:17:0c:
         85:db:bd:a8:fd:11:cd:57:00:c2:65:a4:ff:ec:87:3c:55:63:
         6c:6a:85:4b:22:43:e7:98:fd:a2:dc:8a:22:57:66:8b:99:26:
         56:f1:2f:9a:d9:61:db:d9:26:78:d6:7e:74:39:73:08:09:c5:
         15:e4:34:e8:cf:70:fd:db:90:bd:26:57:96:bb:c4:ea:b3:66:
         06:17:6c:70:60:0b:53:f9:9b:ee:60:c3:29:d1:e2:98:29:a8:
         25:34:b1:23:fa:0f:74:88:22:78:7b:62:0d:30:32:fd:42:f9:
         a1:ab:fb:c1:2a:92:f0:ea:1f:ae:dc:a8:00:9e:eb:76:80:61:
         a4:88:07:26:7f:9c:48:1c:67:9c:65:ba:bb:04:7a:20:a7:b6:
         b0:f4:48:28:05:b6:14:a8:88:a9:c3:f1:5b:73:42:0d:58:6d:
         bc:80:16:3a:e6:7e:c8:1e:a6:66:83:29:be:78:6f:fc:f8:2f:
         4f:cb:10:17:76:29:37:75:7a:11:6c:15:7d:64:09:c7:b7:0a:
         20:16:30:6c:4c:1b:e1:ac:16:c0:73:7e:60:71:60:49:47:f2:
         3a:7c:0f:24
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUDEDvC7OMCqIHtxGj486nwbrdc6IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzcxMkE3RTEzRTlCNjRERDlDRkZGMjc3OUE5QUJDRTk5
ODQ5MERFNjAeFw0yNjAyMTgyMTQ1MDRaFw0yNzAyMTcyMTUwMDRaMDMxMTAvBgNV
BAMTKEZBNzREMkU1MTAzMkM0QUQ2NEY3MTA5NUQzQjY3RDU3NDFERjYwQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRKED8wo+u+yrIveHFKu/qvwQD
yS+WPB5MLXgTG9gAH86ROiDu96WFeTOS5oKeRtEpAeOW/JZQVD9oFENw9xXQLf2H
ipywyfPAcw1n93BbvUpGQSdul8ORNR6H8qqUPx3e1wfB8rTsMj5AHigzO2QrxIxq
oIdZxdufnp2gmnu8ZNBJLM/X86ZKsdn8QVjuFwyoHBaif5Wa18gzOUDgPXO8cRkq
FaUZkJ6nDPJkUr2YpUL0KANu7GKoBcFZBOIPFs44CGwnrPdiqCEpUGpKVyAJL8/V
WX6/w/5l/b4pgxqKDLhHKBnYI84uW8Gr6eO9FNLq2KscfGKWKLgoDUHb62NzAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU+nTS5RAyxK1k9xCV07Z9V0HfYM8wHwYDVR0j
BBgwFoAUdxKn4T6bZN2c//J3mpq86ZhJDeYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0hRZGVlVm1leFJFTGJnc1BxWldDRTd2UEg5ZW9LMzNyV0t3RWMzRHRV
NmgvMC83NzEyQTdFMTNFOUI2NEREOUNGRkYyNzc5QTlBQkNFOTk4NDkwREU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc3MTJBN0UxM0U5QjY0REQ5
Q0ZGRjI3NzlBOUFCQ0U5OTg0OTBERTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dIUWRlZVZtZXhSRUxiZ3NQcVpXQ0U3dlBIOWVvSzMzcldLd0VjM0R0VTZoLzAv
MzIzODMwMzQzYTM5MzIzMDNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzNjMz
MzAzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQJIDANBgkqhkiG9w0BAQsFAAOCAQEAZUt2nP4Q
+7P5JVMZQzSFl1YrIsQ9XxFVHO/0RxTh5PU5PBcMhdu9qP0RzVcAwmWk/+yHPFVj
bGqFSyJD55j9otyKIldmi5kmVvEvmtlh29kmeNZ+dDlzCAnFFeQ06M9w/duQvSZX
lrvE6rNmBhdscGALU/mb7mDDKdHimCmoJTSxI/oPdIgieHtiDTAy/UL5oav7wSqS
8OofrtyoAJ7rdoBhpIgHJn+cSBxnnGW6uwR6IKe2sPRIKAW2FKiIqcPxW3NCDVht
vIAWOuZ+yB6mZoMpvnhv/PgvT8sQF3YpN3V6EWwVfWQJx7cKIBYwbEwb4awWwHN+
YHFgSUfyOnwPJA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 15:48:59 2026 by rpki-client