Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/323830343a3837343a383030303a3a2f33332d3438203d3e20323632333733.roa
File:                     323830343a3837343a383030303a3a2f33332d3438203d3e20323632333733.roa (raw, json)
Hash identifier:          yyvw/AJLFheSAoZ/0hjhCBnT6lPgeyfaony6pxZArgY=
Subject key identifier:   B5:F7:A0:CC:EB:AD:36:D2:CC:AF:58:E5:AE:E6:EA:66:58:C8:30:ED
Certificate issuer:       /CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
Certificate serial:       092F15CAB67E82B5B1717B2B7224A1A4C76BD080
Authority key identifier: 88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/323830343a3837343a383030303a3a2f33332d3438203d3e20323632333733.roa
Signing time:             Mon 09 Feb 2026 15:37:40 +0000
ROA not before:           Mon 09 Feb 2026 15:32:40 +0000
ROA not after:            Mon 08 Feb 2027 15:37:40 +0000
asID:                     262373
IP address blocks:        2804:874:8000::/33 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.crl
                          rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:2f:15:ca:b6:7e:82:b5:b1:71:7b:2b:72:24:a1:a4:c7:6b:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
        Validity
            Not Before: Feb  9 15:32:40 2026 GMT
            Not After : Feb  8 15:37:40 2027 GMT
        Subject: CN=B5F7A0CCEBAD36D2CCAF58E5AEE6EA6658C830ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ed:61:43:d2:99:38:b4:ca:41:fb:dd:dc:e2:
                    d6:98:4e:18:56:ad:8d:41:10:90:63:94:0d:33:62:
                    60:11:55:e8:94:e5:72:5c:0b:3b:f3:d6:82:73:81:
                    ed:bf:ce:bc:39:fa:0e:92:2b:d3:27:f5:cb:66:cb:
                    b5:be:b7:20:f3:94:2a:f7:9b:db:65:3b:75:0f:bc:
                    27:6a:a2:2c:73:ed:16:f6:34:f9:12:56:83:be:fa:
                    0e:01:c7:6d:46:d0:50:c3:c5:f5:b5:0f:a7:dc:02:
                    4f:4a:8f:df:06:e0:cc:fd:38:e1:4c:9c:dc:26:9d:
                    3a:f9:b7:b0:e0:ec:b9:70:e0:9d:30:08:75:be:6b:
                    12:e5:4b:e2:35:97:79:a2:95:7e:c5:d9:e1:87:69:
                    b3:80:df:27:18:ec:17:99:c3:da:01:4f:58:22:db:
                    c3:dc:ad:45:11:e0:a2:b0:c1:6e:26:5b:5e:23:28:
                    77:10:87:4d:9d:56:cd:bd:33:6a:f7:fa:80:37:e5:
                    7c:dd:df:01:55:22:e4:f3:8d:35:bc:cc:57:23:62:
                    52:20:f3:ca:b8:c3:ed:14:de:1c:b3:5e:d6:49:b6:
                    1b:b0:0b:0c:09:35:4b:b9:c1:7e:3c:18:15:aa:12:
                    21:35:57:e4:74:9e:e6:23:e5:6b:2f:c6:7a:69:d2:
                    21:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F7:A0:CC:EB:AD:36:D2:CC:AF:58:E5:AE:E6:EA:66:58:C8:30:ED
            X509v3 Authority Key Identifier:
                keyid:88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/323830343a3837343a383030303a3a2f33332d3438203d3e20323632333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:874:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         c6:8b:bc:01:17:37:ed:58:00:6e:de:75:3f:04:07:80:5b:a9:
         c7:96:1f:fb:8c:a2:38:c0:b8:3c:d0:86:30:c6:38:e8:fe:e6:
         f6:ca:64:76:50:16:2c:91:16:52:c5:43:75:05:b2:ad:14:68:
         be:dc:15:6a:79:5d:6e:89:3e:a7:4b:c2:c7:0c:c2:19:99:16:
         f9:c4:e1:e7:74:07:3d:2e:de:7d:ec:68:19:ac:37:77:04:13:
         2c:1b:aa:4a:1c:93:09:99:22:46:be:c0:7c:d4:5a:27:6b:58:
         46:00:65:e5:45:cd:5a:a7:62:66:03:1c:f1:30:87:e9:cf:ae:
         36:84:bf:ee:04:52:06:56:92:88:2e:1b:00:6a:c0:50:4a:f9:
         eb:dc:1d:f1:3f:f8:e6:84:21:7c:a4:93:52:05:8b:46:c9:b4:
         78:9d:d6:5a:f9:5d:ab:69:ee:93:01:d7:9c:1c:d2:a4:47:9d:
         fa:0a:fc:88:f8:98:14:ae:4f:04:5d:36:46:ce:de:b1:53:be:
         66:82:6f:21:98:a2:2f:7f:b6:74:2b:bb:6f:7c:40:28:77:e6:
         b2:80:06:4b:75:53:26:70:e7:ba:e1:ff:85:bf:03:0a:61:d2:
         17:44:06:bc:e3:7d:5e:d0:23:a0:c6:7b:da:ef:88:99:5d:47:
         e2:23:58:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCS8VyrZ+grWxcXsrciShpMdr0IAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhBRDg3NjExRkREQzlDOTlCMjE1N0ZCQzUwMzQzMERF
ODc0NURCRDAeFw0yNjAyMDkxNTMyNDBaFw0yNzAyMDgxNTM3NDBaMDMxMTAvBgNV
BAMTKEI1RjdBMENDRUJBRDM2RDJDQ0FGNThFNUFFRTZFQTY2NThDODMwRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx7WFD0pk4tMpB+93c4taYThhW
rY1BEJBjlA0zYmARVeiU5XJcCzvz1oJzge2/zrw5+g6SK9Mn9ctmy7W+tyDzlCr3
m9tlO3UPvCdqoixz7Rb2NPkSVoO++g4Bx21G0FDDxfW1D6fcAk9Kj98G4Mz9OOFM
nNwmnTr5t7Dg7Llw4J0wCHW+axLlS+I1l3milX7F2eGHabOA3ycY7BeZw9oBT1gi
28PcrUUR4KKwwW4mW14jKHcQh02dVs29M2r3+oA35Xzd3wFVIuTzjTW8zFcjYlIg
88q4w+0U3hyzXtZJthuwCwwJNUu5wX48GBWqEiE1V+R0nuYj5Wsvxnpp0iHvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtfegzOutNtLMr1jlrubqZljIMO0wHwYDVR0j
BBgwFoAUiK2HYR/dycmbIVf7xQNDDeh0Xb0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGlMekw0S2hkVnBERm9DSmV5clVuSnBLaDFmcTRBWTVFV2lzY2c4emp6
YXMvMC84OEFEODc2MTFGRERDOUM5OUIyMTU3RkJDNTAzNDMwREU4NzQ1REJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4QUQ4NzYxMUZEREM5Qzk5
QjIxNTdGQkM1MDM0MzBERTg3NDVEQkQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hpTHpMNEtoZFZwREZvQ0pleXJVbkpwS2gxZnE0QVk1RVdpc2NnOHpqemFzLzAv
MzIzODMwMzQzYTM4MzczNDNhMzgzMDMwMzAzYTNhMmYzMzMzMmQzNDM4MjAzZDNl
MjAzMjM2MzIzMzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgcoBAh0gDANBgkqhkiG9w0BAQsFAAOC
AQEAxou8ARc37VgAbt51PwQHgFupx5Yf+4yiOMC4PNCGMMY46P7m9spkdlAWLJEW
UsVDdQWyrRRovtwVanldbok+p0vCxwzCGZkW+cTh53QHPS7efexoGaw3dwQTLBuq
ShyTCZkiRr7AfNRaJ2tYRgBl5UXNWqdiZgMc8TCH6c+uNoS/7gRSBlaSiC4bAGrA
UEr569wd8T/45oQhfKSTUgWLRsm0eJ3WWvldq2nukwHXnBzSpEed+gr8iPiYFK5P
BF02Rs7esVO+ZoJvIZiiL3+2dCu7b3xAKHfmsoAGS3VTJnDnuuH/hb8DCmHSF0QG
vON9XtAjoMZ72u+ImV1H4iNYwQ==
-----END CERTIFICATE-----
Generated at Thu Feb 19 17:38:11 2026 by rpki-client