Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/323830343a336563633a3a2f33322d3438203d3e20323636363231.roa
File:                     323830343a336563633a3a2f33322d3438203d3e20323636363231.roa (raw, json)
Hash identifier:          q+e7LKpPc0qX+kAIrfJlKV5RDlZa4xL+5OUvrWG5jJU=
Subject key identifier:   33:C9:42:47:59:E9:85:0A:F7:6A:11:80:68:9C:A7:1E:6A:33:5D:42
Certificate issuer:       /CN=7CFFE4F07BF1202AF1654B9754000691AB38F4D2
Certificate serial:       0A3718904EFE58F3402942593BC30AC33A7CA897
Authority key identifier: 7C:FF:E4:F0:7B:F1:20:2A:F1:65:4B:97:54:00:06:91:AB:38:F4:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/323830343a336563633a3a2f33322d3438203d3e20323636363231.roa
Signing time:             Thu 05 Feb 2026 22:28:31 +0000
ROA not before:           Thu 05 Feb 2026 22:23:31 +0000
ROA not after:            Thu 04 Feb 2027 22:28:31 +0000
asID:                     266621
IP address blocks:        2804:3ecc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.crl
                          rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:37:18:90:4e:fe:58:f3:40:29:42:59:3b:c3:0a:c3:3a:7c:a8:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFFE4F07BF1202AF1654B9754000691AB38F4D2
        Validity
            Not Before: Feb  5 22:23:31 2026 GMT
            Not After : Feb  4 22:28:31 2027 GMT
        Subject: CN=33C9424759E9850AF76A1180689CA71E6A335D42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fb:f9:e7:48:c8:c9:5d:9b:c3:b6:27:93:13:
                    f8:21:a0:0c:1c:83:9c:b5:c0:d1:2d:9d:ef:83:87:
                    65:cd:57:3e:04:87:da:3d:4b:2d:21:c8:f2:7a:64:
                    4f:83:53:bf:f9:dd:be:66:1a:5a:ad:8c:9d:dd:a3:
                    c8:12:5c:35:11:c8:2d:0b:d9:6f:6a:e7:75:bc:b1:
                    5e:de:f0:7b:a3:51:88:06:bc:5f:56:a4:e7:91:ab:
                    80:56:68:bb:2d:99:01:f4:16:d8:cd:65:27:d1:7e:
                    2b:f9:a0:7f:54:5d:81:50:05:01:bf:7f:65:8d:a3:
                    c2:d4:e7:ea:3f:57:5f:78:f7:f0:0d:b6:5b:82:85:
                    f5:f5:c6:ee:bf:f8:46:7f:29:a3:0f:3c:c1:ac:93:
                    d3:40:27:4e:f2:af:d1:ae:b2:3f:f0:64:0e:99:4c:
                    b2:ce:a7:48:65:11:29:1b:ec:1c:50:40:ed:82:51:
                    5c:1f:5a:f7:29:91:3c:ba:b6:5d:ec:c8:2e:ed:a8:
                    42:84:c2:65:4e:d1:d4:79:64:4b:84:90:37:ed:d5:
                    94:66:d0:af:b3:cf:2b:a0:c1:97:c4:de:2d:02:7e:
                    24:a1:80:ba:b0:f8:91:bf:1d:bd:ee:32:ad:02:ff:
                    bf:45:91:cf:11:e0:cb:07:8f:f7:9f:61:a5:5a:7a:
                    2a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C9:42:47:59:E9:85:0A:F7:6A:11:80:68:9C:A7:1E:6A:33:5D:42
            X509v3 Authority Key Identifier:
                keyid:7C:FF:E4:F0:7B:F1:20:2A:F1:65:4B:97:54:00:06:91:AB:38:F4:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/323830343a336563633a3a2f33322d3438203d3e20323636363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ecc::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:48:fd:94:be:c6:1a:a6:d0:e1:5a:fd:93:a1:92:01:07:2c:
         d5:89:4c:0d:cb:62:ba:da:7e:1f:c5:44:3d:a1:29:bb:4e:69:
         10:7b:1e:08:4e:07:a9:d4:b1:5e:7f:74:2f:25:f2:e4:e8:3b:
         82:f6:5b:ab:d5:da:64:46:ef:10:db:d1:fa:d9:69:bb:a6:94:
         14:4c:18:49:06:73:e3:cc:3a:74:29:16:2f:c6:9e:82:c1:b9:
         9e:f1:a8:0c:74:0d:5f:09:cb:4b:ac:1f:55:6c:22:a0:e0:e3:
         4d:09:8b:67:c3:8c:c5:96:e2:47:ab:11:c1:6f:eb:77:4c:a5:
         1a:26:e1:b6:54:33:fb:ce:e2:3c:9d:6d:c1:b1:0d:e0:e1:aa:
         b7:5e:c6:23:8a:94:8a:0e:57:9a:d9:a4:b5:fd:af:5c:d8:de:
         f4:e6:a6:5f:c1:e5:5d:d4:a8:76:65:da:21:8a:3e:48:1a:bc:
         fd:e7:c1:cb:0d:83:15:c7:9f:07:b3:31:25:f5:5a:12:54:2c:
         f6:b9:3c:1d:58:16:f3:14:38:91:90:75:6e:e3:f1:de:44:04:
         4c:b7:1f:e1:2e:b0:94:e2:cd:34:b6:6f:3d:24:6e:f4:fa:d9:
         af:df:11:35:6f:b8:a0:a9:47:76:a4:80:7d:b8:cc:25:49:b6:
         e3:c2:56:16
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUCjcYkE7+WPNAKUJZO8MKwzp8qJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NGRkU0RjA3QkYxMjAyQUYxNjU0Qjk3NTQwMDA2OTFB
QjM4RjREMjAeFw0yNjAyMDUyMjIzMzFaFw0yNzAyMDQyMjI4MzFaMDMxMTAvBgNV
BAMTKDMzQzk0MjQ3NTlFOTg1MEFGNzZBMTE4MDY4OUNBNzFFNkEzMzVENDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl+/nnSMjJXZvDtieTE/ghoAwc
g5y1wNEtne+Dh2XNVz4Eh9o9Sy0hyPJ6ZE+DU7/53b5mGlqtjJ3do8gSXDURyC0L
2W9q53W8sV7e8HujUYgGvF9WpOeRq4BWaLstmQH0FtjNZSfRfiv5oH9UXYFQBQG/
f2WNo8LU5+o/V1949/ANtluChfX1xu6/+EZ/KaMPPMGsk9NAJ07yr9Gusj/wZA6Z
TLLOp0hlESkb7BxQQO2CUVwfWvcpkTy6tl3syC7tqEKEwmVO0dR5ZEuEkDft1ZRm
0K+zzyugwZfE3i0CfiShgLqw+JG/Hb3uMq0C/79Fkc8R4MsHj/efYaVaeiqJAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUM8lCR1nphQr3ahGAaJynHmozXUIwHwYDVR0j
BBgwFoAUfP/k8HvxICrxZUuXVAAGkas49NIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHVKZGFpZG9xTEZwN296dzN0eW5hSHhadktIZUtOZWNQcjE3UkFONktz
dWEvMS83Q0ZGRTRGMDdCRjEyMDJBRjE2NTRCOTc1NDAwMDY5MUFCMzhGNEQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDRkZFNEYwN0JGMTIwMkFG
MTY1NEI5NzU0MDAwNjkxQUIzOEY0RDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h1SmRhaWRvcUxGcDdvenczdHluYUh4WnZLSGVLTmVjUHIxN1JBTjZLc3VhLzEv
MzIzODMwMzQzYTMzNjU2MzYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzYzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ+zDANBgkqhkiG9w0BAQsFAAOCAQEAvUj9lL7G
GqbQ4Vr9k6GSAQcs1YlMDctiutp+H8VEPaEpu05pEHseCE4HqdSxXn90LyXy5Og7
gvZbq9XaZEbvENvR+tlpu6aUFEwYSQZz48w6dCkWL8aegsG5nvGoDHQNXwnLS6wf
VWwioODjTQmLZ8OMxZbiR6sRwW/rd0ylGibhtlQz+87iPJ1twbEN4OGqt17GI4qU
ig5Xmtmktf2vXNje9OamX8HlXdSodmXaIYo+SBq8/efByw2DFcefB7MxJfVaElQs
9rk8HVgW8xQ4kZB1buPx3kQETLcf4S6wlOLNNLZvPSRu9PrZr98RNW+4oKlHdqSA
fbjMJUm248JWFg==
-----END CERTIFICATE-----
Generated at Thu Feb 19 11:41:48 2026 by rpki-client