Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/323830343a356139303a3a2f33322d3438203d3e20323638373831.roa
File:                     323830343a356139303a3a2f33322d3438203d3e20323638373831.roa (raw, json)
Hash identifier:          D8vmArp8i6plN5iWQ4omWzWwcZJPEUBq6Pq8sK070lc=
Subject key identifier:   10:27:5E:F9:68:80:D7:C0:CE:5B:EC:48:FD:A5:14:F0:95:25:D9:6A
Certificate issuer:       /CN=A54DFBD8D106EBB2780BF8D0331AF120305AAB46
Certificate serial:       5AE25BBD5577C05F90153BF5F8E62555AB5A3DC9
Authority key identifier: A5:4D:FB:D8:D1:06:EB:B2:78:0B:F8:D0:33:1A:F1:20:30:5A:AB:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/323830343a356139303a3a2f33322d3438203d3e20323638373831.roa
Signing time:             Thu 05 Feb 2026 01:25:59 +0000
ROA not before:           Thu 05 Feb 2026 01:20:59 +0000
ROA not after:            Thu 04 Feb 2027 01:25:59 +0000
asID:                     268781
IP address blocks:        2804:5a90::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.crl
                          rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e2:5b:bd:55:77:c0:5f:90:15:3b:f5:f8:e6:25:55:ab:5a:3d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A54DFBD8D106EBB2780BF8D0331AF120305AAB46
        Validity
            Not Before: Feb  5 01:20:59 2026 GMT
            Not After : Feb  4 01:25:59 2027 GMT
        Subject: CN=10275EF96880D7C0CE5BEC48FDA514F09525D96A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:67:9c:9d:c1:e3:12:45:2f:24:13:c2:57:38:
                    c4:a2:41:ed:03:2d:bc:cd:1d:04:a3:60:b6:46:f0:
                    bd:8f:26:29:de:7d:3e:6e:7e:49:7f:a5:8d:bc:e5:
                    0d:52:ab:5e:1c:b3:dd:f7:d6:62:70:ed:c0:0f:ff:
                    e9:ef:6c:8a:15:8e:60:51:43:5e:17:c8:b9:ca:2c:
                    c3:b9:eb:7a:0f:7e:95:53:42:6f:05:e2:73:18:36:
                    55:a4:7a:58:30:e4:c2:7b:53:c7:3c:72:46:f4:b3:
                    28:3a:29:92:3e:74:f1:e1:f0:38:82:3e:62:c1:1d:
                    22:24:42:7e:ae:3e:05:9e:52:4f:3f:a2:5e:32:10:
                    78:f8:f0:79:60:2c:05:53:89:a0:2c:83:a4:e0:25:
                    81:30:ff:fa:c5:7f:9c:40:b6:37:f0:50:77:7b:1e:
                    aa:04:90:72:eb:9f:38:22:e9:f7:11:7f:87:8e:43:
                    13:bc:04:2a:07:29:ef:44:a9:3c:da:aa:78:c9:1b:
                    b8:ba:a0:99:3c:80:25:20:07:84:b5:b3:6b:39:e8:
                    fb:d2:c1:21:56:b7:ab:bf:36:d2:64:e1:61:98:a7:
                    57:9c:a1:bd:c4:c1:aa:cd:fb:c8:9f:b1:a1:99:41:
                    f5:72:c3:ff:19:22:df:cf:fe:83:01:2d:f5:ef:04:
                    0a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:27:5E:F9:68:80:D7:C0:CE:5B:EC:48:FD:A5:14:F0:95:25:D9:6A
            X509v3 Authority Key Identifier:
                keyid:A5:4D:FB:D8:D1:06:EB:B2:78:0B:F8:D0:33:1A:F1:20:30:5A:AB:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/323830343a356139303a3a2f33322d3438203d3e20323638373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:23:5d:ab:38:c6:55:de:80:8e:08:39:bc:93:63:ae:5c:49:
         7d:9b:81:b7:3c:9b:c1:58:5a:32:25:e7:32:27:83:d8:dd:ad:
         bb:46:f6:7a:1b:7b:05:f9:6c:9f:72:08:57:49:88:5e:4d:c9:
         b8:ff:c5:21:3c:07:08:00:7b:54:3e:5b:9a:dd:15:ba:cd:fb:
         52:d6:92:8f:49:32:f9:35:87:7d:7a:0a:32:23:7e:8b:2f:46:
         3d:b1:ff:1b:df:ea:22:50:05:a9:cb:53:9a:14:06:58:fe:c6:
         b0:c8:87:57:0c:90:db:85:52:e7:44:79:bd:60:cc:07:91:a9:
         8d:8f:9a:ae:d7:ec:f1:01:ea:c0:d1:28:a3:fd:56:b0:24:b4:
         fe:d7:5e:0b:4a:e6:24:82:19:a4:85:31:ea:5c:9b:8d:46:cb:
         83:50:ca:41:18:86:25:22:cd:84:67:15:fb:58:5a:c5:e5:62:
         e4:a9:cd:8f:db:92:26:f5:d9:7a:52:6a:4e:02:ca:51:9f:67:
         d9:23:b5:59:fe:bf:b3:87:21:62:c5:9f:f6:57:e1:ce:0b:49:
         26:50:8f:42:a9:dd:81:c4:0c:05:7f:83:de:e1:fc:6a:fc:cf:
         75:67:2a:7d:3c:74:c3:52:af:3e:35:46:cf:23:db:f5:ff:00:
         c3:bb:5f:ec
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUWuJbvVV3wF+QFTv1+OYlVataPckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU0REZCRDhEMTA2RUJCMjc4MEJGOEQwMzMxQUYxMjAz
MDVBQUI0NjAeFw0yNjAyMDUwMTIwNTlaFw0yNzAyMDQwMTI1NTlaMDMxMTAvBgNV
BAMTKDEwMjc1RUY5Njg4MEQ3QzBDRTVCRUM0OEZEQTUxNEYwOTUyNUQ5NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZ5ydweMSRS8kE8JXOMSiQe0D
LbzNHQSjYLZG8L2PJinefT5ufkl/pY285Q1Sq14cs9331mJw7cAP/+nvbIoVjmBR
Q14XyLnKLMO563oPfpVTQm8F4nMYNlWkelgw5MJ7U8c8ckb0syg6KZI+dPHh8DiC
PmLBHSIkQn6uPgWeUk8/ol4yEHj48HlgLAVTiaAsg6TgJYEw//rFf5xAtjfwUHd7
HqoEkHLrnzgi6fcRf4eOQxO8BCoHKe9EqTzaqnjJG7i6oJk8gCUgB4S1s2s56PvS
wSFWt6u/NtJk4WGYp1ecob3EwarN+8ifsaGZQfVyw/8ZIt/P/oMBLfXvBArHAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUECde+WiA18DOW+xI/aUU8JUl2WowHwYDVR0j
BBgwFoAUpU372NEG67J4C/jQMxrxIDBaq0YwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9XWWdTWnY4RFVNclpWUVhlN3dmOHoyMjNNZk41dEhqSHJnZWFSZTV6cDNy
LzEvQTU0REZCRDhEMTA2RUJCMjc4MEJGOEQwMzMxQUYxMjAzMDVBQUI0Ni5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9BNTRERkJEOEQxMDZFQkIyNzgw
QkY4RDAzMzFBRjEyMDMwNUFBQjQ2LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9X
WWdTWnY4RFVNclpWUVhlN3dmOHoyMjNNZk41dEhqSHJnZWFSZTV6cDNyLzEvMzIz
ODMwMzQzYTM1NjEzOTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4Mzcz
ODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARakDANBgkqhkiG9w0BAQsFAAOCAQEApCNdqzjGVd6A
jgg5vJNjrlxJfZuBtzybwVhaMiXnMieD2N2tu0b2eht7Bflsn3IIV0mIXk3JuP/F
ITwHCAB7VD5bmt0Vus37UtaSj0ky+TWHfXoKMiN+iy9GPbH/G9/qIlAFqctTmhQG
WP7GsMiHVwyQ24VS50R5vWDMB5GpjY+artfs8QHqwNEoo/1WsCS0/tdeC0rmJIIZ
pIUx6lybjUbLg1DKQRiGJSLNhGcV+1haxeVi5KnNj9uSJvXZelJqTgLKUZ9n2SO1
Wf6/s4chYsWf9lfhzgtJJlCPQqndgcQMBX+D3uH8avzPdWcqfTx0w1KvPjVGzyPb
9f8Aw7tf7A==
-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:48 2026 by rpki-client