Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/1/323830343a343832383a3a2f33322d3438203d3e20323637313031.roa
File:                     323830343a343832383a3a2f33322d3438203d3e20323637313031.roa (raw, json)
Hash identifier:          1o2hIfM0IThrpM6g+5UQdEADvBbKPFy0cT5I1ChStN8=
Subject key identifier:   79:9E:19:93:E4:FA:9A:5F:34:49:D5:05:6B:AD:00:97:6A:39:A4:B6
Certificate issuer:       /CN=B81349D6DE12F72CBE07E6A9581BD93607C25C4E
Certificate serial:       64B5A2C3DE33BF87E85658D4BD16E546A3681C45
Authority key identifier: B8:13:49:D6:DE:12:F7:2C:BE:07:E6:A9:58:1B:D9:36:07:C2:5C:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B81349D6DE12F72CBE07E6A9581BD93607C25C4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/1/323830343a343832383a3a2f33322d3438203d3e20323637313031.roa
Signing time:             Thu 05 Feb 2026 21:23:12 +0000
ROA not before:           Thu 05 Feb 2026 21:18:12 +0000
ROA not after:            Thu 04 Feb 2027 21:23:12 +0000
asID:                     267101
IP address blocks:        2804:4828::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/1/B81349D6DE12F72CBE07E6A9581BD93607C25C4E.crl
                          rsync://rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/1/B81349D6DE12F72CBE07E6A9581BD93607C25C4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B81349D6DE12F72CBE07E6A9581BD93607C25C4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b5:a2:c3:de:33:bf:87:e8:56:58:d4:bd:16:e5:46:a3:68:1c:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B81349D6DE12F72CBE07E6A9581BD93607C25C4E
        Validity
            Not Before: Feb  5 21:18:12 2026 GMT
            Not After : Feb  4 21:23:12 2027 GMT
        Subject: CN=799E1993E4FA9A5F3449D5056BAD00976A39A4B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:57:52:1f:a3:4b:66:ec:b0:3a:3d:93:e9:34:
                    a5:f5:7a:f5:87:ef:b2:70:1a:5d:51:86:72:6a:8a:
                    73:8f:2e:78:5a:fa:6a:8c:80:3b:eb:7c:cd:e4:b3:
                    cb:9b:30:f0:18:5e:73:0c:eb:a9:d8:49:1c:6e:56:
                    16:96:6f:48:b6:86:c9:39:55:ae:0d:d0:92:60:cc:
                    e0:70:28:d3:2c:ad:67:1e:37:c1:69:e5:95:e4:78:
                    60:21:1a:4f:54:ba:af:f4:1c:b5:9c:db:21:4f:d9:
                    b1:94:29:61:fc:a4:44:66:81:a3:79:f8:6c:14:5d:
                    ea:30:a8:cd:aa:d2:c7:74:5a:c0:5f:75:f3:90:4d:
                    5c:be:4e:3d:bf:e5:73:1a:b5:4e:95:97:b4:f1:fd:
                    28:2d:6c:41:f8:48:f3:e3:10:ba:a5:7d:d3:95:66:
                    ca:f2:69:ed:b3:d7:42:df:f6:72:0a:bb:78:90:fa:
                    39:40:ba:b3:e0:66:08:ae:27:8b:ec:5e:1e:d4:fb:
                    42:55:20:26:c6:21:78:72:c9:65:35:15:00:19:ca:
                    ca:cd:95:70:b7:d8:37:3a:34:b1:88:73:e1:a4:08:
                    31:b0:50:12:9c:b9:da:c6:a7:5c:b6:81:3c:e5:fc:
                    c8:6a:55:81:9d:a4:f8:e8:59:78:59:3c:ac:07:3b:
                    e7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9E:19:93:E4:FA:9A:5F:34:49:D5:05:6B:AD:00:97:6A:39:A4:B6
            X509v3 Authority Key Identifier:
                keyid:B8:13:49:D6:DE:12:F7:2C:BE:07:E6:A9:58:1B:D9:36:07:C2:5C:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/1/B81349D6DE12F72CBE07E6A9581BD93607C25C4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B81349D6DE12F72CBE07E6A9581BD93607C25C4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/1/323830343a343832383a3a2f33322d3438203d3e20323637313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4828::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:23:80:3f:b6:75:9b:85:ed:0a:86:4c:5d:87:de:1b:75:9a:
         4d:f1:ca:dd:20:39:89:81:3a:af:d9:53:04:7f:ee:0b:e3:99:
         36:78:df:78:3e:d9:d6:9a:71:05:e2:10:4d:eb:82:97:2f:5e:
         92:f2:57:e9:7e:b8:0e:5d:f2:11:77:2a:96:51:6b:46:ad:1e:
         79:4f:3a:7e:df:cc:3e:13:15:d8:93:58:3a:75:a8:f7:93:0b:
         76:ba:13:a4:85:50:18:2e:14:17:50:e4:5d:a5:2a:e0:89:6a:
         9a:5e:96:dc:50:d5:95:b3:06:3c:9a:ea:7e:ec:0b:96:a9:79:
         1d:07:b5:e4:2d:d3:f0:47:26:b0:b2:cc:ba:71:3b:a3:fe:bd:
         c1:ef:f7:ea:86:0c:fc:9a:68:76:44:c3:da:66:27:92:d8:b9:
         d7:9e:98:c9:76:e7:ce:84:20:89:93:e0:5f:64:ed:4c:d3:37:
         2b:52:5d:22:33:a1:2d:d2:4e:6f:fc:65:d8:cd:58:3c:ae:08:
         34:c1:e3:82:53:66:f5:53:54:c4:d6:37:62:31:c2:f0:f2:b8:
         01:30:5b:a7:3c:bc:d5:a3:08:a6:7c:2e:3a:d3:9c:71:9a:21:
         d9:34:22:a7:c8:ec:1a:cb:7c:56:cf:c9:fb:ec:ea:08:11:88:
         06:8b:a8:94
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUZLWiw94zv4foVljUvRblRqNoHEUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjgxMzQ5RDZERTEyRjcyQ0JFMDdFNkE5NTgxQkQ5MzYw
N0MyNUM0RTAeFw0yNjAyMDUyMTE4MTJaFw0yNzAyMDQyMTIzMTJaMDMxMTAvBgNV
BAMTKDc5OUUxOTkzRTRGQTlBNUYzNDQ5RDUwNTZCQUQwMDk3NkEzOUE0QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+V1Ifo0tm7LA6PZPpNKX1evWH
77JwGl1RhnJqinOPLnha+mqMgDvrfM3ks8ubMPAYXnMM66nYSRxuVhaWb0i2hsk5
Va4N0JJgzOBwKNMsrWceN8Fp5ZXkeGAhGk9Uuq/0HLWc2yFP2bGUKWH8pERmgaN5
+GwUXeowqM2q0sd0WsBfdfOQTVy+Tj2/5XMatU6Vl7Tx/SgtbEH4SPPjELqlfdOV
Zsryae2z10Lf9nIKu3iQ+jlAurPgZgiuJ4vsXh7U+0JVICbGIXhyyWU1FQAZysrN
lXC32Dc6NLGIc+GkCDGwUBKcudrGp1y2gTzl/MhqVYGdpPjoWXhZPKwHO+cdAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUeZ4Zk+T6ml80SdUFa60Al2o5pLYwHwYDVR0j
BBgwFoAUuBNJ1t4S9yy+B+apWBvZNgfCXE4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9xaHNmTlVSSkc3dkpmSFYxZktnWWk4em12QzJUNEJkMjNNOHFpelM4VjJz
LzEvQjgxMzQ5RDZERTEyRjcyQ0JFMDdFNkE5NTgxQkQ5MzYwN0MyNUM0RS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CODEzNDlENkRFMTJGNzJDQkUw
N0U2QTk1ODFCRDkzNjA3QzI1QzRFLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9x
aHNmTlVSSkc3dkpmSFYxZktnWWk4em12QzJUNEJkMjNNOHFpelM4VjJzLzEvMzIz
ODMwMzQzYTM0MzgzMjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3MzEz
MDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARIKDANBgkqhkiG9w0BAQsFAAOCAQEAoSOAP7Z1m4Xt
CoZMXYfeG3WaTfHK3SA5iYE6r9lTBH/uC+OZNnjfeD7Z1ppxBeIQTeuCly9ekvJX
6X64Dl3yEXcqllFrRq0eeU86ft/MPhMV2JNYOnWo95MLdroTpIVQGC4UF1DkXaUq
4Ilqml6W3FDVlbMGPJrqfuwLlql5HQe15C3T8EcmsLLMunE7o/69we/36oYM/Jpo
dkTD2mYnkti5156YyXbnzoQgiZPgX2TtTNM3K1JdIjOhLdJOb/xl2M1YPK4INMHj
glNm9VNUxNY3YjHC8PK4ATBbpzy81aMIpnwuOtOccZoh2TQip8jsGst8Vs/J++zq
CBGIBouolA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:52 2026 by rpki-client