Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/323830343a6233303a3a2f33322d3430203d3e203532373438.roa
File:                     323830343a6233303a3a2f33322d3430203d3e203532373438.roa (raw, json)
Hash identifier:          jx4ceGCqRUBSOQBaooqvFIrl4Xaw1plEXYsqR0wR1uo=
Subject key identifier:   A8:2B:07:35:9F:99:46:7E:3B:FE:AC:7A:16:80:C1:7C:0D:A2:83:A5
Certificate issuer:       /CN=84A76C454E1EADE3E33056011C14E1F25D7EB27F
Certificate serial:       35A8784F886CD861A61504D38458942188BD97BD
Authority key identifier: 84:A7:6C:45:4E:1E:AD:E3:E3:30:56:01:1C:14:E1:F2:5D:7E:B2:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A76C454E1EADE3E33056011C14E1F25D7EB27F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/323830343a6233303a3a2f33322d3430203d3e203532373438.roa
Signing time:             Wed 04 Feb 2026 22:28:56 +0000
ROA not before:           Wed 04 Feb 2026 22:23:56 +0000
ROA not after:            Wed 03 Feb 2027 22:28:56 +0000
asID:                     52748
IP address blocks:        2804:b30::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.crl
                          rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A76C454E1EADE3E33056011C14E1F25D7EB27F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 15:54:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a8:78:4f:88:6c:d8:61:a6:15:04:d3:84:58:94:21:88:bd:97:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84A76C454E1EADE3E33056011C14E1F25D7EB27F
        Validity
            Not Before: Feb  4 22:23:56 2026 GMT
            Not After : Feb  3 22:28:56 2027 GMT
        Subject: CN=A82B07359F99467E3BFEAC7A1680C17C0DA283A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:08:29:0b:96:eb:8c:ae:48:5f:78:a7:91:04:
                    9c:7d:e9:fd:c6:eb:b5:ce:d7:eb:04:a3:54:2a:6f:
                    d2:0f:d7:06:fb:2e:8d:da:f9:02:3f:64:01:c4:a6:
                    5b:03:31:85:fe:a9:ed:c1:62:54:a7:fe:dd:98:ca:
                    10:d6:38:70:4a:12:6a:8a:73:3c:5f:dd:69:cb:7b:
                    03:5b:c2:24:90:e3:65:54:9f:1d:54:a9:91:e4:48:
                    c4:d8:ce:ea:da:3f:d9:00:73:4d:d6:f5:9c:d8:4e:
                    d8:21:0a:5d:43:d6:31:31:50:87:83:47:e8:15:08:
                    78:cb:48:71:95:62:54:a1:08:5e:46:4e:86:c6:49:
                    ce:32:61:46:9f:2d:70:2b:aa:b7:6d:79:85:5a:aa:
                    91:5b:5c:28:c2:67:c5:e8:e9:9f:0e:1b:d0:b8:f4:
                    f0:f0:e9:9c:98:9f:23:fb:6a:14:eb:b7:a8:1f:37:
                    59:48:e5:bf:52:cc:eb:5e:87:d0:02:26:ab:4b:c9:
                    e2:48:3e:b5:78:83:aa:1b:6f:64:0e:8f:93:c7:67:
                    5e:24:3d:19:6a:b7:fb:2c:93:16:46:d9:c6:2e:fd:
                    2d:aa:62:b3:86:96:45:02:f7:27:e2:8d:bc:99:c3:
                    d4:12:10:e4:6a:d1:86:cf:d3:7b:0e:65:57:3b:b8:
                    cc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2B:07:35:9F:99:46:7E:3B:FE:AC:7A:16:80:C1:7C:0D:A2:83:A5
            X509v3 Authority Key Identifier:
                keyid:84:A7:6C:45:4E:1E:AD:E3:E3:30:56:01:1C:14:E1:F2:5D:7E:B2:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A76C454E1EADE3E33056011C14E1F25D7EB27F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/323830343a6233303a3a2f33322d3430203d3e203532373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b30::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:79:df:2a:a2:fe:c0:d0:58:79:dd:0c:a4:5d:93:e0:39:77:
         bb:8f:e3:44:e5:cb:1f:18:b1:44:7e:27:e1:53:04:19:d9:85:
         8b:4b:78:1c:98:8f:80:32:82:c2:52:c1:23:68:67:bb:05:1f:
         f1:92:1f:52:a9:08:6f:82:1d:34:ec:85:5d:36:0a:d1:1c:2e:
         e0:9b:f5:08:75:71:10:8e:55:95:ed:f0:dd:82:44:44:fd:98:
         e7:a5:a9:e4:2d:6b:c1:63:89:8b:dd:a8:89:2d:47:de:5a:09:
         58:20:79:17:bc:ef:b3:9a:7c:0e:5d:3d:7b:03:4e:46:bf:bb:
         a9:0f:28:f3:ca:de:66:04:60:a7:e1:25:11:c2:37:cd:00:02:
         12:b1:26:ce:29:51:8c:13:ff:ad:15:9c:9d:37:cc:b0:4a:44:
         48:8c:19:13:2c:66:69:a5:c1:6d:72:0d:d7:c8:60:dc:47:10:
         28:c3:c2:cc:14:a7:51:41:ef:92:ae:d0:b9:3e:2e:74:5f:a1:
         05:21:3b:e3:95:4a:97:b0:02:1e:bf:07:1a:c5:59:bc:17:66:
         c2:ce:3e:3e:77:d8:59:a1:9c:cf:d5:8b:f8:b7:e2:21:5c:d4:
         6a:98:f1:89:ac:97:82:25:76:a1:82:67:6a:e4:f4:0a:b1:90:
         67:e9:cc:be
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUNah4T4hs2GGmFQTThFiUIYi9l70wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODRBNzZDNDU0RTFFQURFM0UzMzA1NjAxMUMxNEUxRjI1
RDdFQjI3RjAeFw0yNjAyMDQyMjIzNTZaFw0yNzAyMDMyMjI4NTZaMDMxMTAvBgNV
BAMTKEE4MkIwNzM1OUY5OTQ2N0UzQkZFQUM3QTE2ODBDMTdDMERBMjgzQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZCCkLluuMrkhfeKeRBJx96f3G
67XO1+sEo1Qqb9IP1wb7Lo3a+QI/ZAHEplsDMYX+qe3BYlSn/t2YyhDWOHBKEmqK
czxf3WnLewNbwiSQ42VUnx1UqZHkSMTYzuraP9kAc03W9ZzYTtghCl1D1jExUIeD
R+gVCHjLSHGVYlShCF5GTobGSc4yYUafLXArqrdteYVaqpFbXCjCZ8Xo6Z8OG9C4
9PDw6ZyYnyP7ahTrt6gfN1lI5b9SzOteh9ACJqtLyeJIPrV4g6obb2QOj5PHZ14k
PRlqt/sskxZG2cYu/S2qYrOGlkUC9yfijbyZw9QSEORq0YbP03sOZVc7uMzlAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUqCsHNZ+ZRn47/qx6FoDBfA2ig6UwHwYDVR0j
BBgwFoAUhKdsRU4erePjMFYBHBTh8l1+sn8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ydkpUZjg5N21uc1hFRUdGYlBxNDJiTGtNY3JicWhoWktTdnQzQTFialMx
LzIvODRBNzZDNDU0RTFFQURFM0UzMzA1NjAxMUMxNEUxRjI1RDdFQjI3Ri5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84NEE3NkM0NTRFMUVBREUzRTMz
MDU2MDExQzE0RTFGMjVEN0VCMjdGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQG
CCsGAQUFBzALhoGHcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9y
dkpUZjg5N21uc1hFRUdGYlBxNDJiTGtNY3JicWhoWktTdnQzQTFialMxLzIvMzIz
ODMwMzQzYTYyMzMzMDNhM2EyZjMzMzIyZDM0MzAyMDNkM2UyMDM1MzIzNzM0Mzgu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAP
MA0EAgACMAcDBQAoBAswMA0GCSqGSIb3DQEBCwUAA4IBAQB5ed8qov7A0Fh53Qyk
XZPgOXe7j+NE5csfGLFEfifhUwQZ2YWLS3gcmI+AMoLCUsEjaGe7BR/xkh9SqQhv
gh007IVdNgrRHC7gm/UIdXEQjlWV7fDdgkRE/ZjnpankLWvBY4mL3aiJLUfeWglY
IHkXvO+zmnwOXT17A05Gv7upDyjzyt5mBGCn4SURwjfNAAISsSbOKVGME/+tFZyd
N8ywSkRIjBkTLGZppcFtcg3XyGDcRxAow8LMFKdRQe+SrtC5Pi50X6EFITvjlUqX
sAIevwcaxVm8F2bCzj4+d9hZoZzP1Yv4t+IhXNRqmPGJrJeCJXahgmdq5PQKsZBn
6cy+
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:34:36 2026 by rpki-client