Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/323830343a363361383a3a2f33322d3332203d3e20323639333735.roa
File:                     323830343a363361383a3a2f33322d3332203d3e20323639333735.roa (raw, json)
Hash identifier:          VVVi4pftfTQRHSeh+GVIe3lzcFAqtQS5U/66nny4V6o=
Subject key identifier:   E8:40:4B:05:5E:8C:FD:14:6F:CE:E8:02:9A:30:9E:19:01:76:D8:BD
Certificate issuer:       /CN=87A54CD68F9B764BD3E7FEC33B928C02D25F8D88
Certificate serial:       13161993AFDC8CA04733C7BE17CD0FE93C8E2D25
Authority key identifier: 87:A5:4C:D6:8F:9B:76:4B:D3:E7:FE:C3:3B:92:8C:02:D2:5F:8D:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/323830343a363361383a3a2f33322d3332203d3e20323639333735.roa
Signing time:             Thu 19 Feb 2026 12:59:05 +0000
ROA not before:           Thu 19 Feb 2026 12:54:05 +0000
ROA not after:            Thu 18 Feb 2027 12:59:05 +0000
asID:                     269375
IP address blocks:        2804:63a8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl
                          rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 05:36:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:16:19:93:af:dc:8c:a0:47:33:c7:be:17:cd:0f:e9:3c:8e:2d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A54CD68F9B764BD3E7FEC33B928C02D25F8D88
        Validity
            Not Before: Feb 19 12:54:05 2026 GMT
            Not After : Feb 18 12:59:05 2027 GMT
        Subject: CN=E8404B055E8CFD146FCEE8029A309E190176D8BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5d:0e:d9:dd:73:70:e8:91:06:c1:16:8b:2c:
                    3d:7f:67:87:8b:62:cd:1f:9f:09:a6:06:08:76:f7:
                    b5:ae:3c:df:9e:4c:7c:74:79:8c:24:23:4d:a4:d5:
                    e9:1b:b0:e7:7d:57:c2:b0:d0:27:51:fb:af:e3:74:
                    5e:b7:85:1e:99:0e:40:99:5a:eb:8c:26:41:ee:a0:
                    55:8a:7f:8e:b5:99:b8:9e:be:a3:4f:bf:70:8a:8c:
                    7f:37:f0:b9:1c:83:2a:09:55:dd:8e:98:08:51:ac:
                    63:c6:61:4a:9c:99:75:e2:1a:aa:35:55:b5:9e:16:
                    db:e9:6e:75:0c:f8:4c:95:9f:b6:39:d1:d2:24:95:
                    14:55:22:e1:df:97:3f:a7:77:2e:bf:f6:2e:77:2d:
                    d5:54:c4:e9:e8:bf:63:24:d1:b9:1e:85:1b:c7:ea:
                    17:47:1e:04:51:9a:d7:d1:30:ef:8d:8b:3e:d8:a4:
                    a6:ad:b9:88:7f:80:f7:cf:78:08:ce:5f:44:d2:fe:
                    28:18:6b:34:9c:30:1f:04:f4:b2:e3:09:a5:69:78:
                    d3:9b:f0:26:6b:9d:e0:d5:dc:48:6b:25:fb:de:9a:
                    a6:15:8e:4a:c2:dd:16:23:ef:b0:23:c1:c9:a0:6d:
                    32:67:95:55:2c:c7:24:d6:90:34:fb:47:9f:31:0e:
                    bd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:40:4B:05:5E:8C:FD:14:6F:CE:E8:02:9A:30:9E:19:01:76:D8:BD
            X509v3 Authority Key Identifier:
                keyid:87:A5:4C:D6:8F:9B:76:4B:D3:E7:FE:C3:3B:92:8C:02:D2:5F:8D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/323830343a363361383a3a2f33322d3332203d3e20323639333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:3e:98:26:58:99:a8:89:86:db:a9:ae:f0:ad:05:8a:96:48:
         13:31:81:b9:05:f0:5e:f8:c4:f9:54:9d:e5:36:94:8b:70:b9:
         35:cd:02:35:a9:0a:c3:2b:bc:e5:c9:f7:0f:24:e9:ac:1a:38:
         49:ac:93:5c:d9:b2:56:5d:a7:ac:fd:a7:b4:e4:68:62:43:22:
         b9:21:42:70:11:35:8f:2d:da:91:f6:ea:63:44:cb:fd:0e:93:
         cd:10:a1:1d:c8:de:d2:24:59:6b:6b:72:11:52:43:4e:a3:ac:
         ff:ac:0b:44:55:55:cf:43:e2:30:24:0c:6f:21:2a:1f:53:cb:
         2a:51:be:d0:86:05:e9:23:41:29:45:9f:52:cf:24:30:a6:c0:
         0e:ee:57:fc:ff:aa:7f:de:05:dc:79:1f:c3:99:0d:58:4c:66:
         ab:ce:df:35:0a:63:04:04:82:1d:f9:a7:21:44:5f:60:87:3f:
         84:d6:a6:a4:99:3b:37:3d:8c:76:dc:18:8e:61:84:7a:07:96:
         62:37:d9:24:20:07:b3:3e:51:29:b6:37:1c:88:31:aa:96:f1:
         3d:7f:2f:0e:d5:e3:d2:bb:d5:cd:8b:2e:2e:e5:b7:6f:cf:74:
         b2:55:d9:00:e7:4a:c6:6b:b5:5a:2b:2a:0a:f8:bf:7e:f7:c0:
         28:15:f8:b6
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUExYZk6/cjKBHM8e+F80P6TyOLSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdBNTRDRDY4RjlCNzY0QkQzRTdGRUMzM0I5MjhDMDJE
MjVGOEQ4ODAeFw0yNjAyMTkxMjU0MDVaFw0yNzAyMTgxMjU5MDVaMDMxMTAvBgNV
BAMTKEU4NDA0QjA1NUU4Q0ZEMTQ2RkNFRTgwMjlBMzA5RTE5MDE3NkQ4QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+XQ7Z3XNw6JEGwRaLLD1/Z4eL
Ys0fnwmmBgh297WuPN+eTHx0eYwkI02k1ekbsOd9V8Kw0CdR+6/jdF63hR6ZDkCZ
WuuMJkHuoFWKf461mbievqNPv3CKjH838LkcgyoJVd2OmAhRrGPGYUqcmXXiGqo1
VbWeFtvpbnUM+EyVn7Y50dIklRRVIuHflz+ndy6/9i53LdVUxOnov2Mk0bkehRvH
6hdHHgRRmtfRMO+Niz7YpKatuYh/gPfPeAjOX0TS/igYazScMB8E9LLjCaVpeNOb
8CZrneDV3EhrJfvemqYVjkrC3RYj77AjwcmgbTJnlVUsxyTWkDT7R58xDr27AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU6EBLBV6M/RRvzugCmjCeGQF22L0wHwYDVR0j
BBgwFoAUh6VM1o+bdkvT5/7DO5KMAtJfjYgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFhYZzZ5V1lFQk5FanFQa3FjcG8xQVd4VEFtWnpuRXBDZGJ1V2s1eXpo
ZUQvMC84N0E1NENENjhGOUI3NjRCRDNFN0ZFQzMzQjkyOEMwMkQyNUY4RDg4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3QTU0Q0Q2OEY5Qjc2NEJE
M0U3RkVDMzNCOTI4QzAyRDI1RjhEODguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRYWGc2eVdZRUJORWpxUGtxY3BvMUFXeFRBbVp6bkVwQ2RidVdrNXl6aGVELzAv
MzIzODMwMzQzYTM2MzM2MTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzMzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARjqDANBgkqhkiG9w0BAQsFAAOCAQEAOz6YJliZ
qImG26mu8K0FipZIEzGBuQXwXvjE+VSd5TaUi3C5Nc0CNakKwyu85cn3DyTprBo4
SayTXNmyVl2nrP2ntORoYkMiuSFCcBE1jy3akfbqY0TL/Q6TzRChHcje0iRZa2ty
EVJDTqOs/6wLRFVVz0PiMCQMbyEqH1PLKlG+0IYF6SNBKUWfUs8kMKbADu5X/P+q
f94F3Hkfw5kNWExmq87fNQpjBASCHfmnIURfYIc/hNampJk7Nz2MdtwYjmGEegeW
YjfZJCAHsz5RKbY3HIgxqpbxPX8vDtXj0rvVzYsuLuW3b890slXZAOdKxmu1Wisq
Cvi/fvfAKBX4tg==
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:56:27 2026 by rpki-client