Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/0/323830343a323062383a3a2f33332d3333203d3e20323634353130.roa
File:                     323830343a323062383a3a2f33332d3333203d3e20323634353130.roa (raw, json)
Hash identifier:          WXM0tTDSFgq6wDmdasjPk1hQvw3hGE9FLzRhhpVqs/o=
Subject key identifier:   89:3A:53:E2:F6:34:63:45:F3:81:3B:59:C6:38:BA:E0:68:3B:43:94
Certificate issuer:       /CN=FF17677ED063D237B582E0298BAD1EFE8EF1CA86
Certificate serial:       151A41BFFA2DD04BAB4BEB0CAC0FD3F3A9FBED00
Authority key identifier: FF:17:67:7E:D0:63:D2:37:B5:82:E0:29:8B:AD:1E:FE:8E:F1:CA:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF17677ED063D237B582E0298BAD1EFE8EF1CA86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/0/323830343a323062383a3a2f33332d3333203d3e20323634353130.roa
Signing time:             Thu 19 Feb 2026 01:02:43 +0000
ROA not before:           Thu 19 Feb 2026 00:57:43 +0000
ROA not after:            Thu 18 Feb 2027 01:02:43 +0000
asID:                     264510
IP address blocks:        2804:20b8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/0/FF17677ED063D237B582E0298BAD1EFE8EF1CA86.crl
                          rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/0/FF17677ED063D237B582E0298BAD1EFE8EF1CA86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF17677ED063D237B582E0298BAD1EFE8EF1CA86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 18:38:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:1a:41:bf:fa:2d:d0:4b:ab:4b:eb:0c:ac:0f:d3:f3:a9:fb:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF17677ED063D237B582E0298BAD1EFE8EF1CA86
        Validity
            Not Before: Feb 19 00:57:43 2026 GMT
            Not After : Feb 18 01:02:43 2027 GMT
        Subject: CN=893A53E2F6346345F3813B59C638BAE0683B4394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:b8:13:84:af:e3:c4:3a:17:c2:e0:fa:21:
                    ae:97:0f:73:4b:4b:96:16:3c:09:f7:9b:73:76:2f:
                    3f:08:cd:5a:4d:18:3a:de:84:c1:63:ea:93:eb:b9:
                    fc:4e:fd:28:26:1c:e4:3d:41:cf:e5:e3:4f:19:d8:
                    74:8a:4a:a1:ee:67:00:8c:f9:bf:a9:e7:3c:04:9e:
                    46:bd:be:1c:99:60:c8:5d:07:ef:0f:8d:89:bd:2c:
                    e9:ee:97:cf:d1:8a:49:a1:89:47:d2:41:5e:d3:46:
                    4e:21:6b:16:de:82:cd:02:41:22:1a:2d:a9:7b:a4:
                    3c:80:44:53:6f:2e:39:81:9a:1a:e9:56:82:17:f8:
                    48:ec:c2:4e:8c:65:95:41:d4:f1:69:cf:9e:40:ae:
                    94:07:25:42:8c:13:4d:5a:a1:ae:63:38:49:ac:7e:
                    02:d4:09:45:28:81:cc:43:45:91:10:3c:31:ba:9f:
                    e9:a7:17:98:38:aa:aa:16:67:3e:82:cc:ab:7d:ef:
                    bf:ec:2c:e8:e8:22:e4:6a:45:e8:e9:a9:73:41:b2:
                    97:fc:db:b8:fd:08:5b:ce:91:60:e7:e4:28:8b:be:
                    b1:c3:07:ee:b8:7b:b5:d5:61:06:ce:f2:98:d1:ac:
                    c8:69:90:49:87:fd:7c:37:cf:99:73:46:58:ec:86:
                    b4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3A:53:E2:F6:34:63:45:F3:81:3B:59:C6:38:BA:E0:68:3B:43:94
            X509v3 Authority Key Identifier:
                keyid:FF:17:67:7E:D0:63:D2:37:B5:82:E0:29:8B:AD:1E:FE:8E:F1:CA:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/0/FF17677ED063D237B582E0298BAD1EFE8EF1CA86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF17677ED063D237B582E0298BAD1EFE8EF1CA86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/0/323830343a323062383a3a2f33332d3333203d3e20323634353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b8::/33

    Signature Algorithm: sha256WithRSAEncryption
         8e:7a:56:1e:c9:cc:6a:55:7f:7a:3d:c5:61:ec:5e:d5:d3:c8:
         d8:23:47:49:2e:22:bc:6e:ec:7e:f0:f9:49:8d:da:f3:20:d1:
         88:a6:b1:c3:0a:de:34:48:f9:33:96:4a:dc:9e:c2:9d:06:8c:
         f8:24:fa:0e:00:a1:f3:5f:72:1c:30:3c:4d:f5:f7:b8:b0:15:
         be:df:43:48:3a:08:b4:f3:12:8f:d3:4e:67:f0:ad:3a:ed:33:
         49:fc:f9:dd:c4:bb:c7:cd:dc:d7:74:a7:ad:4e:d2:3a:20:76:
         4d:c7:e2:25:67:00:ff:2c:de:94:f7:cf:ce:39:88:0d:84:0a:
         7b:26:55:66:11:9b:13:b2:ea:e9:fd:6b:9d:74:a5:4f:54:34:
         27:1e:88:5b:fd:8e:57:62:77:23:3f:89:47:56:19:d4:ec:85:
         c2:06:97:41:b1:30:80:a1:b6:94:10:7a:e0:1d:ca:50:f4:b6:
         ec:a2:ee:06:ba:1d:33:0a:e8:70:92:b9:2d:95:ec:a0:2f:db:
         e9:e5:1b:12:75:b1:64:98:17:02:7f:33:73:58:29:69:5e:7f:
         3f:de:08:fc:76:05:c4:61:0e:fe:d8:af:73:53:d1:bb:0d:ae:
         45:97:94:27:9b:e2:4a:27:d5:3b:c7:81:b7:3f:7b:e4:4f:cc:
         16:6c:fa:e3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFRpBv/ot0EurS+sMrA/T86n77QAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkYxNzY3N0VEMDYzRDIzN0I1ODJFMDI5OEJBRDFFRkU4
RUYxQ0E4NjAeFw0yNjAyMTkwMDU3NDNaFw0yNzAyMTgwMTAyNDNaMDMxMTAvBgNV
BAMTKDg5M0E1M0UyRjYzNDYzNDVGMzgxM0I1OUM2MzhCQUUwNjgzQjQzOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgirgThK/jxDoXwuD6Ia6XD3NL
S5YWPAn3m3N2Lz8IzVpNGDrehMFj6pPrufxO/SgmHOQ9Qc/l408Z2HSKSqHuZwCM
+b+p5zwEnka9vhyZYMhdB+8PjYm9LOnul8/RikmhiUfSQV7TRk4haxbegs0CQSIa
Lal7pDyARFNvLjmBmhrpVoIX+Ejswk6MZZVB1PFpz55ArpQHJUKME01aoa5jOEms
fgLUCUUogcxDRZEQPDG6n+mnF5g4qqoWZz6CzKt977/sLOjoIuRqRejpqXNBspf8
27j9CFvOkWDn5CiLvrHDB+64e7XVYQbO8pjRrMhpkEmH/Xw3z5lzRljshrS7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUiTpT4vY0Y0XzgTtZxji64Gg7Q5QwHwYDVR0j
BBgwFoAU/xdnftBj0je1guApi60e/o7xyoYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1dpek0xNTNCYTlrdThjazFHNHJBV2JKNjFuWFVVMXlxM3cxVmdQd3lY
UEEvMC9GRjE3Njc3RUQwNjNEMjM3QjU4MkUwMjk4QkFEMUVGRThFRjFDQTg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGMTc2NzdFRDA2M0QyMzdC
NTgyRTAyOThCQUQxRUZFOEVGMUNBODYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdXaXpNMTUzQmE5a3U4Y2sxRzRyQVdiSjYxblhVVTF5cTN3MVZnUHd5WFBBLzAv
MzIzODMwMzQzYTMyMzA2MjM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM0
MzUzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQguAAwDQYJKoZIhvcNAQELBQADggEBAI56Vh7J
zGpVf3o9xWHsXtXTyNgjR0kuIrxu7H7w+UmN2vMg0YimscMK3jRI+TOWStyewp0G
jPgk+g4AofNfchwwPE3197iwFb7fQ0g6CLTzEo/TTmfwrTrtM0n8+d3Eu8fN3Nd0
p61O0jogdk3H4iVnAP8s3pT3z845iA2ECnsmVWYRmxOy6un9a510pU9UNCceiFv9
jldidyM/iUdWGdTshcIGl0GxMIChtpQQeuAdylD0tuyi7ga6HTMK6HCSuS2V7KAv
2+nlGxJ1sWSYFwJ/M3NYKWlefz/eCPx2BcRhDv7Yr3NT0bsNrkWXlCeb4kon1TvH
gbc/e+RPzBZs+uM=
-----END CERTIFICATE-----
Generated at Mon Feb 23 04:19:18 2026 by rpki-client