Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKHt7C2jCb4uAUFaL1DLvdBGbjvWxGsP1w2b7Y7D6Pbg/0/323830343a393761633a3a2f33322d3332203d3e20323735363338.roa
File:                     323830343a393761633a3a2f33322d3332203d3e20323735363338.roa (raw, json)
Hash identifier:          h+/vBGLHO0kKikgjzrv1iCeKYBZCyxK9vkRDwDOhTJQ=
Subject key identifier:   03:30:16:FC:8C:73:9E:86:B6:65:3E:3D:7D:8B:9F:0E:D3:28:F1:2C
Certificate issuer:       /CN=A496651C216BE38E28B8315F0C99D684687935E7
Certificate serial:       1F53E787D51DAE23A8C3A424DBD1E8E01A07B6B6
Authority key identifier: A4:96:65:1C:21:6B:E3:8E:28:B8:31:5F:0C:99:D6:84:68:79:35:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A496651C216BE38E28B8315F0C99D684687935E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKHt7C2jCb4uAUFaL1DLvdBGbjvWxGsP1w2b7Y7D6Pbg/0/323830343a393761633a3a2f33322d3332203d3e20323735363338.roa
Signing time:             Wed 18 Feb 2026 15:01:38 +0000
ROA not before:           Wed 18 Feb 2026 14:56:38 +0000
ROA not after:            Wed 17 Feb 2027 15:01:38 +0000
asID:                     275638
IP address blocks:        2804:97ac::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKHt7C2jCb4uAUFaL1DLvdBGbjvWxGsP1w2b7Y7D6Pbg/0/A496651C216BE38E28B8315F0C99D684687935E7.crl
                          rsync://rpki-repo.registro.br/repo/CKHt7C2jCb4uAUFaL1DLvdBGbjvWxGsP1w2b7Y7D6Pbg/0/A496651C216BE38E28B8315F0C99D684687935E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A496651C216BE38E28B8315F0C99D684687935E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 02:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:53:e7:87:d5:1d:ae:23:a8:c3:a4:24:db:d1:e8:e0:1a:07:b6:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A496651C216BE38E28B8315F0C99D684687935E7
        Validity
            Not Before: Feb 18 14:56:38 2026 GMT
            Not After : Feb 17 15:01:38 2027 GMT
        Subject: CN=033016FC8C739E86B6653E3D7D8B9F0ED328F12C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:26:4f:41:a1:ae:fe:06:9e:05:8f:a7:19:35:
                    cd:c0:0c:c0:52:b4:aa:10:3f:e3:49:ee:b3:cd:92:
                    7f:cd:65:8d:5d:d5:f1:85:2f:4c:ee:03:6b:dd:5d:
                    6d:4e:87:2f:32:48:10:d8:5d:1c:1a:b1:49:cd:d2:
                    df:4f:1f:54:db:04:32:96:e6:c1:ad:c1:1d:da:12:
                    42:b4:bf:20:21:cd:c5:83:a2:bb:28:7d:23:f3:f9:
                    d5:81:63:78:3d:36:fd:ef:0a:ab:18:bd:10:b3:6c:
                    67:41:2c:b7:89:21:f0:51:37:b0:2d:20:bd:90:bf:
                    8d:cc:52:d5:85:45:e7:10:05:f7:a5:47:0f:de:b8:
                    14:3a:e2:a4:5b:ce:b4:2a:57:e6:c2:aa:b9:e7:02:
                    e7:b4:13:39:55:83:9e:82:31:bc:64:87:64:97:62:
                    af:1d:64:19:2c:63:b6:86:7a:c3:ea:c3:ae:3b:4d:
                    38:22:33:6b:7d:58:57:b2:35:fc:6a:aa:3f:d5:d9:
                    29:7d:28:4a:2d:88:39:0c:76:7c:e6:88:68:02:4a:
                    1d:0d:f8:a6:50:30:51:50:f1:ec:90:c2:68:37:3d:
                    b4:14:b7:4d:ff:61:b6:c2:f5:b7:aa:9e:bf:17:07:
                    da:7d:2a:12:c5:41:22:ce:41:2d:43:64:2d:65:61:
                    63:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:30:16:FC:8C:73:9E:86:B6:65:3E:3D:7D:8B:9F:0E:D3:28:F1:2C
            X509v3 Authority Key Identifier:
                keyid:A4:96:65:1C:21:6B:E3:8E:28:B8:31:5F:0C:99:D6:84:68:79:35:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKHt7C2jCb4uAUFaL1DLvdBGbjvWxGsP1w2b7Y7D6Pbg/0/A496651C216BE38E28B8315F0C99D684687935E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A496651C216BE38E28B8315F0C99D684687935E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKHt7C2jCb4uAUFaL1DLvdBGbjvWxGsP1w2b7Y7D6Pbg/0/323830343a393761633a3a2f33322d3332203d3e20323735363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:97ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:8d:21:71:d3:e3:e1:c1:e9:d5:10:28:1f:c2:65:a4:a7:64:
         c1:cd:17:d7:2e:ce:1e:a5:c2:ab:cc:92:62:94:2f:06:bb:7d:
         ab:dc:3f:b2:19:86:3b:ed:55:ef:a1:60:09:8b:f5:a3:df:00:
         d9:76:34:91:a8:d1:af:93:4c:d7:86:6d:2b:54:93:76:7e:59:
         8c:20:10:10:3d:aa:47:da:0a:c5:a5:85:f1:da:75:c1:56:3d:
         c7:5b:ee:10:a0:a4:44:3f:9f:f6:6a:d4:18:c5:0c:79:7e:11:
         82:87:36:78:34:7d:c3:54:35:16:29:78:7f:1a:90:b7:dc:d6:
         8e:6d:f1:b1:fd:be:ab:81:cc:ea:4c:85:06:4b:84:0d:72:95:
         19:2f:7a:3e:e3:6b:11:f7:7c:81:71:ba:28:f0:b4:27:ce:2c:
         d0:0f:e2:c9:45:f5:7c:08:69:46:eb:09:ef:e2:83:4b:e0:c4:
         1f:13:d3:f8:57:ba:a3:24:6d:c7:9b:1b:4d:34:18:6b:2d:f0:
         d0:2d:3f:ab:db:4c:4c:85:06:6d:1d:85:43:39:b9:24:8c:ca:
         58:f0:78:00:2a:9e:e1:7c:e3:b0:9f:7b:23:a3:29:2c:3f:cf:
         9c:16:64:dc:4a:a5:a9:2b:13:dd:c1:e6:bb:0f:bb:e9:2d:19:
         74:4b:ee:e6
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUH1Pnh9UdriOow6Qk29Ho4BoHtrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ5NjY1MUMyMTZCRTM4RTI4QjgzMTVGMEM5OUQ2ODQ2
ODc5MzVFNzAeFw0yNjAyMTgxNDU2MzhaFw0yNzAyMTcxNTAxMzhaMDMxMTAvBgNV
BAMTKDAzMzAxNkZDOEM3MzlFODZCNjY1M0UzRDdEOEI5RjBFRDMyOEYxMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChJk9Boa7+Bp4Fj6cZNc3ADMBS
tKoQP+NJ7rPNkn/NZY1d1fGFL0zuA2vdXW1Ohy8ySBDYXRwasUnN0t9PH1TbBDKW
5sGtwR3aEkK0vyAhzcWDorsofSPz+dWBY3g9Nv3vCqsYvRCzbGdBLLeJIfBRN7At
IL2Qv43MUtWFRecQBfelRw/euBQ64qRbzrQqV+bCqrnnAue0EzlVg56CMbxkh2SX
Yq8dZBksY7aGesPqw647TTgiM2t9WFeyNfxqqj/V2Sl9KEotiDkMdnzmiGgCSh0N
+KZQMFFQ8eyQwmg3PbQUt03/YbbC9beqnr8XB9p9KhLFQSLOQS1DZC1lYWORAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUAzAW/Ixznoa2ZT49fYufDtMo8SwwHwYDVR0j
BBgwFoAUpJZlHCFr444ouDFfDJnWhGh5NecwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0tIdDdDMmpDYjR1QVVGYUwxREx2ZEJHYmp2V3hHc1AxdzJiN1k3RDZQ
YmcvMC9BNDk2NjUxQzIxNkJFMzhFMjhCODMxNUYwQzk5RDY4NDY4NzkzNUU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0OTY2NTFDMjE2QkUzOEUy
OEI4MzE1RjBDOTlENjg0Njg3OTM1RTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NLSHQ3QzJqQ2I0dUFVRmFMMURMdmRCR2Jqdld4R3NQMXcyYjdZN0Q2UGJnLzAv
MzIzODMwMzQzYTM5Mzc2MTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzM1
MzYzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASXrDANBgkqhkiG9w0BAQsFAAOCAQEAHY0hcdPj
4cHp1RAoH8JlpKdkwc0X1y7OHqXCq8ySYpQvBrt9q9w/shmGO+1V76FgCYv1o98A
2XY0kajRr5NM14ZtK1STdn5ZjCAQED2qR9oKxaWF8dp1wVY9x1vuEKCkRD+f9mrU
GMUMeX4Rgoc2eDR9w1Q1Fil4fxqQt9zWjm3xsf2+q4HM6kyFBkuEDXKVGS96PuNr
Efd8gXG6KPC0J84s0A/iyUX1fAhpRusJ7+KDS+DEHxPT+Fe6oyRtx5sbTTQYay3w
0C0/q9tMTIUGbR2FQzm5JIzKWPB4ACqe4XzjsJ97I6MpLD/PnBZk3EqlqSsT3cHm
uw+76S0ZdEvu5g==
-----END CERTIFICATE-----
Generated at Mon Feb 23 02:51:47 2026 by rpki-client