Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/323830343a353132383a3a2f33322d3438203d3e20323638343334.roa
File:                     323830343a353132383a3a2f33322d3438203d3e20323638343334.roa (raw, json)
Hash identifier:          xLvHWoKX20d8OcFFYrVYVfICqVg9Q7VWrKywRxvRoB8=
Subject key identifier:   3C:BE:12:7E:1B:9D:1A:74:6F:67:FE:E7:FA:4D:D7:14:A1:82:68:60
Certificate issuer:       /CN=C9AFDAFB3AF74A8CA0832B076914D7A4A4425648
Certificate serial:       66EE153B2524A21EF360E577C771923902B7F6D3
Authority key identifier: C9:AF:DA:FB:3A:F7:4A:8C:A0:83:2B:07:69:14:D7:A4:A4:42:56:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/323830343a353132383a3a2f33322d3438203d3e20323638343334.roa
Signing time:             Fri 20 Feb 2026 23:23:28 +0000
ROA not before:           Fri 20 Feb 2026 23:18:28 +0000
ROA not after:            Fri 19 Feb 2027 23:23:28 +0000
asID:                     268434
IP address blocks:        2804:5128::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.crl
                          rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 02:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ee:15:3b:25:24:a2:1e:f3:60:e5:77:c7:71:92:39:02:b7:f6:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9AFDAFB3AF74A8CA0832B076914D7A4A4425648
        Validity
            Not Before: Feb 20 23:18:28 2026 GMT
            Not After : Feb 19 23:23:28 2027 GMT
        Subject: CN=3CBE127E1B9D1A746F67FEE7FA4DD714A1826860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:89:3b:10:9e:b3:d1:73:e7:a5:09:66:cc:c0:
                    0a:24:1a:45:44:34:2a:3d:89:22:15:51:a7:6e:2a:
                    91:60:d7:ea:d5:c9:cf:c6:ee:81:c6:31:e0:56:0a:
                    b0:8f:00:b7:b5:db:fd:0d:5c:f7:b0:e5:c1:8c:48:
                    4a:6d:72:a5:b7:1d:af:32:55:e9:c8:5d:37:b7:2a:
                    16:96:6e:48:1f:21:03:7f:12:19:95:d9:b5:e4:4c:
                    6f:43:a1:ab:6e:c7:7c:4c:78:6b:77:cf:ca:59:e6:
                    ba:c7:5e:21:91:5a:ce:df:47:14:9b:41:34:c3:2a:
                    97:a9:17:a7:de:a7:d1:f0:bf:34:14:95:bf:fc:ce:
                    74:b0:a6:0f:ef:7a:02:2c:71:1e:9c:a3:69:f4:bb:
                    b3:a6:fc:76:05:74:53:fa:ad:3e:eb:e9:79:81:23:
                    76:7c:c4:a8:94:5f:4c:40:6c:a4:73:be:51:40:bf:
                    c1:54:2d:3c:65:6c:45:47:21:8d:d9:2a:d1:36:fd:
                    70:53:1f:1d:2e:92:dc:af:66:74:d0:2b:da:25:00:
                    22:14:d1:66:b7:c2:e1:cd:4b:49:34:74:62:51:e6:
                    53:3c:29:51:b8:09:52:b2:66:51:cf:cb:a5:92:d7:
                    bc:ee:ef:e4:bf:a0:bd:27:dd:66:bf:0d:6e:f9:4a:
                    b5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BE:12:7E:1B:9D:1A:74:6F:67:FE:E7:FA:4D:D7:14:A1:82:68:60
            X509v3 Authority Key Identifier:
                keyid:C9:AF:DA:FB:3A:F7:4A:8C:A0:83:2B:07:69:14:D7:A4:A4:42:56:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/323830343a353132383a3a2f33322d3438203d3e20323638343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5128::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:d7:d0:00:e9:d7:00:e8:50:f3:5f:9d:60:74:b0:f3:74:cd:
         91:5a:70:79:72:91:f3:f0:42:da:3c:5e:fb:c0:6a:07:73:c7:
         db:aa:5d:eb:30:8e:5c:44:f6:51:07:e5:37:79:a1:48:d1:97:
         0b:57:ce:fc:38:87:f2:18:77:f1:11:19:dc:94:80:67:83:d7:
         24:e5:3d:8e:37:0c:39:fd:73:09:cc:98:48:f1:66:76:a0:15:
         e7:09:26:d6:30:58:c0:07:b6:25:ba:25:5c:9a:36:7a:10:b1:
         61:c9:2b:9c:7f:99:03:17:28:e1:3c:94:fb:49:19:b0:eb:bd:
         2a:61:0b:ec:9e:a9:6d:e8:5d:5f:f8:1b:1b:d6:4f:17:0e:da:
         1f:b5:5f:86:08:65:cd:c5:79:22:c2:74:4b:87:e8:87:96:ef:
         c6:1e:63:09:7f:e5:b9:c5:0c:30:74:96:bb:63:1c:75:e4:3c:
         15:5a:61:00:f2:55:fb:ca:43:1f:5b:f7:30:38:af:6d:33:12:
         23:7c:8c:fc:71:b6:f6:f6:1d:98:5d:af:c1:77:d8:0d:1e:8c:
         f4:98:52:ee:40:79:06:79:86:68:85:5a:80:1f:d3:36:d6:0e:
         ed:54:a0:84:12:b3:67:e0:df:93:6b:7c:dd:41:fd:54:7f:4c:
         be:16:fe:7e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZu4VOyUkoh7zYOV3x3GSOQK39tMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlBRkRBRkIzQUY3NEE4Q0EwODMyQjA3NjkxNEQ3QTRB
NDQyNTY0ODAeFw0yNjAyMjAyMzE4MjhaFw0yNzAyMTkyMzIzMjhaMDMxMTAvBgNV
BAMTKDNDQkUxMjdFMUI5RDFBNzQ2RjY3RkVFN0ZBNERENzE0QTE4MjY4NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCriTsQnrPRc+elCWbMwAokGkVE
NCo9iSIVUaduKpFg1+rVyc/G7oHGMeBWCrCPALe12/0NXPew5cGMSEptcqW3Ha8y
VenIXTe3KhaWbkgfIQN/EhmV2bXkTG9Doatux3xMeGt3z8pZ5rrHXiGRWs7fRxSb
QTTDKpepF6fep9HwvzQUlb/8znSwpg/vegIscR6co2n0u7Om/HYFdFP6rT7r6XmB
I3Z8xKiUX0xAbKRzvlFAv8FULTxlbEVHIY3ZKtE2/XBTHx0uktyvZnTQK9olACIU
0Wa3wuHNS0k0dGJR5lM8KVG4CVKyZlHPy6WS17zu7+S/oL0n3Wa/DW75SrV3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUPL4SfhudGnRvZ/7n+k3XFKGCaGAwHwYDVR0j
BBgwFoAUya/a+zr3SoyggysHaRTXpKRCVkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3FhUFhDR3RORldqOG1DcThCS1djd0VDWWZWMWZVUmJ1YjRqRnkxUEFI
RHIvMC9DOUFGREFGQjNBRjc0QThDQTA4MzJCMDc2OTE0RDdBNEE0NDI1NjQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5QUZEQUZCM0FGNzRBOENB
MDgzMkIwNzY5MTREN0E0QTQ0MjU2NDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dxYVBYQ0d0TkZXajhtQ3E4QktXY3dFQ1lmVjFmVVJidWI0akZ5MVBBSERyLzAv
MzIzODMwMzQzYTM1MzEzMjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzQzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARRKDANBgkqhkiG9w0BAQsFAAOCAQEAQtfQAOnX
AOhQ81+dYHSw83TNkVpweXKR8/BC2jxe+8BqB3PH26pd6zCOXET2UQflN3mhSNGX
C1fO/DiH8hh38REZ3JSAZ4PXJOU9jjcMOf1zCcyYSPFmdqAV5wkm1jBYwAe2Jbol
XJo2ehCxYckrnH+ZAxco4TyU+0kZsOu9KmEL7J6pbehdX/gbG9ZPFw7aH7Vfhghl
zcV5IsJ0S4foh5bvxh5jCX/lucUMMHSWu2McdeQ8FVphAPJV+8pDH1v3MDivbTMS
I3yM/HG29vYdmF2vwXfYDR6M9JhS7kB5BnmGaIVagB/TNtYO7VSghBKzZ+Dfk2t8
3UH9VH9Mvhb+fg==
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:47:57 2026 by rpki-client